last executing test programs: 25m44.929773297s ago: executing program 4 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000006e020000000000000000"]) 25m44.133506249s ago: executing program 4 (id=623): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x37) 25m43.984392214s ago: executing program 4 (id=625): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xfffd, 0x0, 0xfffffe0000000001, 0xfa15, 0xff7ffffe}, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x3, 0x3, 0x0) r6 = fanotify_init(0x200, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r6, 0x161, 0x40000867, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r7, 0x4142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 25m37.311606851s ago: executing program 4 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="802100000000000008000d00000008"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 25m36.002430911s ago: executing program 4 (id=639): chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc3688000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950047e60000000085100000f5ffffffbf91000000053b00b70200000000000085000000850000ff01000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r9, @ANYBLOB="bed89fbc060007260f0000000000000019b72c6d3ee2a14256000000005da05a3ae0ede98aecb50e728f84e35895a8955a66cb321af019d48bfd0be337963acfb2e4c97e9468c548eb5adbe330bd3abab7fd8ddf418a9d903ec0562cfc489bbab56fda5a5c608cb6f7411ed2a430d1"], 0x50}, 0x4, 0x700000000000000}, 0x0) 25m34.263259872s ago: executing program 4 (id=641): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000010101010023c0b7a70000000200000006001240000400003800018006000340000c00002c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000000c0019800800010005"], 0x60}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x3, 0x0, 0xb0b0b0b0}) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34e}, &(0x7f0000000600), &(0x7f00000005c0)) 25m18.958368847s ago: executing program 32 (id=641): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000010101010023c0b7a70000000200000006001240000400003800018006000340000c00002c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000000c0019800800010005"], 0x60}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140), 0x3, 0x0, 0xb0b0b0b0}) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34e}, &(0x7f0000000600), &(0x7f00000005c0)) 19m48.769274505s ago: executing program 0 (id=1412): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000051b7f020510452516aaa0102030209021b0001010010000904ec0201af3af30009050502"], 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffffffffffff51, 0x5, 0x0, 0x0, 0x0, 0x1, 0x2, 0x2, 0x7}, 0x0) syz_usb_connect(0x7, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') syz_io_uring_setup(0xf04, &(0x7f00000002c0)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000, 0x0, r3}, 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x8, 0x200) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r4 = getpid() r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x40, 0xffff, 0x9, 0x3ff, 0x6}, &(0x7f0000000440)=0x14) r9 = syz_pidfd_open(r4, 0x0) setns(r9, 0x24020000) 19m41.703347313s ago: executing program 0 (id=1424): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r2 = socket(0x10, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x74000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(r4, &(0x7f0000002000)='`', 0x88020) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1000000000000347) 19m38.278339549s ago: executing program 0 (id=1433): chdir(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc3688000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950047e60000000085100000f5ffffffbf91000000053b00b70200000000000085000000850000ff01000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, 0x0) fsmount(r5, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="4d7e00000000000000002a00000008002f00ffffffff05003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r9, @ANYBLOB="bed89fbc060007260f0000000000000019b72c6d3ee2a14256000000005da05a3ae0ede98aecb50e728f84e35895a8955a66cb321af019d48bfd0be337963acfb2e4c97e9468c548eb5adbe330bd3abab7fd8ddf418a9d903ec0562cfc489bbab56fda5a5c608cb6f7411ed2a430d1"], 0x50}, 0x4, 0x700000000000000}, 0x0) 19m36.786998468s ago: executing program 0 (id=1434): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 19m35.673465095s ago: executing program 0 (id=1438): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) 19m34.457179401s ago: executing program 0 (id=1444): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000010101010023c0b7a70000000200000006001240000400003800018006000340000c00002c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000000c0019800800010005000000"], 0x60}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xb0b0b0b0}) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34e}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 19m18.991895161s ago: executing program 33 (id=1444): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r4 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r4, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r6, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000010101010023c0b7a70000000200000006001240000400003800018006000340000c00002c00018014000300fe8000000000000000000000000000aa14000400fc0100000000000000000000000000000c0019800800010005000000"], 0x60}}, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000500)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xb0b0b0b0}) syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34e}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 18m55.882580699s ago: executing program 5 (id=1529): pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000100)=0x3ff) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 18m55.131340365s ago: executing program 5 (id=1531): r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 18m54.581381585s ago: executing program 5 (id=1533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006d80)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) 18m52.767315357s ago: executing program 5 (id=1536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) 18m50.907618258s ago: executing program 5 (id=1542): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dd:cb2e') lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, 0x1, 0x2, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x800) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10000880}, 0x0) 18m49.91619393s ago: executing program 5 (id=1544): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r6, 0xffffffffffffffff, 0x43) 18m34.665095267s ago: executing program 34 (id=1544): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) getdents64(r6, 0xffffffffffffffff, 0x43) 4m33.36922454s ago: executing program 1 (id=4337): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') syz_open_dev$MSR(0x0, 0x238, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_request={0xf, 0x0, 0x0, 0x9b, 0x11}}}}}, 0x0) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 4m33.197820275s ago: executing program 1 (id=4339): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x2}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 4m32.039485334s ago: executing program 1 (id=4345): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000600)=0x65) 4m31.673456202s ago: executing program 1 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) 4m30.541313295s ago: executing program 1 (id=4348): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1008f}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0/file0\x00'}, 0x6e) read$FUSE(r0, &(0x7f000000a400)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006400)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 4m30.062054588s ago: executing program 1 (id=4350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e020000000900010073008030000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 4m15.003044325s ago: executing program 35 (id=4350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0x4) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='source', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0x54}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e020000000900010073008030000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 24.203636071s ago: executing program 2 (id=4883): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x40448c0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 23.424264911s ago: executing program 2 (id=4884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x6d, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 20.964797689s ago: executing program 2 (id=4885): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 20.058133067s ago: executing program 2 (id=4886): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x3, 0x0, 0xffdfffff}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0x2}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, 0x0, 0x1ff) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 18.28450166s ago: executing program 2 (id=4892): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f0000003a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xffffff83, @local, 0x9}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x4c040) 17.997273679s ago: executing program 2 (id=4895): ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7cb, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 12.165238409s ago: executing program 7 (id=4907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r5, 0xffffffffffffffff, 0x11, 0x0, r5}, 0x11) setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 10.876175655s ago: executing program 7 (id=4908): ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0xfffffffe, 0xffffffff, 0x23}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffe, 0x5}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.712763089s ago: executing program 7 (id=4911): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="0200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x2, "c646"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f0000000140)={0x40, 0x9, 0x2, "8841"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 7.373276345s ago: executing program 3 (id=4914): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000240), 0x0}, 0x20) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r4, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x20000814}, 0x4000810) 7.247325741s ago: executing program 6 (id=4915): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0b0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = eventfd(0x5) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6.916410389s ago: executing program 8 (id=4917): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x0, 0x56, &(0x7f0000000440)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 6.356595138s ago: executing program 6 (id=4918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000014000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000080000000060a010400000000000000000100000008000b40000000005800048028000180090001006c61737400000000180002800c000240000000000000000908000140000000012cc50d000000010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a"], 0xf4}}, 0x0) 6.026654007s ago: executing program 6 (id=4919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 5.794237729s ago: executing program 6 (id=4920): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 5.652996568s ago: executing program 8 (id=4921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x6}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xe4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000001f80)=""/4082, 0xff2) 5.497273319s ago: executing program 7 (id=4922): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) 5.474334502s ago: executing program 6 (id=4923): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000000}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x9, 0x0, 0x0, 0x7ff, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffff3}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x103, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x93a, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x1002, 0x0, 0x0, 0xa, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x3, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.391834989s ago: executing program 8 (id=4924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x6d, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.669231276s ago: executing program 6 (id=4925): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000571c25288ed3fb12a7efd5aac2de365d6103e739ff18ed16d53c2ca2916fb8edc58f983350845b706773768e2fb3177497f0460c6cbceea0ab5885f078c410"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0, 0xfffffffffffffe9a}) 4.47315213s ago: executing program 7 (id=4926): syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x100000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xf7e6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) 2.737488378s ago: executing program 36 (id=4895): ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7cb, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x0, 0x0, 0x5, 0x0}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, "b0d5b301d1f8337291bd9c59c55dc059097d659cfe0320cadd0901cd3b14689e1c77bcf683e35c68f0455930ab19ce80052e1b4d478fc7c371bd292e05a810", 0x3a}, 0x80, 0x0}}], 0x1, 0x48094) 2.728437813s ago: executing program 3 (id=4928): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x580, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0xff0f, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x6, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setreuid(0xee01, 0xee01) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r5, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 2.68138478s ago: executing program 8 (id=4929): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x2, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x128) 2.298589282s ago: executing program 8 (id=4930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206030000000000000000000000000014000780080012400000000005001500010000800500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.383708924s ago: executing program 3 (id=4931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x0, 0x56, &(0x7f0000000440)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 942.070569ms ago: executing program 7 (id=4932): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="0200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x40, 0x5, 0x2, "c646"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x18, &(0x7f0000000140)={0x40, 0x9, 0x2, "8841"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 743.092217ms ago: executing program 3 (id=4933): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) 695.975825ms ago: executing program 8 (id=4934): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB="000044e4565a620200"], 0x50) 561.727303ms ago: executing program 3 (id=4935): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000000}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x7, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x9, 0x0, 0x0, 0x7ff, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xfffffff3}, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x103, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x93a, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x1002, 0x0, 0x0, 0xa, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x3, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 0s ago: executing program 3 (id=4936): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x2) kernel console output (not intermixed with test programs): -1: Manufacturer: syz [ 1548.869714][ T6013] usb 7-1: SerialNumber: syz [ 1549.000797][ T6013] ti_usb_3410_5052 7-1:1.236: TI USB 5052 2 port adapter converter detected [ 1549.843484][T19562] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1551.055352][ T31] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1551.205302][ T31] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1551.205325][ T31] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1551.205340][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1551.205380][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1551.205399][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1551.207099][ T31] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1551.207121][ T31] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1551.207136][ T31] usb 3-1: Product: syz [ 1551.207147][ T31] usb 3-1: Manufacturer: syz [ 1551.230673][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.230765][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.308180][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 1551.308197][ T31] cdc_wdm 3-1:1.0: skipping garbage [ 1551.324977][ T31] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1551.324994][ T31] cdc_wdm 3-1:1.0: Unknown control protocol [ 1553.075417][ T10] usb 7-1: USB disconnect, device number 72 [ 1554.018964][T19607] bridge0: port 3(dummy0) entered disabled state [ 1554.019239][T19607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.019654][T19607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.084822][ T5922] usb 3-1: USB disconnect, device number 125 [ 1556.489564][T19607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.538141][T19607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.538503][T19638] binder: 19637:19638 ioctl c0306201 0 returned -14 [ 1557.789081][T19607] geneve2: left promiscuous mode [ 1557.789115][T19607] geneve2: left allmulticast mode [ 1557.908461][T19607] veth3: left promiscuous mode [ 1557.963325][T19607] veth5: left promiscuous mode [ 1557.984247][ T3124] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.984282][ T3124] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1558.202737][T14734] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.202777][T14734] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1558.221899][T14734] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.221949][T14734] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1558.221993][T14734] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.222020][T14734] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1558.998955][T19653] /dev/nullb0: Can't open blockdev [ 1560.054496][T19665] tipc: Enabled bearer , priority 0 [ 1560.060872][T19665] tipc: Resetting bearer [ 1560.584730][T19663] tipc: Disabling bearer [ 1561.195615][T19670] binder: 19669:19670 ioctl c0306201 0 returned -14 [ 1562.274613][T19695] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1562.274724][T19695] FAT-fs (loop7): unable to read boot sector [ 1562.386681][T19700] syzkaller0: entered promiscuous mode [ 1562.386715][T19700] syzkaller0: entered allmulticast mode [ 1565.039826][T19735] syz_tun: entered allmulticast mode [ 1565.058274][T19736] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1565.058372][T19736] FAT-fs (loop13): unable to read boot sector [ 1565.084026][T19734] syz_tun: left allmulticast mode [ 1567.067673][T19756] syzkaller0: entered promiscuous mode [ 1567.067704][T19756] syzkaller0: entered allmulticast mode [ 1567.805981][T19779] tipc: Enabling of bearer rejected, failed to enable media [ 1567.833049][ T5958] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 1567.986019][ T5958] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.986041][ T5958] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1567.986077][ T5958] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1567.988941][ T5958] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1567.988963][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.988979][ T5958] usb 8-1: Product: syz [ 1567.988989][ T5958] usb 8-1: Manufacturer: syz [ 1567.989000][ T5958] usb 8-1: SerialNumber: syz [ 1568.027342][ T5958] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 1568.027394][ T5958] cdc_ncm 8-1:1.0: bind() failure [ 1568.227984][ T5958] usb 8-1: USB disconnect, device number 62 [ 1571.326810][T19810] block device autoloading is deprecated and will be removed. [ 1571.802451][T19812] syzkaller0: entered promiscuous mode [ 1571.802485][T19812] syzkaller0: entered allmulticast mode [ 1571.819122][T19815] tipc: Enabling of bearer rejected, failed to enable media [ 1574.749501][T19854] openvswitch: netlink: Flow actions attr not present in new flow. [ 1574.992378][T19849] netlink: 'syz.6.3885': attribute type 21 has an invalid length. [ 1574.992400][T19849] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3885'. [ 1574.992480][T19849] netlink: 'syz.6.3885': attribute type 5 has an invalid length. [ 1574.992490][T19849] netlink: 'syz.6.3885': attribute type 6 has an invalid length. [ 1574.992500][T19849] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3885'. [ 1577.230763][T19879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3894'. [ 1577.342287][T19877] tipc: Enabled bearer , priority 0 [ 1577.899121][T19877] tipc: Resetting bearer [ 1578.014438][T19882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1578.090193][T19875] tipc: Disabling bearer [ 1579.928523][T19892] syz_tun: entered allmulticast mode [ 1579.967803][T19892] syz_tun: left allmulticast mode [ 1581.529215][T19931] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3910'. [ 1582.751745][T19937] syz_tun: entered allmulticast mode [ 1582.777713][T19936] syz_tun: left allmulticast mode [ 1582.973932][T19943] tipc: Enabled bearer , priority 0 [ 1582.985993][T19943] tipc: Resetting bearer [ 1582.986500][T19941] tipc: Enabled bearer , priority 0 [ 1583.104309][T19938] tipc: Disabling bearer [ 1584.289969][T19949] tipc: Resetting bearer [ 1584.423010][T15139] tipc: Node number set to 3501153451 [ 1586.742985][ T6013] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1587.739140][T19939] tipc: Disabling bearer [ 1587.903054][ T6013] usb 8-1: Using ep0 maxpacket: 32 [ 1587.905660][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1587.905696][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1587.905740][ T6013] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1587.905765][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.961337][ T6013] usb 8-1: config 0 descriptor?? [ 1587.970482][ T6013] hub 8-1:0.0: USB hub found [ 1588.170731][T19978] syz_tun: entered allmulticast mode [ 1588.171894][T19977] syz_tun: left allmulticast mode [ 1588.204071][ T6013] hub 8-1:0.0: 1 port detected [ 1588.413956][T19958] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1588.797517][T19988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1589.021570][ T6013] usb 8-1: USB disconnect, device number 63 [ 1589.302394][T20000] tmpfs: Unsupported parameter 'huge' [ 1589.667931][T20001] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1590.409825][T20011] syz_tun: entered allmulticast mode [ 1590.410859][T20008] syz_tun: left allmulticast mode [ 1590.613044][ T6013] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1590.770991][ T6013] usb 4-1: Using ep0 maxpacket: 32 [ 1590.809596][ T6013] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1590.809628][ T6013] usb 4-1: config 1 has no interface number 0 [ 1590.809680][ T6013] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.809705][ T6013] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.809733][ T6013] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1590.862310][ T6013] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1590.862340][ T6013] usb 4-1: config 1 has no interface number 0 [ 1590.862397][ T6013] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.862422][ T6013] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.862448][ T6013] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1590.876113][ T6013] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1590.876145][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.876167][ T6013] usb 4-1: Product: syz [ 1590.876183][ T6013] usb 4-1: Manufacturer: syz [ 1590.876200][ T6013] usb 4-1: SerialNumber: syz [ 1590.958679][ T6013] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 1591.542957][T15139] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1591.583009][ T31] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1591.713367][T15139] usb 7-1: Using ep0 maxpacket: 16 [ 1591.719465][T15139] usb 7-1: config 0 has an invalid interface number: 9 but max is 1 [ 1591.719487][T15139] usb 7-1: config 0 has an invalid interface number: 9 but max is 1 [ 1591.719504][T15139] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1591.719519][T15139] usb 7-1: config 0 has no interface number 0 [ 1591.720444][T15139] usb 7-1: config 0 interface 9 has no altsetting 0 [ 1591.720468][T15139] usb 7-1: config 0 interface 9 has no altsetting 1 [ 1591.730185][T15139] usb 7-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 1591.730216][T15139] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.730242][T15139] usb 7-1: Product: syz [ 1591.730261][T15139] usb 7-1: Manufacturer: syz [ 1591.730279][T15139] usb 7-1: SerialNumber: syz [ 1591.742920][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1591.746027][ T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1591.746059][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1591.746087][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1591.746224][ T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1591.746271][ T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1591.746297][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.862545][T15139] usb 7-1: config 0 descriptor?? [ 1591.967251][ T31] usb 8-1: GET_CAPABILITIES returned 0 [ 1591.967307][ T31] usbtmc 8-1:16.0: can't read capabilities [ 1592.074783][T15139] usb 7-1: selecting invalid altsetting 1 [ 1592.074820][T15139] sierra 7-1:0.9: Sierra USB modem converter detected [ 1592.100908][T15139] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 1592.113586][T15139] usb 7-1: USB disconnect, device number 73 [ 1592.121623][T15139] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1592.121965][T15139] sierra 7-1:0.9: device disconnected [ 1592.187667][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3951'. [ 1592.776457][ T5958] usb 8-1: USB disconnect, device number 64 [ 1592.911453][T20044] syz_tun: entered allmulticast mode [ 1592.917039][T20043] syz_tun: left allmulticast mode [ 1595.586045][ T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1595.748722][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1595.748775][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.748805][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.748829][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1595.752405][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1595.752438][ T10] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1595.752461][ T10] usb 3-1: Manufacturer: syz [ 1595.835347][ T10] usb 3-1: config 0 descriptor?? [ 1596.265473][ T10] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 1596.333363][ T10] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1596.693049][ T31] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1596.843295][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 1596.847548][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1596.847572][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1596.847602][ T31] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1596.847666][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.866510][ T31] usb 8-1: config 0 descriptor?? [ 1596.881542][ T31] hub 8-1:0.0: USB hub found [ 1597.085209][ T31] hub 8-1:0.0: 1 port detected [ 1597.743251][ T6013] usb 4-1: USB disconnect, device number 3 [ 1597.927741][ T6013] usb 8-1: USB disconnect, device number 65 [ 1598.304987][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1598.335467][T20085] syz_tun: entered allmulticast mode [ 1598.336941][T20083] syz_tun: left allmulticast mode [ 1598.462618][ T10] usb 3-1: USB disconnect, device number 126 [ 1600.817196][T20113] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3978'. [ 1600.863039][T20114] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3979'. [ 1601.046343][T20121] openvswitch: netlink: IP tunnel dst address not specified [ 1601.063044][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1601.216337][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1601.216410][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.216439][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.216463][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1601.218188][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1601.218216][ T31] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1601.218238][ T31] usb 4-1: Manufacturer: syz [ 1601.254187][ T31] usb 4-1: config 0 descriptor?? [ 1603.437654][ T31] appleir 0003:05AC:8243.001A: unknown main item tag 0x0 [ 1603.451740][ T31] appleir 0003:05AC:8243.001A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1604.900033][T20148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1604.999655][T20151] openvswitch: netlink: IP tunnel dst address not specified [ 1605.543229][ T5958] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1605.693029][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 1605.694124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1605.764684][T12074] usb 4-1: USB disconnect, device number 4 [ 1605.770903][ T5958] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 1605.770933][ T5958] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 1605.770955][ T5958] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1605.770978][ T5958] usb 3-1: config 0 has no interface number 0 [ 1605.771015][ T5958] usb 3-1: config 0 interface 9 has no altsetting 0 [ 1605.771035][ T5958] usb 3-1: config 0 interface 9 has no altsetting 1 [ 1606.464561][ T5958] usb 3-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 1606.464595][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.464618][ T5958] usb 3-1: Product: syz [ 1606.464634][ T5958] usb 3-1: Manufacturer: syz [ 1606.464649][ T5958] usb 3-1: SerialNumber: syz [ 1606.550274][T20173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4001'. [ 1606.601177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1606.638602][ T5958] usb 3-1: config 0 descriptor?? [ 1606.754069][T20177] syz_tun: entered allmulticast mode [ 1606.775174][T20176] tipc: Enabled bearer , priority 0 [ 1606.854433][T20178] tipc: Resetting bearer [ 1606.857499][ T5958] usb 3-1: selecting invalid altsetting 1 [ 1606.857550][ T5958] sierra 3-1:0.9: Sierra USB modem converter detected [ 1606.894030][ T5958] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1606.897149][ T5958] usb 3-1: USB disconnect, device number 127 [ 1606.917951][ T5958] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1606.918872][ T5958] sierra 3-1:0.9: device disconnected [ 1607.030834][ C1] vkms_vblank_simulate: vblank timer overrun [ 1607.124043][T20174] tipc: Disabling bearer [ 1607.148121][T20189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4006'. [ 1607.226090][T20192] openvswitch: netlink: IP tunnel dst address not specified [ 1607.513273][T20202] tipc: Enabling of bearer rejected, failed to enable media [ 1607.735529][ T5958] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1607.889085][ T5958] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1607.889138][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.889167][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1607.889193][ T5958] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1607.891195][ T5958] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1607.891225][ T5958] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1607.891247][ T5958] usb 4-1: Manufacturer: syz [ 1607.965253][ T5958] usb 4-1: config 0 descriptor?? [ 1608.389074][ T5958] appleir 0003:05AC:8243.001B: unknown main item tag 0x0 [ 1608.426054][ T5958] appleir 0003:05AC:8243.001B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1609.799556][T20236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1609.875695][T20241] openvswitch: netlink: Flow key attr not present in new flow. [ 1610.693227][ T6013] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1610.750457][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4024'. [ 1610.846252][ T6013] usb 3-1: Using ep0 maxpacket: 16 [ 1610.848731][ T6013] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 1610.848758][ T6013] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 1610.848779][ T6013] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1610.848810][ T6013] usb 3-1: config 0 has no interface number 0 [ 1610.848845][ T6013] usb 3-1: config 0 interface 9 has no altsetting 0 [ 1610.848864][ T6013] usb 3-1: config 0 interface 9 has no altsetting 1 [ 1610.851976][ T6013] usb 3-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 1610.852005][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.852027][ T6013] usb 3-1: Product: syz [ 1610.852043][ T6013] usb 3-1: Manufacturer: syz [ 1610.852058][ T6013] usb 3-1: SerialNumber: syz [ 1610.989986][ T6013] usb 3-1: config 0 descriptor?? [ 1611.079187][ T10] usb 4-1: USB disconnect, device number 5 [ 1611.215431][ T6013] usb 3-1: selecting invalid altsetting 1 [ 1611.215491][ T6013] sierra 3-1:0.9: Sierra USB modem converter detected [ 1611.240790][ T6013] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1611.252644][ T6013] usb 3-1: USB disconnect, device number 2 [ 1611.266622][ T6013] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1611.267090][ T6013] sierra 3-1:0.9: device disconnected [ 1611.340871][T20271] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4028'. [ 1612.787941][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.788017][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.952960][ T5922] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1612.994577][T20288] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4033'. [ 1613.112886][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1613.117244][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.117280][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.117325][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1613.117351][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.177612][ T5922] usb 3-1: config 0 descriptor?? [ 1613.182256][ T5922] hub 3-1:0.0: USB hub found [ 1613.393527][ T5922] hub 3-1:0.0: 1 port detected [ 1614.924449][T12074] usb 3-1: USB disconnect, device number 3 [ 1615.612940][ T6013] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1615.644023][T20337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4045'. [ 1615.766246][ T6013] usb 8-1: Using ep0 maxpacket: 16 [ 1615.769183][ T6013] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 1615.769213][ T6013] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 1615.769234][ T6013] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1615.769258][ T6013] usb 8-1: config 0 has no interface number 0 [ 1615.769295][ T6013] usb 8-1: config 0 interface 9 has no altsetting 0 [ 1615.769315][ T6013] usb 8-1: config 0 interface 9 has no altsetting 1 [ 1615.773479][ T6013] usb 8-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 1615.773513][ T6013] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.773539][ T6013] usb 8-1: Product: syz [ 1615.773558][ T6013] usb 8-1: Manufacturer: syz [ 1615.773574][ T6013] usb 8-1: SerialNumber: syz [ 1615.809140][ T6013] usb 8-1: config 0 descriptor?? [ 1615.843026][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1616.011825][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1616.011864][ T10] usb 4-1: can't read configurations, error -61 [ 1616.035565][ T6013] usb 8-1: selecting invalid altsetting 1 [ 1616.035621][ T6013] sierra 8-1:0.9: Sierra USB modem converter detected [ 1616.069947][ T6013] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1616.080738][ T6013] usb 8-1: USB disconnect, device number 66 [ 1616.111286][ T6013] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1616.123610][ T6013] sierra 8-1:0.9: device disconnected [ 1616.153020][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1616.224714][T20354] tipc: Enabled bearer , priority 0 [ 1616.301747][T20351] tipc: Resetting bearer [ 1616.309250][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1616.309289][ T10] usb 4-1: can't read configurations, error -61 [ 1616.309831][ T10] usb usb4-port1: attempt power cycle [ 1616.514551][T20349] tipc: Disabling bearer [ 1616.668265][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1616.689028][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1616.689070][ T10] usb 4-1: can't read configurations, error -61 [ 1616.777849][T20364] syzkaller0: entered promiscuous mode [ 1616.777870][T20364] syzkaller0: entered allmulticast mode [ 1616.813119][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1616.861045][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1616.861087][ T10] usb 4-1: can't read configurations, error -61 [ 1616.865424][ T10] usb usb4-port1: unable to enumerate USB device [ 1621.410667][T20401] tipc: Enabled bearer , priority 0 [ 1621.578666][T20407] tipc: Resetting bearer [ 1622.741034][ T5958] tipc: Node number set to 161665064 [ 1622.894614][T20400] tipc: Disabling bearer [ 1623.107993][T20416] tipc: Enabling of bearer rejected, failed to enable media [ 1625.745422][T20451] tipc: Enabling of bearer rejected, failed to enable media [ 1626.215311][T20463] tipc: Enabled bearer , priority 0 [ 1626.300981][T20468] tipc: Resetting bearer [ 1626.667001][T20474] syz.7.4084 (20474) used greatest stack depth: 16184 bytes left [ 1626.935747][T20461] tipc: Disabling bearer [ 1629.309294][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 1630.045983][T20505] tipc: Enabling of bearer rejected, failed to enable media [ 1630.592935][ T5922] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1631.688726][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1631.688759][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1631.688814][ T5922] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1631.746044][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1631.746082][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.746107][ T5922] usb 3-1: Product: syz [ 1631.746124][ T5922] usb 3-1: Manufacturer: syz [ 1631.746140][ T5922] usb 3-1: SerialNumber: syz [ 1631.856192][ T5922] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1631.856243][ T5922] cdc_ncm 3-1:1.0: bind() failure [ 1632.059104][T20540] syzkaller0: entered promiscuous mode [ 1632.059136][T20540] syzkaller0: entered allmulticast mode [ 1632.326557][T20520] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4099'. [ 1634.969001][ T5922] usb 3-1: USB disconnect, device number 4 [ 1636.377563][T20564] tipc: Enabling of bearer rejected, failed to enable media [ 1636.660843][T20576] syz_tun: entered allmulticast mode [ 1637.653227][T20592] netlink: 'syz.1.4124': attribute type 72 has an invalid length. [ 1637.653271][T20592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4124'. [ 1639.268534][T20601] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1639.268606][T20601] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1639.272283][T20601] vhci_hcd vhci_hcd.0: Device attached [ 1639.583180][ T10] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1641.053794][T20602] vhci_hcd: connection reset by peer [ 1641.075334][ T3018] vhci_hcd: stop threads [ 1641.075403][ T3018] vhci_hcd: release socket [ 1641.075701][ T3018] vhci_hcd: disconnect device [ 1642.576164][T20624] tipc: Enabling of bearer rejected, failed to enable media [ 1644.009209][T20648] syzkaller0: entered promiscuous mode [ 1644.009242][T20648] syzkaller0: entered allmulticast mode [ 1644.363034][T17598] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1645.349141][T17598] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1645.349169][T17598] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1645.349215][T17598] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1645.548437][ T10] vhci_hcd: vhci_device speed not set [ 1645.569344][T17598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1645.569379][T17598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.569401][T17598] usb 4-1: Product: syz [ 1645.569418][T17598] usb 4-1: Manufacturer: syz [ 1645.569435][T17598] usb 4-1: SerialNumber: syz [ 1645.625916][T17598] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1645.625969][T17598] cdc_ncm 4-1:1.0: bind() failure [ 1645.884274][T20651] netlink: 'syz.3.4138': attribute type 72 has an invalid length. [ 1645.884300][T20651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4138'. [ 1646.187509][T20663] tipc: Enabling of bearer rejected, failed to enable media [ 1646.310074][ T31] usb 4-1: USB disconnect, device number 10 [ 1648.413296][T20706] tipc: Enabling of bearer rejected, failed to enable media [ 1648.448561][T20708] binder: 20707:20708 ioctl c0306201 0 returned -14 [ 1648.881779][T20720] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4157'. [ 1649.287531][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1649.445539][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.445569][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1649.445624][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1649.449086][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1649.449115][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.449138][ T31] usb 3-1: Product: syz [ 1649.449153][ T31] usb 3-1: Manufacturer: syz [ 1649.449169][ T31] usb 3-1: SerialNumber: syz [ 1649.536612][ T31] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 1649.536664][ T31] cdc_ncm 3-1:1.0: bind() failure [ 1650.281610][T20724] netlink: 'syz.2.4158': attribute type 72 has an invalid length. [ 1650.281636][T20724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4158'. [ 1650.825042][T20729] team0: Port device team_slave_0 removed [ 1650.863153][T20734] syz_tun: entered allmulticast mode [ 1650.875755][ T5922] usb 3-1: USB disconnect, device number 5 [ 1652.647843][T20764] tipc: Enabling of bearer rejected, failed to enable media [ 1653.204015][ T37] audit: type=1800 audit(1758268759.793:25): pid=20775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4169" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1654.415952][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4175'. [ 1654.537000][T20793] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1656.493051][T20813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1670.321595][T20826] syz.2.4185 (20826): drop_caches: 2 [ 1671.064030][T20864] syz_tun: entered allmulticast mode [ 1671.094320][T20864] dvmrp8: entered allmulticast mode [ 1671.097964][T20864] syz_tun: left allmulticast mode [ 1671.098142][T20864] dvmrp8: left allmulticast mode [ 1671.138666][T20866] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1672.852127][T20887] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1674.279785][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.063078][ T6013] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1677.183014][ T5958] IPVS: starting estimator thread 0... [ 1677.225775][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.225830][ T6013] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1677.225870][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.235277][ T6013] usb 8-1: config 0 descriptor?? [ 1677.273213][T20920] IPVS: using max 6 ests per chain, 14400 per kthread [ 1677.463988][ T6013] usbhid 8-1:0.0: can't add hid device: -71 [ 1677.464127][ T6013] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1677.490918][ T6013] usb 8-1: USB disconnect, device number 67 [ 1677.983000][ T6013] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1678.132884][ T6013] usb 8-1: Using ep0 maxpacket: 32 [ 1678.149941][ T6013] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1678.149995][ T6013] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1678.150029][ T6013] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.145757][ T6013] usb 8-1: config 0 descriptor?? [ 1679.739226][ T6013] usb 8-1: can't set config #0, error -71 [ 1679.749136][ T6013] usb 8-1: USB disconnect, device number 68 [ 1680.843459][T20948] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1683.341079][T20983] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1686.127957][T21009] tipc: Enabled bearer , priority 0 [ 1686.128864][T21009] syzkaller0: entered promiscuous mode [ 1686.128889][T21009] syzkaller0: entered allmulticast mode [ 1686.320272][T21017] tipc: Resetting bearer [ 1686.407143][T21008] tipc: Resetting bearer [ 1686.465651][T21026] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1686.564103][T12074] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1686.616715][T21008] tipc: Disabling bearer [ 1686.942898][T12074] usb 3-1: Using ep0 maxpacket: 8 [ 1686.949323][T12074] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1686.949354][T12074] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1686.949379][T12074] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1686.949396][T12074] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1686.949428][T12074] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1686.949444][T12074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.689124][T12074] usb 3-1: GET_CAPABILITIES returned 0 [ 1687.689178][T12074] usbtmc 3-1:16.0: can't read capabilities [ 1687.918703][ T5922] usb 3-1: USB disconnect, device number 6 [ 1688.335945][T21048] tipc: Enabled bearer , priority 0 [ 1688.337003][T21048] syzkaller0: entered promiscuous mode [ 1688.337029][T21048] syzkaller0: entered allmulticast mode [ 1688.405592][T21056] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1688.691291][T21048] tipc: Resetting bearer [ 1688.805868][T21047] tipc: Resetting bearer [ 1690.613936][T21047] tipc: Disabling bearer [ 1694.010146][T21102] syz_tun: entered allmulticast mode [ 1694.012454][T21100] syz_tun: left allmulticast mode [ 1694.033467][ T5958] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1694.505339][T21105] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1695.183026][ T5958] usb 7-1: Using ep0 maxpacket: 8 [ 1695.187841][ T5958] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1695.187871][ T5958] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1695.187898][ T5958] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1695.187925][ T5958] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1695.187971][ T5958] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1695.187996][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.494463][T21111] loop6: detected capacity change from 0 to 7 [ 1695.528447][T21111] Dev loop6: unable to read RDB block 7 [ 1695.528495][T21111] loop6: unable to read partition table [ 1695.528775][T21111] loop6: partition table beyond EOD, truncated [ 1695.528790][T21111] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1695.559908][ T5958] usb 7-1: GET_CAPABILITIES returned 0 [ 1695.559944][ T5958] usbtmc 7-1:16.0: can't read capabilities [ 1695.737703][ T5958] usb 7-1: USB disconnect, device number 74 [ 1696.591943][T21142] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4304'. [ 1696.750134][T21145] netlink: 'syz.1.4306': attribute type 2 has an invalid length. [ 1698.092895][T12074] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1698.113101][ T5922] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1698.253742][T12074] usb 7-1: Using ep0 maxpacket: 32 [ 1698.256737][T12074] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 1698.256896][T12074] usb 7-1: config 1 has no interface number 0 [ 1698.256950][T12074] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1698.256975][T12074] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1698.257003][T12074] usb 7-1: config 1 interface 236 has no altsetting 0 [ 1698.258662][T12074] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 1698.258688][T12074] usb 7-1: config 1 has no interface number 0 [ 1698.258738][T12074] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1698.258762][T12074] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1698.258789][T12074] usb 7-1: config 1 interface 236 has no altsetting 0 [ 1698.262462][T12074] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1698.262492][T12074] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.262515][T12074] usb 7-1: Product: syz [ 1698.262531][T12074] usb 7-1: Manufacturer: syz [ 1698.262547][T12074] usb 7-1: SerialNumber: syz [ 1698.273356][ T5922] usb 8-1: Using ep0 maxpacket: 8 [ 1698.276628][ T5922] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1698.276833][ T5922] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1698.276867][ T5922] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1698.276896][ T5922] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1698.276950][ T5922] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1698.276979][ T5922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.465475][T12074] ti_usb_3410_5052 7-1:1.236: TI USB 5052 2 port adapter converter detected [ 1698.678514][ T5922] usb 8-1: GET_CAPABILITIES returned 0 [ 1698.678551][ T5922] usbtmc 8-1:16.0: can't read capabilities [ 1698.880982][T12074] usb 8-1: USB disconnect, device number 69 [ 1699.082936][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1699.528625][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1700.203973][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.204000][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.204032][ T31] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1700.204049][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.296405][ T31] usb 3-1: config 0 descriptor?? [ 1700.338139][ T31] hub 3-1:0.0: USB hub found [ 1700.443440][T21178] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4316'. [ 1700.542310][ T31] hub 3-1:0.0: 1 port detected [ 1701.195986][ T31] hub 3-1:0.0: activate --> -90 [ 1702.087818][ T31] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1702.133864][T19044] usb 3-1: USB disconnect, device number 7 [ 1703.683240][T21196] 9pnet_fd: Insufficient options for proto=fd [ 1705.719591][T21215] loop6: detected capacity change from 0 to 7 [ 1705.733174][T21215] Dev loop6: unable to read RDB block 7 [ 1705.733210][T21215] loop6: unable to read partition table [ 1705.733381][T21215] loop6: partition table beyond EOD, truncated [ 1705.733395][T21215] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1706.727876][T21217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4328'. [ 1707.142637][ T5958] usb 7-1: USB disconnect, device number 75 [ 1707.354365][T16453] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1708.476957][T16453] usb 3-1: Using ep0 maxpacket: 16 [ 1708.479649][T16453] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 1708.479675][T16453] usb 3-1: config 0 has an invalid interface number: 9 but max is 1 [ 1708.479695][T16453] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1708.479717][T16453] usb 3-1: config 0 has no interface number 0 [ 1708.479752][T16453] usb 3-1: config 0 interface 9 has no altsetting 0 [ 1708.479772][T16453] usb 3-1: config 0 interface 9 has no altsetting 1 [ 1708.512274][T16453] usb 3-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 1708.512316][T16453] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.512330][T16453] usb 3-1: Product: syz [ 1708.512341][T16453] usb 3-1: Manufacturer: syz [ 1708.512352][T16453] usb 3-1: SerialNumber: syz [ 1708.575540][T16453] usb 3-1: config 0 descriptor?? [ 1708.587590][ T5958] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1708.603545][T21243] 9pnet_fd: Insufficient options for proto=fd [ 1708.754150][ T5958] usb 7-1: Using ep0 maxpacket: 32 [ 1708.757821][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.757919][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.757964][ T5958] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1708.757990][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.809224][ T5958] usb 7-1: config 0 descriptor?? [ 1708.823733][ T5958] hub 7-1:0.0: USB hub found [ 1708.852735][T16453] usb 3-1: selecting invalid altsetting 1 [ 1708.854179][T16453] sierra 3-1:0.9: Sierra USB modem converter detected [ 1708.874044][T21249] binder: BINDER_SET_CONTEXT_MGR already set [ 1708.874061][T21249] binder: 21247:21249 ioctl 4018620d 200000000040 returned -16 [ 1708.905255][T16453] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1708.925764][T16453] usb 3-1: USB disconnect, device number 8 [ 1708.965604][T16453] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1708.970597][T16453] sierra 3-1:0.9: device disconnected [ 1709.093787][ T5958] hub 7-1:0.0: 1 port detected [ 1709.524650][T21259] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4343'. [ 1709.733803][ T5958] hub 7-1:0.0: activate --> -90 [ 1709.853013][T19044] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1709.937874][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1709.938003][ T5958] hub 7-1:0.0: hub_ext_port_status failed (err = -32) [ 1709.973609][T16453] usb 7-1: USB disconnect, device number 76 [ 1710.002951][T19044] usb 3-1: Using ep0 maxpacket: 32 [ 1710.005133][T19044] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1710.005152][T19044] usb 3-1: config 1 has no interface number 0 [ 1710.005186][T19044] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1710.005203][T19044] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1710.005221][T19044] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1710.006487][T19044] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1710.006504][T19044] usb 3-1: config 1 has no interface number 0 [ 1710.006533][T19044] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1710.006548][T19044] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1710.006570][T19044] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1710.008835][T19044] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1710.008855][T19044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.008869][T19044] usb 3-1: Product: syz [ 1710.008880][T19044] usb 3-1: Manufacturer: syz [ 1710.008890][T19044] usb 3-1: SerialNumber: syz [ 1710.036812][T19044] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 1711.505283][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1711.916338][T21281] 9pnet_fd: Insufficient options for proto=fd [ 1713.771752][T21292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1713.833020][ T31] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1713.966344][ T31] usb 8-1: device descriptor read/64, error -71 [ 1714.252901][ T31] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1714.382913][ T31] usb 8-1: device descriptor read/64, error -71 [ 1714.493432][ T31] usb usb8-port1: attempt power cycle [ 1714.833025][ T31] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1714.853934][ T31] usb 8-1: device descriptor read/8, error -71 [ 1715.110915][ T31] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1715.126780][ T31] usb 8-1: device descriptor read/8, error -71 [ 1715.233534][ T31] usb usb8-port1: unable to enumerate USB device [ 1715.659833][T19044] usb 3-1: USB disconnect, device number 9 [ 1717.404290][T21311] CIFS: VFS: Malformed UNC in devname [ 1717.856935][T21313] tipc: Enabled bearer , priority 0 [ 1717.880249][T21312] syzkaller0: entered promiscuous mode [ 1717.880284][T21312] syzkaller0: entered allmulticast mode [ 1726.799865][T21312] tipc: Resetting bearer [ 1727.193359][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4365'. [ 1727.691031][T21332] ptrace attach of "./syz-executor exec"[13711] was attempted by "./syz-executor exec"[21332] [ 1727.724103][T21312] tipc: Disabling bearer [ 1728.012968][ T5958] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1728.172939][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 1728.175518][ T5958] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1728.175549][ T5958] usb 3-1: config 1 has no interface number 0 [ 1728.175600][ T5958] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.175626][ T5958] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1728.175653][ T5958] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1728.177390][ T5958] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1728.177417][ T5958] usb 3-1: config 1 has no interface number 0 [ 1728.177468][ T5958] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1728.177494][ T5958] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1728.177521][ T5958] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1728.180650][ T5958] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1728.180679][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.180701][ T5958] usb 3-1: Product: syz [ 1728.180717][ T5958] usb 3-1: Manufacturer: syz [ 1728.180734][ T5958] usb 3-1: SerialNumber: syz [ 1729.323338][ T5958] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 1729.352619][T20480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1729.372543][T20480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1729.376045][T20480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1729.377422][T20480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1729.378378][T20480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1729.612935][ T31] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1729.667800][T17589] syz_tun (unregistering): left allmulticast mode [ 1729.772920][ T31] usb 7-1: device descriptor read/64, error -71 [ 1730.004873][ T5958] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1730.013724][ T31] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1730.152875][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1730.158548][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.158581][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.158629][ T5958] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1730.158653][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.192988][ T31] usb 7-1: device descriptor read/64, error -71 [ 1730.220710][ T5958] usb 4-1: config 0 descriptor?? [ 1730.234228][ T5958] hub 4-1:0.0: USB hub found [ 1730.361702][ T31] usb usb7-port1: attempt power cycle [ 1730.445340][ T5958] hub 4-1:0.0: 1 port detected [ 1730.752978][ T31] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1730.777064][ T31] usb 7-1: device descriptor read/8, error -71 [ 1731.023164][ T31] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1731.048160][ T31] usb 7-1: device descriptor read/8, error -71 [ 1731.059317][ T5958] hub 4-1:0.0: activate --> -90 [ 1731.153426][ T31] usb usb7-port1: unable to enumerate USB device [ 1731.267290][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 1731.267460][ T5958] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 1731.298337][ T10] usb 4-1: USB disconnect, device number 11 [ 1731.463098][ T5854] Bluetooth: hci1: command tx timeout [ 1732.200085][ T10] usb 3-1: USB disconnect, device number 10 [ 1732.416406][T21365] 9pnet_fd: Insufficient options for proto=fd [ 1733.802937][ T5854] Bluetooth: hci1: command tx timeout [ 1733.877920][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1733.877955][T21367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1733.931727][T21367] netlink: 'syz.3.4376': attribute type 21 has an invalid length. [ 1733.931746][T21367] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1733.944969][T21367] netlink: 'syz.3.4376': attribute type 5 has an invalid length. [ 1733.944991][T21367] netlink: 'syz.3.4376': attribute type 6 has an invalid length. [ 1733.945001][T21367] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1734.075105][T21342] chnl_net:caif_netlink_parms(): no params data found [ 1735.379471][ T3630] bridge_slave_1: left allmulticast mode [ 1735.379510][ T3630] bridge_slave_1: left promiscuous mode [ 1735.379789][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.409488][T21390] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4383'. [ 1735.514518][ T3630] bridge_slave_0: left allmulticast mode [ 1735.514554][ T3630] bridge_slave_0: left promiscuous mode [ 1735.514843][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.551140][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.866294][ T5854] Bluetooth: hci1: command tx timeout [ 1736.058444][ T5922] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1736.722987][ T5922] usb 8-1: Using ep0 maxpacket: 32 [ 1736.727683][ T5922] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 1736.727714][ T5922] usb 8-1: config 1 has no interface number 0 [ 1736.727766][ T5922] usb 8-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1736.727791][ T5922] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1736.727818][ T5922] usb 8-1: config 1 interface 236 has no altsetting 0 [ 1736.729375][ T5922] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 1736.729402][ T5922] usb 8-1: config 1 has no interface number 0 [ 1736.729453][ T5922] usb 8-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1736.729478][ T5922] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1736.729505][ T5922] usb 8-1: config 1 interface 236 has no altsetting 0 [ 1736.732938][ T5922] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1736.732967][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.732990][ T5922] usb 8-1: Product: syz [ 1736.733008][ T5922] usb 8-1: Manufacturer: syz [ 1736.733024][ T5922] usb 8-1: SerialNumber: syz [ 1736.750802][ T5922] ti_usb_3410_5052 8-1:1.236: TI USB 5052 2 port adapter converter detected [ 1737.006277][T21400] 9pnet_fd: Insufficient options for proto=fd [ 1738.036281][ T5854] Bluetooth: hci1: command tx timeout [ 1739.273227][T12074] usb 8-1: USB disconnect, device number 74 [ 1739.377671][T21411] openvswitch: netlink: Key type 784 is out of range max 32 [ 1740.215455][ T3630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.318917][ T3630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.354084][ T3630] bond0 (unregistering): Released all slaves [ 1740.484867][T21407] dvmrp8: entered allmulticast mode [ 1740.613253][T21407] dvmrp8: left allmulticast mode [ 1741.999205][T21438] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4394'. [ 1742.133253][T21443] 9pnet_fd: Insufficient options for proto=fd [ 1743.371217][T21168] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1743.544854][T21168] usb 7-1: Using ep0 maxpacket: 32 [ 1743.547294][T21168] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 1743.547326][T21168] usb 7-1: config 1 has no interface number 0 [ 1743.547376][T21168] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1743.547401][T21168] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1743.547440][T21168] usb 7-1: config 1 interface 236 has no altsetting 0 [ 1743.548876][T21168] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 1743.548903][T21168] usb 7-1: config 1 has no interface number 0 [ 1743.548953][T21168] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1743.548977][T21168] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1743.549004][T21168] usb 7-1: config 1 interface 236 has no altsetting 0 [ 1743.554175][T21168] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1743.554212][T21168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.554238][T21168] usb 7-1: Product: syz [ 1743.554258][T21168] usb 7-1: Manufacturer: syz [ 1743.554276][T21168] usb 7-1: SerialNumber: syz [ 1743.572408][T21168] ti_usb_3410_5052 7-1:1.236: TI USB 5052 2 port adapter converter detected [ 1744.557477][T21342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.557855][T21342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.558135][T21342] bridge_slave_0: entered allmulticast mode [ 1744.620166][T21342] bridge_slave_0: entered promiscuous mode [ 1746.983235][T21342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.983405][T21342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.983619][T21342] bridge_slave_1: entered allmulticast mode [ 1747.003011][T21342] bridge_slave_1: entered promiscuous mode [ 1747.282965][T21168] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1747.465317][T21168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.465343][T21168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.465376][T21168] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1747.465394][T21168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.526327][T21168] usb 4-1: config 0 descriptor?? [ 1747.731663][T21168] usbhid 4-1:0.0: can't add hid device: -71 [ 1747.731769][T21168] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1747.744659][T21168] usb 4-1: USB disconnect, device number 12 [ 1747.755206][T21478] syz_tun: entered allmulticast mode [ 1747.778707][T21480] dvmrp8: entered allmulticast mode [ 1747.846339][T21481] tipc: Enabling of bearer rejected, failed to enable media [ 1747.961068][T21342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1747.969240][T21480] syz_tun: left allmulticast mode [ 1747.969423][T21480] dvmrp8: left allmulticast mode [ 1748.208240][T21342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.325185][T21168] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1748.477839][T21168] usb 4-1: Using ep0 maxpacket: 32 [ 1748.481706][T21168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.481731][T21168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.481761][T21168] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1748.481779][T21168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.965163][T21168] usb 4-1: config 0 descriptor?? [ 1749.004881][T21168] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1749.039419][T21168] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1749.304023][T21168] usb 4-1: USB disconnect, device number 13 [ 1749.321529][T21168] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1749.630193][ T10] usb 7-1: USB disconnect, device number 81 [ 1749.703399][ T3630] hsr_slave_0: left promiscuous mode [ 1750.333292][ T3630] hsr_slave_1: left promiscuous mode [ 1750.419640][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.645945][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.310575][T21524] 9pnet_fd: Insufficient options for proto=fd [ 1751.390045][T21525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4415'. [ 1754.413730][ T3630] team0 (unregistering): Port device team_slave_1 removed [ 1754.683799][ T3630] team0 (unregistering): Port device team_slave_0 removed [ 1757.419022][T21342] team0: Port device team_slave_0 added [ 1757.479229][T21530] tipc: Enabling of bearer rejected, failed to enable media [ 1757.775670][T21342] team0: Port device team_slave_1 added [ 1757.972987][ T5958] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1758.200139][ T10] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1758.265153][T21342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1758.265167][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.265188][T21342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1758.269717][T21342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1758.269730][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.269752][T21342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1758.353085][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1758.356631][ T10] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 1758.356664][ T10] usb 7-1: config 1 has no interface number 0 [ 1758.356721][ T10] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1758.356750][ T10] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1758.356781][ T10] usb 7-1: config 1 interface 236 has no altsetting 0 [ 1758.359240][ T10] usb 7-1: config 1 has an invalid interface number: 236 but max is 0 [ 1758.359270][ T10] usb 7-1: config 1 has no interface number 0 [ 1758.359330][ T10] usb 7-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1758.359358][ T10] usb 7-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1758.359396][ T10] usb 7-1: config 1 interface 236 has no altsetting 0 [ 1758.365964][ T10] usb 7-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1758.365997][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.366023][ T10] usb 7-1: Product: syz [ 1758.366041][ T10] usb 7-1: Manufacturer: syz [ 1758.366059][ T10] usb 7-1: SerialNumber: syz [ 1758.486363][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1758.486416][ T5958] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1758.486443][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.532509][ T5958] usb 3-1: config 0 descriptor?? [ 1759.860934][ T10] ti_usb_3410_5052 7-1:1.236: TI USB 5052 2 port adapter converter detected [ 1759.872182][ T5958] usbhid 3-1:0.0: can't add hid device: -71 [ 1759.872318][ T5958] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1759.907861][ T5958] usb 3-1: USB disconnect, device number 11 [ 1760.807074][T21342] hsr_slave_0: entered promiscuous mode [ 1760.810905][T21342] hsr_slave_1: entered promiscuous mode [ 1760.814742][T21342] debugfs: 'hsr0' already exists in 'hsr' [ 1760.814763][T21342] Cannot create hsr debugfs directory [ 1760.884566][ T5958] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1761.142844][ T5958] usb 3-1: Using ep0 maxpacket: 32 [ 1761.146067][ T5958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.146122][ T5958] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1761.146148][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.157209][ T5958] usb 3-1: config 0 descriptor?? [ 1761.181160][ T5958] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1761.206405][ T5958] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1762.811478][T17598] usb 3-1: USB disconnect, device number 12 [ 1762.833881][T17598] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1763.556093][T12074] usb 7-1: USB disconnect, device number 82 [ 1763.642029][T21342] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1764.073505][T21342] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1764.706286][T21342] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1764.819432][T21342] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1765.171052][T21342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1765.218912][T21342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1765.254997][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1765.255160][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1765.290434][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1765.291165][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1765.443177][T21168] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1765.453339][T21590] tipc: Enabling of bearer rejected, failed to enable media [ 1765.621535][T21168] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.621566][T21168] usb 3-1: config 0 has no interfaces? [ 1765.621601][T21168] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1765.621628][T21168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.694309][T21168] usb 3-1: config 0 descriptor?? [ 1766.642455][T21342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1767.923765][ T5958] usb 3-1: USB disconnect, device number 13 [ 1769.693090][T21342] veth0_vlan: entered promiscuous mode [ 1769.708823][T21646] tipc: Enabling of bearer rejected, failed to enable media [ 1769.785334][T21342] veth1_vlan: entered promiscuous mode [ 1769.848058][T21342] veth0_macvtap: entered promiscuous mode [ 1769.860089][T21342] veth1_macvtap: entered promiscuous mode [ 1769.896010][T21342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1769.913048][T21342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1770.665817][ T3018] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.709154][ T3018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.715124][ T3018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.851752][ T3018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.996573][T21663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4448'. [ 1771.080778][T21663] team0: entered promiscuous mode [ 1771.082103][T21663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1771.113824][T21663] bridge0: port 1(macvlan2) entered blocking state [ 1771.114070][T21663] bridge0: port 1(macvlan2) entered disabled state [ 1771.114470][T21663] macvlan2: entered allmulticast mode [ 1771.114488][T21663] team0: entered allmulticast mode [ 1771.162281][T21663] macvlan2: entered promiscuous mode [ 1771.356663][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.356687][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.076319][ T3034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.076343][ T3034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.321387][ T5922] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1772.975364][ T5922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.975395][ T5922] usb 7-1: config 0 has no interfaces? [ 1772.975430][ T5922] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1772.975456][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.046403][ T5922] usb 7-1: config 0 descriptor?? [ 1774.040897][T21683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1774.257961][T21683] macvtap1: entered promiscuous mode [ 1774.257986][T21683] gretap0: entered promiscuous mode [ 1774.258197][T21683] macvtap1: entered allmulticast mode [ 1774.258214][T21683] gretap0: entered allmulticast mode [ 1775.180488][T21708] tipc: Enabled bearer , priority 0 [ 1775.408948][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4364'. [ 1775.506653][T21708] tipc: Resetting bearer [ 1775.634318][T17598] usb 7-1: USB disconnect, device number 83 [ 1775.943204][T21714] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4462'. [ 1776.112168][T21706] tipc: Disabling bearer [ 1779.713980][ T5922] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1779.867667][ T5922] usb 8-1: Using ep0 maxpacket: 16 [ 1779.869463][ T5922] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 1779.869482][ T5922] usb 8-1: config 0 has an invalid interface number: 9 but max is 1 [ 1779.869497][ T5922] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1779.869513][ T5922] usb 8-1: config 0 has no interface number 0 [ 1779.869537][ T5922] usb 8-1: config 0 interface 9 has no altsetting 0 [ 1779.869551][ T5922] usb 8-1: config 0 interface 9 has no altsetting 1 [ 1779.871583][ T5922] usb 8-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 1779.871603][ T5922] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1779.871617][ T5922] usb 8-1: Product: syz [ 1779.871628][ T5922] usb 8-1: Manufacturer: syz [ 1779.871639][ T5922] usb 8-1: SerialNumber: syz [ 1779.975216][ T5922] usb 8-1: config 0 descriptor?? [ 1781.408588][ T5922] usb 8-1: selecting invalid altsetting 1 [ 1781.408626][ T5922] sierra 8-1:0.9: Sierra USB modem converter detected [ 1781.432637][ T5922] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 1781.445508][ T5922] usb 8-1: USB disconnect, device number 75 [ 1781.465511][ T5922] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1781.465853][ T5922] sierra 8-1:0.9: device disconnected [ 1782.103212][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1782.252839][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 1782.255292][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1782.255328][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1782.255354][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1782.255381][ T31] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1782.255427][ T31] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1782.255452][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.392533][T21761] tipc: Enabled bearer , priority 0 [ 1782.467894][ T31] usb 9-1: GET_CAPABILITIES returned 0 [ 1782.467930][ T31] usbtmc 9-1:16.0: can't read capabilities [ 1782.495542][T21762] tipc: Resetting bearer [ 1782.673810][ T5958] usb 9-1: USB disconnect, device number 2 [ 1782.812592][T21760] tipc: Disabling bearer [ 1784.689718][T21781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4482'. [ 1784.793405][T21783] fuse: Bad value for 'fd' [ 1792.734724][T12074] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1792.895564][T12074] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1792.895630][T12074] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1792.895659][T12074] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1792.895688][T12074] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1792.895719][T12074] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1792.895767][T12074] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1792.895800][T12074] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.905241][T12074] usb 8-1: config 0 descriptor?? [ 1792.906725][T21790] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1793.348990][T12074] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 1793.349038][T12074] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 1793.463638][T12074] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1793.681530][ T5958] usb 8-1: USB disconnect, device number 76 [ 1793.794987][T21799] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4489'. [ 1794.346944][T21801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1795.645311][T21807] tipc: Enabled bearer , priority 0 [ 1795.717990][T21810] tipc: Resetting bearer [ 1797.384204][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.465561][T21806] tipc: Disabling bearer [ 1799.348588][T21836] trusted_key: syz.2.4500 sent an empty control message without MSG_MORE. [ 1799.453190][T21842] sd 0:0:1:0: device reset [ 1799.842960][ T5958] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1800.376055][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4507'. [ 1800.959105][ T5958] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1800.959183][ T5958] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1800.959230][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1800.959277][ T5958] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1800.959332][ T5958] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1800.959379][ T5958] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1800.959420][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.002191][ T5958] usb 9-1: config 0 descriptor?? [ 1801.004965][T21840] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1801.013732][T12074] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1801.171985][T21862] tipc: Enabling of bearer rejected, failed to enable media [ 1808.026292][T12074] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 1808.026336][T12074] usb 3-1: can't read configurations, error -110 [ 1810.392871][T12074] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1810.520777][ T5958] usbhid 9-1:0.0: can't add hid device: -71 [ 1810.520915][ T5958] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1810.532981][T12074] usb 3-1: device descriptor read/64, error -32 [ 1810.540245][ T5958] usb 9-1: USB disconnect, device number 3 [ 1810.643276][T12074] usb usb3-port1: attempt power cycle [ 1813.568228][T21898] binder: 21897:21898 ioctl c0306201 0 returned -14 [ 1814.336301][ T5958] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1814.485243][ T5958] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1814.485314][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1814.485346][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1814.485375][ T5958] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1814.485405][ T5958] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1814.485454][ T5958] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1814.485480][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.491373][ T5958] usb 7-1: config 0 descriptor?? [ 1814.492643][T21902] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1814.665740][T19044] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1814.826516][T19044] usb 9-1: config 0 has no interfaces? [ 1814.826560][T19044] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1814.826587][T19044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.874960][T19044] usb 9-1: config 0 descriptor?? [ 1815.036270][ T5958] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 1815.036324][ T5958] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 1815.066889][ T5958] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1815.086116][T21905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1815.086618][T21905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1815.117440][ T5958] usb 9-1: USB disconnect, device number 4 [ 1815.296120][T12972] usb 7-1: USB disconnect, device number 84 [ 1815.378215][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4534'. [ 1816.845503][T21941] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1817.264181][ T5854] Bluetooth: hci5: Malformed Event: 0x02 [ 1818.468822][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4548'. [ 1819.013811][T19044] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1819.358754][T21983] netlink: zone id is out of range [ 1819.380631][T21983] netlink: zone id is out of range [ 1819.444054][T21983] netlink: zone id is out of range [ 1819.499428][T21983] netlink: zone id is out of range [ 1819.499442][T21983] netlink: zone id is out of range [ 1819.499449][T21983] netlink: zone id is out of range [ 1819.499455][T21983] netlink: zone id is out of range [ 1819.499462][T21983] netlink: zone id is out of range [ 1819.499467][T21983] netlink: zone id is out of range [ 1819.499474][T21983] netlink: zone id is out of range [ 1819.634959][T19044] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 1819.635025][T19044] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1819.635054][T19044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1819.635085][T19044] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1819.635127][T19044] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1819.635162][T19044] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1819.635179][T19044] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.644692][T19044] usb 9-1: config 0 descriptor?? [ 1819.673834][T21979] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1820.550228][T19044] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 1820.607475][T19044] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1821.634543][T21994] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1821.684690][ T31] usb 9-1: USB disconnect, device number 5 [ 1824.299522][T22041] syz_tun: entered allmulticast mode [ 1824.338112][T22041] dvmrp8: entered allmulticast mode [ 1824.361125][T22041] syz_tun: left allmulticast mode [ 1824.361267][T22041] dvmrp8: left allmulticast mode [ 1824.706591][T22046] tipc: Enabled bearer , priority 0 [ 1824.736560][T22046] tipc: Resetting bearer [ 1825.981826][T22045] tipc: Disabling bearer [ 1826.367678][T22061] syzkaller0: entered promiscuous mode [ 1826.367791][T22061] syzkaller0: entered allmulticast mode [ 1826.623652][T22067] No control pipe specified [ 1827.409899][ T31] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1827.439654][ T31] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1829.938061][T22099] tipc: Enabled bearer , priority 0 [ 1829.961799][T22099] tipc: Resetting bearer [ 1830.338911][T22098] tipc: Disabling bearer [ 1830.706686][T22107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1830.881031][T22111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4591'. [ 1831.012914][T17598] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1831.166003][T17598] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1831.166054][T17598] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1831.166081][T17598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.209631][T17598] usb 3-1: config 0 descriptor?? [ 1832.173584][T19044] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1832.333173][T19044] usb 4-1: Using ep0 maxpacket: 32 [ 1832.338102][T19044] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1832.338133][T19044] usb 4-1: config 1 has no interface number 0 [ 1832.338185][T19044] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1832.338316][T19044] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1832.338345][T19044] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1832.340010][T19044] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1832.340036][T19044] usb 4-1: config 1 has no interface number 0 [ 1832.340088][T19044] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1832.340113][T19044] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1832.340138][T19044] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1832.443001][T19044] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1832.443026][T19044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.443041][T19044] usb 4-1: Product: syz [ 1832.443052][T19044] usb 4-1: Manufacturer: syz [ 1832.443063][T19044] usb 4-1: SerialNumber: syz [ 1832.491169][T19044] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 1833.945077][ T5958] usb 3-1: USB disconnect, device number 17 [ 1835.295641][T22150] tipc: Enabled bearer , priority 0 [ 1835.318887][T22150] tipc: Resetting bearer [ 1835.749606][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4603'. [ 1836.784000][T22149] tipc: Disabling bearer [ 1836.870476][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4607'. [ 1836.870497][T22162] net_ratelimit: 5 callbacks suppressed [ 1836.870506][T22162] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1837.754926][T22172] lo speed is unknown, defaulting to 1000 [ 1837.757117][T22172] lo speed is unknown, defaulting to 1000 [ 1837.802373][T22172] lo speed is unknown, defaulting to 1000 [ 1838.119884][T22172] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1838.429093][T22172] lo speed is unknown, defaulting to 1000 [ 1838.432124][T22172] lo speed is unknown, defaulting to 1000 [ 1838.437837][T22172] lo speed is unknown, defaulting to 1000 [ 1838.440899][T22172] lo speed is unknown, defaulting to 1000 [ 1838.443910][T22172] lo speed is unknown, defaulting to 1000 [ 1838.622982][T19044] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1838.779560][T19044] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1838.779603][T19044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.779618][T19044] usb 8-1: Product: syz [ 1838.779629][T19044] usb 8-1: Manufacturer: syz [ 1838.779640][T19044] usb 8-1: SerialNumber: syz [ 1838.824810][T19044] usb 8-1: config 0 descriptor?? [ 1839.034449][T19044] hso 8-1:0.0: Failed to find BULK IN ep [ 1839.243573][T22171] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1839.268361][T22171] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1839.268388][T22171] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1839.293393][T22171] vhci_hcd vhci_hcd.0: Device attached [ 1839.298342][T22171] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 1839.373494][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4614'. [ 1839.653096][T12074] usb 48-1: SetAddress Request (2) to port 0 [ 1839.656168][T12074] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1840.053490][T19044] usb 4-1: USB disconnect, device number 14 [ 1840.435925][T22199] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4616'. [ 1841.410452][T19044] usb 8-1: USB disconnect, device number 77 [ 1841.429173][T22185] vhci_hcd: connection reset by peer [ 1841.453765][ T1170] vhci_hcd: stop threads [ 1841.453787][ T1170] vhci_hcd: release socket [ 1841.462657][ T1170] vhci_hcd: disconnect device [ 1841.539031][T22203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1841.539059][T22203] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1842.902509][T22222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4624'. [ 1844.501967][T22231] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 1845.116302][T12074] usb 48-1: device descriptor read/8, error -110 [ 1845.173021][ T5922] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1845.492838][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1845.576928][ T5922] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1845.576962][ T5922] usb 3-1: config 1 has no interface number 0 [ 1845.577014][ T5922] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1845.577041][ T5922] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1845.577067][ T5922] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1845.579679][ T5922] usb 3-1: config 1 has an invalid interface number: 236 but max is 0 [ 1845.579707][ T5922] usb 3-1: config 1 has no interface number 0 [ 1845.579787][ T5922] usb 3-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1845.579812][ T5922] usb 3-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1845.579839][ T5922] usb 3-1: config 1 interface 236 has no altsetting 0 [ 1845.685443][ T5922] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1845.685467][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.685483][ T5922] usb 3-1: Product: syz [ 1845.685494][ T5922] usb 3-1: Manufacturer: syz [ 1845.685505][ T5922] usb 3-1: SerialNumber: syz [ 1845.742920][T12074] usb usb48-port1: attempt power cycle [ 1845.757368][ T5922] ti_usb_3410_5052 3-1:1.236: TI USB 5052 2 port adapter converter detected [ 1846.172826][ T5958] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1846.172829][ T5922] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1846.341294][T12074] usb usb48-port1: unable to enumerate USB device [ 1846.365442][ T5922] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1846.365492][ T5922] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1846.365518][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.407967][ T5922] usb 4-1: config 0 descriptor?? [ 1846.422594][ T5958] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1846.423753][ T5958] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.424038][ T5958] usb 9-1: Product: syz [ 1846.424062][ T5958] usb 9-1: Manufacturer: syz [ 1846.424344][ T5958] usb 9-1: SerialNumber: syz [ 1846.501005][ T5958] usb 9-1: config 0 descriptor?? [ 1846.720911][ T5958] hso 9-1:0.0: Failed to find BULK IN ep [ 1847.223714][T22244] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1847.260416][T22244] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1847.260438][T22244] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1847.260516][T22244] vhci_hcd vhci_hcd.0: Device attached [ 1847.261017][T22244] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 1847.539190][T12972] usb 50-1: SetAddress Request (2) to port 0 [ 1847.539274][T12972] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1849.151627][T22263] vhci_hcd: connection reset by peer [ 1849.181993][ T31] usb 9-1: USB disconnect, device number 6 [ 1849.202899][ T43] vhci_hcd: stop threads [ 1849.202921][ T43] vhci_hcd: release socket [ 1849.202996][ T43] vhci_hcd: disconnect device [ 1850.924735][ T6013] usb 4-1: USB disconnect, device number 15 [ 1851.098000][T22290] netlink: 'syz.8.4645': attribute type 1 has an invalid length. [ 1851.098030][T22290] netlink: 'syz.8.4645': attribute type 1 has an invalid length. [ 1851.098859][T22290] netlink: 'syz.8.4645': attribute type 1 has an invalid length. [ 1851.207740][T12074] usb 3-1: USB disconnect, device number 18 [ 1851.270440][T22292] tipc: Enabled bearer , priority 0 [ 1851.303079][ T5958] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1851.337000][T22292] tipc: Resetting bearer [ 1851.460219][ T5958] usb 7-1: Using ep0 maxpacket: 32 [ 1851.464464][ T5958] usb 7-1: config 0 has an invalid interface number: 238 but max is 0 [ 1851.464495][ T5958] usb 7-1: config 0 has no interface number 0 [ 1851.469048][ T5958] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=70.50 [ 1851.469080][ T5958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.469104][ T5958] usb 7-1: Product: syz [ 1851.469121][ T5958] usb 7-1: Manufacturer: syz [ 1851.469139][ T5958] usb 7-1: SerialNumber: syz [ 1851.576516][ T5958] usb 7-1: config 0 descriptor?? [ 1851.674973][ T5958] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1851.675070][ T5958] gspca_stv06xx: st6422 sensor detected [ 1852.425709][T22291] tipc: Disabling bearer [ 1852.583129][T12972] usb 50-1: device descriptor read/8, error -110 [ 1852.985495][T12972] usb usb50-port1: attempt power cycle [ 1853.382984][ T5958] STV06xx 7-1:0.238: probe with driver STV06xx failed with error -71 [ 1853.601943][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1853.796792][ T5958] usb 7-1: unknown interface protocol 0x9, assuming v1 [ 1853.796813][ T5958] usb 7-1: cannot find UAC_HEADER [ 1853.867082][ T5958] snd-usb-audio 7-1:0.238: probe with driver snd-usb-audio failed with error -22 [ 1853.880723][ T5958] usb 7-1: USB disconnect, device number 85 [ 1853.908899][ T31] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1853.908923][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.908938][ T31] usb 3-1: Product: syz [ 1853.908949][ T31] usb 3-1: Manufacturer: syz [ 1853.908960][ T31] usb 3-1: SerialNumber: syz [ 1853.953804][ T31] usb 3-1: config 0 descriptor?? [ 1854.077448][T12972] usb usb50-port1: unable to enumerate USB device [ 1854.164220][ T31] hso 3-1:0.0: Failed to find BULK IN ep [ 1854.753212][T22315] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1854.913971][T22332] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 1854.920064][T22315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1854.920096][T22315] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1854.920204][T22315] vhci_hcd vhci_hcd.0: Device attached [ 1855.245214][ T31] usb 38-1: SetAddress Request (2) to port 0 [ 1855.245283][ T31] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1855.400104][T22337] netlink: 'syz.7.4661': attribute type 1 has an invalid length. [ 1855.400135][T22337] netlink: 'syz.7.4661': attribute type 1 has an invalid length. [ 1855.426979][T22337] netlink: 'syz.7.4661': attribute type 1 has an invalid length. [ 1855.462834][T20480] Bluetooth: hci1: command 0x0406 tx timeout [ 1856.814828][T22331] vhci_hcd: connection reset by peer [ 1856.816349][ T3018] vhci_hcd: stop threads [ 1856.816369][ T3018] vhci_hcd: release socket [ 1856.816441][ T3018] vhci_hcd: disconnect device [ 1856.818252][T12972] usb 3-1: USB disconnect, device number 19 [ 1857.313653][T19044] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1857.463697][T12074] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1857.797803][T19044] usb 3-1: config 0 has no interfaces? [ 1857.799512][T19044] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1857.799740][T19044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.930618][T12074] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 1857.930682][T12074] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1857.930712][T12074] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1857.930740][T12074] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1857.930769][T12074] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1857.930814][T12074] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1857.930839][T12074] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.006360][T19044] usb 3-1: config 0 descriptor?? [ 1858.034509][T12074] usb 8-1: config 0 descriptor?? [ 1858.035883][T22352] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1858.293201][T22355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.294174][T22355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.498811][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.927106][T12074] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 1858.953977][T12074] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1858.997008][T12074] usb 3-1: USB disconnect, device number 20 [ 1859.322315][T12972] usb 8-1: USB disconnect, device number 78 [ 1860.118689][T22378] netlink: 'syz.6.4674': attribute type 1 has an invalid length. [ 1860.118719][T22378] netlink: 'syz.6.4674': attribute type 1 has an invalid length. [ 1860.355293][ T31] usb 38-1: device descriptor read/8, error -110 [ 1860.467924][T22361] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1861.016312][T22361] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1861.016346][T22361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.016368][T22361] usb 4-1: Product: syz [ 1861.016385][T22361] usb 4-1: Manufacturer: syz [ 1861.016401][T22361] usb 4-1: SerialNumber: syz [ 1861.033276][ T31] usb usb38-port1: attempt power cycle [ 1861.085230][T22361] usb 4-1: config 0 descriptor?? [ 1861.916109][T22381] trusted_key: encrypted_key: master key parameter 'deftrust' is invalid [ 1861.919294][T22381] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1861.919325][T22381] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1861.919431][T22381] vhci_hcd vhci_hcd.0: Device attached [ 1861.920286][T22381] trusted_key: encrypted_key: master key parameter 'defa' is invalid [ 1862.176734][T22361] hso 4-1:0.0: Failed to find BULK IN ep [ 1862.394716][T12972] usb 40-1: SetAddress Request (2) to port 0 [ 1862.394810][T12972] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1862.602089][T22408] tipc: Enabled bearer , priority 0 [ 1862.837162][ T31] usb usb38-port1: unable to enumerate USB device [ 1863.659427][T22400] vhci_hcd: connection reset by peer [ 1863.661537][ T6028] usb 4-1: USB disconnect, device number 16 [ 1863.693165][T21416] vhci_hcd: stop threads [ 1863.693188][T21416] vhci_hcd: release socket [ 1863.693276][T21416] vhci_hcd: disconnect device [ 1863.966670][T22407] tipc: Disabling bearer [ 1865.224747][T22438] netlink: 'syz.6.4692': attribute type 1 has an invalid length. [ 1865.224766][T22438] netlink: 'syz.6.4692': attribute type 1 has an invalid length. [ 1866.077263][T22447] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1867.689162][T12972] usb 40-1: device descriptor read/8, error -110 [ 1867.913733][T22463] 9pnet_fd: Insufficient options for proto=fd [ 1868.086230][T12972] usb usb40-port1: attempt power cycle [ 1869.254014][T22477] tipc: Started in network mode [ 1869.254048][T22477] tipc: Node identity 367505d33548, cluster identity 4711 [ 1869.254927][T22477] tipc: Enabled bearer , priority 0 [ 1869.497183][T12972] usb usb40-port1: unable to enumerate USB device [ 1869.578062][T22486] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 1869.578094][T22486] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 1869.579087][T22486] netlink: 'syz.2.4706': attribute type 1 has an invalid length. [ 1870.375880][ T6028] tipc: Node number set to 54330835 [ 1870.491956][T22476] tipc: Disabling bearer [ 1870.847347][T22506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1871.586797][T22508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4713'. [ 1872.427404][T22517] 9pnet_fd: Insufficient options for proto=fd [ 1875.002885][T12972] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1875.402935][T12972] usb 8-1: Using ep0 maxpacket: 32 [ 1875.406876][T12972] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 1875.406906][T12972] usb 8-1: config 1 has no interface number 0 [ 1875.406958][T12972] usb 8-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1875.406984][T12972] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1875.407012][T12972] usb 8-1: config 1 interface 236 has no altsetting 0 [ 1875.408467][T12972] usb 8-1: config 1 has an invalid interface number: 236 but max is 0 [ 1875.408493][T12972] usb 8-1: config 1 has no interface number 0 [ 1875.408546][T12972] usb 8-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1875.408571][T12972] usb 8-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1875.408598][T12972] usb 8-1: config 1 interface 236 has no altsetting 0 [ 1875.411775][T12972] usb 8-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1875.411806][T12972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.411829][T12972] usb 8-1: Product: syz [ 1875.411846][T12972] usb 8-1: Manufacturer: syz [ 1875.411862][T12972] usb 8-1: SerialNumber: syz [ 1876.139924][T12972] ti_usb_3410_5052 8-1:1.236: TI USB 5052 2 port adapter converter detected [ 1876.434492][T22542] tipc: Enabled bearer , priority 0 [ 1876.466708][T22542] tipc: Resetting bearer [ 1878.283612][T22541] tipc: Disabling bearer [ 1879.374651][T22557] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4727'. [ 1880.052878][T12972] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1880.205793][T12972] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1880.205828][T12972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.211114][T12972] usb 4-1: config 0 descriptor?? [ 1880.427583][T12972] usb 4-1: Cannot read MAC address [ 1880.427885][T12972] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1881.250473][T22576] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4733'. [ 1882.078721][T22581] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4734'. [ 1882.452955][T12972] usb 8-1: USB disconnect, device number 79 [ 1884.117454][ T6013] usb 4-1: USB disconnect, device number 17 [ 1889.100181][T22617] tipc: Enabled bearer , priority 0 [ 1889.112182][T22617] syzkaller0: entered promiscuous mode [ 1889.112215][T22617] syzkaller0: entered allmulticast mode [ 1889.158760][T22617] tipc: Resetting bearer [ 1889.190943][T22616] tipc: Resetting bearer [ 1889.332831][ T31] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1889.378042][T22616] tipc: Disabling bearer [ 1889.482883][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 1889.486541][ T31] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1889.486572][ T31] usb 4-1: config 1 has no interface number 0 [ 1889.486623][ T31] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1889.486649][ T31] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1889.486675][ T31] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1889.488125][ T31] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1889.488152][ T31] usb 4-1: config 1 has no interface number 0 [ 1889.488202][ T31] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1889.488227][ T31] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1889.488254][ T31] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1889.491236][ T31] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1889.491267][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.491289][ T31] usb 4-1: Product: syz [ 1889.491305][ T31] usb 4-1: Manufacturer: syz [ 1889.491321][ T31] usb 4-1: SerialNumber: syz [ 1889.637923][ T31] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 1891.365947][T22639] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4748'. [ 1891.826510][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'. [ 1892.513640][T22646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4752'. [ 1893.227719][T22652] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4754'. [ 1894.641547][T22660] 9pnet_fd: Insufficient options for proto=fd [ 1895.495216][T12074] usb 4-1: USB disconnect, device number 18 [ 1898.914042][T22686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1901.129272][T22713] 9pnet_fd: Insufficient options for proto=fd [ 1901.292976][T12074] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1901.452811][T12074] usb 4-1: Using ep0 maxpacket: 32 [ 1901.455882][T12074] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1901.455913][T12074] usb 4-1: config 1 has no interface number 0 [ 1901.455965][T12074] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1901.455990][T12074] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1901.456017][T12074] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1901.457706][T12074] usb 4-1: config 1 has an invalid interface number: 236 but max is 0 [ 1901.457732][T12074] usb 4-1: config 1 has no interface number 0 [ 1901.457781][T12074] usb 4-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1901.457812][T12074] usb 4-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1901.457837][T12074] usb 4-1: config 1 interface 236 has no altsetting 0 [ 1901.461202][T12074] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1901.461231][T12074] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.461253][T12074] usb 4-1: Product: syz [ 1901.461270][T12074] usb 4-1: Manufacturer: syz [ 1901.461286][T12074] usb 4-1: SerialNumber: syz [ 1901.606132][T12074] ti_usb_3410_5052 4-1:1.236: TI USB 5052 2 port adapter converter detected [ 1903.990098][T22730] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4776'. [ 1905.002881][ T6013] usb 4-1: USB disconnect, device number 19 [ 1905.871886][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4777'. [ 1909.169969][T22760] 9pnet_fd: Insufficient options for proto=fd [ 1910.506982][T22772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1914.002826][T22361] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1914.175600][T22361] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1914.175634][T22361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.212588][T22361] usb 3-1: config 0 descriptor?? [ 1914.641563][T22801] 9pnet_fd: Insufficient options for proto=fd [ 1915.243203][T22361] usb 3-1: Cannot read MAC address [ 1915.243517][T22361] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1916.283744][T22819] tipc: Enabled bearer , priority 0 [ 1916.336989][T22819] tipc: Resetting bearer [ 1916.701426][T22825] siw: device registration error -23 [ 1917.680199][T22818] tipc: Disabling bearer [ 1917.839613][T22361] usb 3-1: USB disconnect, device number 21 [ 1918.016233][T22827] netlink: 'syz.2.4803': attribute type 1 has an invalid length. [ 1918.016254][T22827] netlink: 'syz.2.4803': attribute type 1 has an invalid length. [ 1918.410988][T22831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4804'. [ 1920.724760][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1922.470967][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4812'. [ 1922.806050][T22854] 9pnet_fd: Insufficient options for proto=fd [ 1923.512951][T22361] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1923.638688][T22866] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 1923.638719][T22866] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 1923.639560][T22866] netlink: 'syz.3.4815': attribute type 1 has an invalid length. [ 1923.666180][T22361] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1923.666216][T22361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.696268][T22361] usb 3-1: config 0 descriptor?? [ 1924.129345][T22361] usb 3-1: Cannot read MAC address [ 1924.129634][T22361] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1926.446330][ T5958] usb 3-1: USB disconnect, device number 22 [ 1926.825209][T22896] capability: warning: `syz.8.4823' uses 32-bit capabilities (legacy support in use) [ 1927.472713][T22895] 9pnet_fd: Insufficient options for proto=fd [ 1928.588023][T22915] netlink: 'syz.2.4829': attribute type 1 has an invalid length. [ 1928.588051][T22915] netlink: 'syz.2.4829': attribute type 1 has an invalid length. [ 1933.510885][T22361] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1933.668770][T22361] usb 4-1: not running at top speed; connect to a high speed hub [ 1933.671155][T22361] usb 4-1: config 127 has an invalid interface number: 219 but max is 1 [ 1933.671184][T22361] usb 4-1: config 127 has an invalid interface number: 124 but max is 1 [ 1933.671208][T22361] usb 4-1: config 127 has an invalid interface number: 113 but max is 1 [ 1933.671230][T22361] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.671251][T22361] usb 4-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1933.671274][T22361] usb 4-1: config 127 has no interface number 0 [ 1933.671292][T22361] usb 4-1: config 127 has no interface number 1 [ 1933.671309][T22361] usb 4-1: config 127 has no interface number 2 [ 1933.671386][T22361] usb 4-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1933.671415][T22361] usb 4-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1933.671438][T22361] usb 4-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1933.671462][T22361] usb 4-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1933.671491][T22361] usb 4-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1933.671537][T22361] usb 4-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1933.671563][T22361] usb 4-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1933.671608][T22361] usb 4-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1933.671636][T22361] usb 4-1: config 127 interface 113 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1933.671663][T22361] usb 4-1: config 127 interface 219 has no altsetting 0 [ 1933.671682][T22361] usb 4-1: config 127 interface 124 has no altsetting 0 [ 1933.671701][T22361] usb 4-1: config 127 interface 113 has no altsetting 0 [ 1933.698492][T22361] usb 4-1: Dual-Role OTG device on HNP port [ 1933.718783][T22361] usb 4-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1933.718817][T22361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.718840][T22361] usb 4-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1933.718870][T22361] usb 4-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1933.718899][T22361] usb 4-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1933.984120][T22947] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1937.534493][T22361] keyspan_pda 4-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1937.556308][T22361] usb 4-1: ezusb_set_reset-1 failed: -71 [ 1937.576445][T22361] usb 4-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 1937.576478][T22361] usb 4-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 1937.758694][T22970] netlink: 'syz.6.4842': attribute type 1 has an invalid length. [ 1937.758723][T22970] netlink: 'syz.6.4842': attribute type 1 has an invalid length. [ 1945.358519][T23013] tipc: Enabled bearer , priority 0 [ 1945.384161][T23013] tipc: Resetting bearer [ 1945.480571][T23016] netlink: 'syz.2.4856': attribute type 1 has an invalid length. [ 1945.480600][T23016] netlink: 'syz.2.4856': attribute type 1 has an invalid length. [ 1945.711875][T23022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4858'. [ 1945.768919][T23010] tipc: Disabling bearer [ 1947.432954][ T31] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1947.592831][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 1947.595865][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1947.595904][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1947.595932][ T31] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1947.595956][ T31] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1947.596114][ T31] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1947.596140][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.632251][ T31] usbtmc 9-1:16.0: bulk endpoints not found [ 1950.607808][T12972] usb 9-1: USB disconnect, device number 7 [ 1952.020077][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4870'. [ 1956.362881][ T6013] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1958.552879][ T31] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1958.597430][T23113] syzkaller0: entered promiscuous mode [ 1958.597453][T23113] syzkaller0: entered allmulticast mode [ 1958.716445][ T31] usb 9-1: not running at top speed; connect to a high speed hub [ 1958.718216][ T31] usb 9-1: config 127 has an invalid interface number: 219 but max is 1 [ 1958.718245][ T31] usb 9-1: config 127 has an invalid interface number: 124 but max is 1 [ 1958.718269][ T31] usb 9-1: config 127 has an invalid interface number: 113 but max is 1 [ 1958.718292][ T31] usb 9-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 1958.718313][ T31] usb 9-1: config 127 has an invalid descriptor of length 46, skipping remainder of the config [ 1958.718335][ T31] usb 9-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1958.718359][ T31] usb 9-1: config 127 has no interface number 0 [ 1958.718379][ T31] usb 9-1: config 127 has no interface number 1 [ 1958.718397][ T31] usb 9-1: config 127 has no interface number 2 [ 1958.718477][ T31] usb 9-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1958.718507][ T31] usb 9-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1958.718531][ T31] usb 9-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1958.718555][ T31] usb 9-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1958.718586][ T31] usb 9-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1958.718632][ T31] usb 9-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1958.718662][ T31] usb 9-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1958.718707][ T31] usb 9-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1958.718736][ T31] usb 9-1: config 127 interface 113 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1958.718766][ T31] usb 9-1: config 127 interface 219 has no altsetting 0 [ 1958.718787][ T31] usb 9-1: config 127 interface 124 has no altsetting 0 [ 1958.718808][ T31] usb 9-1: config 127 interface 113 has no altsetting 0 [ 1959.075216][ T31] usb 9-1: Dual-Role OTG device on HNP port [ 1959.093787][ T31] usb 9-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1959.093821][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.093845][ T31] usb 9-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1959.093876][ T31] usb 9-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1959.093904][ T31] usb 9-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1959.194585][T23107] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1961.940719][ T31] keyspan_pda 9-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1961.958835][ T31] usb 9-1: ezusb_set_reset-1 failed: -71 [ 1964.338584][T23154] 9pnet_fd: Insufficient options for proto=fd [ 1965.108769][T23166] 9pnet_fd: Insufficient options for proto=fd [ 1965.373127][T12972] usb 8-1: new full-speed USB device number 81 using dummy_hcd [ 1965.525715][T12972] usb 8-1: not running at top speed; connect to a high speed hub [ 1965.527207][T12972] usb 8-1: config 127 has an invalid interface number: 219 but max is 1 [ 1965.527237][T12972] usb 8-1: config 127 has an invalid interface number: 124 but max is 1 [ 1965.527253][T12972] usb 8-1: config 127 has an invalid interface number: 113 but max is 1 [ 1965.527268][T12972] usb 8-1: config 127 has an invalid descriptor of length 238, skipping remainder of the config [ 1965.527283][T12972] usb 8-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 1965.527305][T12972] usb 8-1: config 127 has no interface number 0 [ 1965.527318][T12972] usb 8-1: config 127 has no interface number 1 [ 1965.527330][T12972] usb 8-1: config 127 has no interface number 2 [ 1965.527383][T12972] usb 8-1: config 127 interface 219 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1965.527404][T12972] usb 8-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1965.527419][T12972] usb 8-1: config 127 interface 219 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1965.527435][T12972] usb 8-1: config 127 interface 219 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1965.527455][T12972] usb 8-1: too many endpoints for config 127 interface 124 altsetting 215: 120, using maximum allowed: 30 [ 1965.527487][T12972] usb 8-1: config 127 interface 124 altsetting 215 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1965.527507][T12972] usb 8-1: config 127 interface 124 altsetting 215 has 2 endpoint descriptors, different from the interface descriptor's value: 120 [ 1965.527538][T12972] usb 8-1: config 127 interface 113 altsetting 5 endpoint 0x89 has invalid maxpacket 6249, setting to 64 [ 1965.527560][T12972] usb 8-1: config 127 interface 113 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1965.527579][T12972] usb 8-1: config 127 interface 219 has no altsetting 0 [ 1965.527593][T12972] usb 8-1: config 127 interface 124 has no altsetting 0 [ 1965.527607][T12972] usb 8-1: config 127 interface 113 has no altsetting 0 [ 1965.531771][T12972] usb 8-1: Dual-Role OTG device on HNP port [ 1965.532114][T12972] usb 8-1: New USB device found, idVendor=085a, idProduct=8025, bcdDevice=ed.38 [ 1965.532141][T12972] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.532164][T12972] usb 8-1: Product: 盌侰緔ۚ▿뭒☕๚環搹歴ㄺꝀ惬漕횟ᙇꁜ朗蠵ꗊ켜샕뽒묰纋괌軁⚋᯳㏨䱵ឥ戁Ջ爄㚱ᰄ㧐冰俾⍽땴鹹ኯ븆悜ៃ捄꧄鼽쬓⣇磶橱⏜뒒䅼빮螛 [ 1965.532193][T12972] usb 8-1: Manufacturer: ꍲ뜏຿㐗⢙ढ़⺅裂岢ᬡ냕棶羜㱫ё೶步쨈ꇷ蒻矌脈讻넠邏㇨߄㇄싮뻂검媨⩧䵵ꔑ콕햯ᗻ죅ᐘɔ䌎諈൷눎ᨃ㓗ᏺ쳜鵞⣦럋ණ䎌Ⓝ划ᔺ뮶臋絘邊㎟ [ 1965.532222][T12972] usb 8-1: SerialNumber: 鼇ꆪㆼ٣줜헥嚙嘦酆隊ꈧ뼗䒁⤞ [ 1965.861790][T23169] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1968.600874][T12972] keyspan_pda 8-1:127.219: Keyspan PDA - (prerenumeration) converter detected [ 1968.601374][T12972] usb 8-1: ezusb_set_reset-1 failed: -71 [ 1971.213861][T23199] syzkaller0: entered promiscuous mode [ 1971.213893][T23199] syzkaller0: entered allmulticast mode [ 1971.293584][T23202] No control pipe specified [ 1971.986596][T23209] siw: device registration error -23 [ 1973.875764][T23214] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4912'. [ 1976.313351][T23238] No control pipe specified [ 1976.737448][T23247] syzkaller0: entered promiscuous mode [ 1976.737480][T23247] syzkaller0: entered allmulticast mode [ 1977.921312][T23256] siw: device registration error -23 [ 1981.219034][T23274] No control pipe specified [ 1981.309222][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.347151][T23279] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1981.351477][T23279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1981.369348][T23279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1981.686220][T23279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1981.701585][T23279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1982.006673][T23277] lo speed is unknown, defaulting to 1000 [ 1982.780716][T23277] chnl_net:caif_netlink_parms(): no params data found [ 1983.274928][T23295] syzkaller0: entered promiscuous mode [ 1983.274965][T23295] syzkaller0: entered allmulticast mode [ 1983.862957][ T5854] Bluetooth: hci0: command tx timeout [ 1984.253090][T23277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.253193][T23277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1984.253399][T23277] bridge_slave_0: entered allmulticast mode [ 1984.255682][T23277] bridge_slave_0: entered promiscuous mode [ 1984.258902][T23277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.259099][T23277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.259266][T23277] bridge_slave_1: entered allmulticast mode [ 1984.261519][T23277] bridge_slave_1: entered promiscuous mode [ 1985.942870][ T5854] Bluetooth: hci0: command tx timeout [ 1986.478981][T23277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1986.482262][T23277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1986.593328][T23322] siw: device registration error -23 [ 1988.022860][ T5854] Bluetooth: hci0: command tx timeout [ 1988.114370][T23325] Bluetooth: MGMT ver 1.23 [ 1988.338903][T23277] team0: Port device team_slave_0 added [ 1988.452527][T23277] team0: Port device team_slave_1 added [ 1995.802562][ T5854] Bluetooth: hci0: command tx timeout [ 1996.165067][T23277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.165086][T23277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.165116][T23277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1996.166974][T23277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1996.166986][T23277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1996.167006][T23277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1996.434761][T23277] hsr_slave_0: entered promiscuous mode [ 1996.436635][T23277] hsr_slave_1: entered promiscuous mode [ 1996.437598][T23277] debugfs: 'hsr0' already exists in 'hsr' [ 1996.437632][T23277] Cannot create hsr debugfs directory [ 1996.958735][T23277] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1996.998671][T23277] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1997.022444][T23277] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1997.060117][T23277] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1997.267859][T23277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1997.295660][T23277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1997.316186][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1997.316419][ T3124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1997.348732][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1997.348892][ T3124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1997.680303][T23277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1998.055495][T23277] veth0_vlan: entered promiscuous mode [ 1998.070904][T23277] veth1_vlan: entered promiscuous mode [ 1998.125454][T23277] veth0_macvtap: entered promiscuous mode [ 1998.140600][T23277] veth1_macvtap: entered promiscuous mode [ 1998.171612][T23277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1998.187703][T23277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1998.208360][ T3018] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.209067][ T3018] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.210247][ T3018] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.210293][ T3018] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.493196][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.493220][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.561529][T22284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.561552][T22284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.787778][T12972] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2001.787821][T12972] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2001.787934][T12972] keyspan_pda 8-1:127.219: probe with driver keyspan_pda failed with error -2 [ 2001.795561][ T31] usb 9-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2001.795590][ T31] usb 9-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2001.795724][ T31] keyspan_pda 9-1:127.219: probe with driver keyspan_pda failed with error -2 [ 2001.815193][T12972] keyspan_pda 8-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 2001.818378][T12972] usb 8-1: ezusb_set_reset-1 failed: -71 [ 2001.818478][T12972] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2001.818501][T12972] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2001.818624][T12972] keyspan_pda 8-1:127.124: probe with driver keyspan_pda failed with error -2 [ 2001.839130][T12972] keyspan_pda 8-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 2001.839834][T12972] usb 8-1: ezusb_set_reset-1 failed: -71 [ 2001.839948][T12972] usb 8-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2001.839971][T12972] usb 8-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2001.840112][T12972] keyspan_pda 8-1:127.113: probe with driver keyspan_pda failed with error -2 [ 2001.861316][T12972] usb 8-1: USB disconnect, device number 81 [ 2001.958307][ T31] keyspan_pda 9-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 2001.960367][T22361] usb 4-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2001.960393][T22361] usb 4-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2001.960540][T22361] keyspan_pda 4-1:127.219: probe with driver keyspan_pda failed with error -2 [ 2001.997997][ T31] usb 9-1: ezusb_set_reset-1 failed: -71 [ 2001.999648][ T31] usb 9-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 2001.999672][ T31] usb 9-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 2002.032552][T22361] keyspan_pda 4-1:127.124: Keyspan PDA - (prerenumeration) converter detected [ 2002.042585][T22361] usb 4-1: ezusb_set_reset-1 failed: -71 [ 2042.760033][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2063.243044][T22361] usb 4-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2063.243075][T22361] usb 4-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2063.243215][T22361] keyspan_pda 4-1:127.124: probe with driver keyspan_pda failed with error -2 [ 2063.256286][ T31] usb 9-1: ezusb_ihex_firmware_download - request "keyspan_pda/xircom_pgs.fw" failed [ 2063.256319][ T31] usb 9-1: failed to load firmware "keyspan_pda/xircom_pgs.fw" [ 2063.256470][ T31] keyspan_pda 9-1:127.124: probe with driver keyspan_pda failed with error -2 [ 2063.314396][T22361] keyspan_pda 4-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 2063.314798][T22361] usb 4-1: ezusb_set_reset-1 failed: -71 [ 2063.315841][T22361] usb 4-1: Direct firmware load for keyspan_pda/xircom_pgs.fw failed with error -2 [ 2063.315858][T22361] usb 4-1: Falling back to sysfs fallback for: keyspan_pda/xircom_pgs.fw [ 2063.318773][ T31] keyspan_pda 9-1:127.113: Keyspan PDA - (prerenumeration) converter detected [ 2063.319227][ T31] usb 9-1: ezusb_set_reset-1 failed: -71 [ 2104.206430][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 2106.262930][T23279] Bluetooth: hci0: command 0x0406 tx timeout [ 2122.103335][ T38] INFO: task syz.2.4895:23173 blocked for more than 143 seconds. [ 2122.103363][ T38] Not tainted syzkaller #0 [ 2122.103375][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2122.103387][ T38] task:syz.2.4895 state:D stack:26664 pid:23173 tgid:23156 ppid:16497 task_flags:0x400040 flags:0x00004004 [ 2122.103456][ T38] Call Trace: [ 2122.103464][ T38] [ 2122.103482][ T38] __schedule+0x16f3/0x4c20 [ 2122.103553][ T38] ? __pfx___schedule+0x10/0x10 [ 2122.103615][ T38] rt_mutex_schedule+0x77/0xf0 [ 2122.103639][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2122.103685][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 2122.103718][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 2122.103750][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2122.103781][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2122.103807][ T38] ? __lock_acquire+0xab9/0xd20 [ 2122.103852][ T38] ? usbdev_open+0x16e/0x790 [ 2122.103898][ T38] ? bus_find_device+0x279/0x2c0 [ 2122.103932][ T38] ? __pfx_device_match_devt+0x10/0x10 [ 2122.103966][ T38] ? usbdev_open+0x16e/0x790 [ 2122.103996][ T38] mutex_lock_nested+0x16a/0x1d0 [ 2122.104022][ T38] ? usbdev_open+0xa7/0x790 [ 2122.104060][ T38] usbdev_open+0x16e/0x790 [ 2122.104092][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 2122.104122][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2122.104153][ T38] ? __pfx_usbdev_open+0x10/0x10 [ 2122.104199][ T38] chrdev_open+0x4cf/0x5e0 [ 2122.104237][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 2122.104273][ T38] ? fsnotify_open_perm_and_set_mode+0x116/0x620 [ 2122.104313][ T38] ? __pfx_chrdev_open+0x10/0x10 [ 2122.104345][ T38] do_dentry_open+0x9b1/0x1350 [ 2122.104383][ T38] vfs_open+0x3b/0x350 [ 2122.104402][ T38] ? path_openat+0x2ed9/0x3840 [ 2122.104433][ T38] path_openat+0x2ef1/0x3840 [ 2122.104465][ T38] ? try_to_take_rt_mutex+0x840/0xb00 [ 2122.104527][ T38] ? __pfx_path_openat+0x10/0x10 [ 2122.104555][ T38] ? do_raw_spin_lock+0x121/0x290 [ 2122.104595][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2122.104631][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2122.104667][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2122.104711][ T38] do_filp_open+0x1fa/0x410 [ 2122.104740][ T38] ? __pfx_do_filp_open+0x10/0x10 [ 2122.104763][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2122.104821][ T38] ? alloc_fd+0x64f/0x6c0 [ 2122.104866][ T38] do_sys_openat2+0x121/0x1c0 [ 2122.104901][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 2122.104927][ T38] ? exc_page_fault+0x76/0xf0 [ 2122.104964][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 2122.104995][ T38] __x64_sys_openat+0x138/0x170 [ 2122.105026][ T38] do_syscall_64+0xfa/0x3b0 [ 2122.105048][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2122.105082][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.105105][ T38] ? clear_bhb_loop+0x60/0xb0 [ 2122.105134][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2122.105158][ T38] RIP: 0033:0x7f97a442d510 [ 2122.105179][ T38] RSP: 002b:00007f97a2653b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2122.105202][ T38] RAX: ffffffffffffffda RBX: 0000000000101301 RCX: 00007f97a442d510 [ 2122.105219][ T38] RDX: 0000000000101301 RSI: 00007f97a2653c10 RDI: 00000000ffffff9c [ 2122.105234][ T38] RBP: 00007f97a2653c10 R08: 0000000000000000 R09: 0000000000000000 [ 2122.105249][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 2122.105264][ T38] R13: 00007f97a4676218 R14: 00007f97a4676180 R15: 00007ffe06f5c7a8 [ 2122.105301][ T38] [ 2122.105323][ T38] [ 2122.105323][ T38] Showing all locks held in the system: [ 2122.105335][ T38] 5 locks held by kworker/1:0/31: [ 2122.105349][ T38] #0: ffff888021ea2138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2122.105411][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2122.105468][ T38] #2: ffff888027c17188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2122.105523][ T38] #3: ffff88806d257188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2122.105578][ T38] #4: ffff888026df8150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2122.105631][ T38] 1 lock held by khungtaskd/38: [ 2122.105643][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2122.105720][ T38] 2 locks held by getty/5599: [ 2122.105734][ T38] #0: ffff888033fe80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2122.105795][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 2122.105864][ T38] 6 locks held by kworker/1:5/22361: [ 2122.105877][ T38] #0: ffff888021ea2138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2122.105941][ T38] #1: ffffc90005f37bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2122.105998][ T38] #2: ffff888027b10188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2122.106052][ T38] #3: ffff88805ca0b188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2122.106103][ T38] #4: ffff88805ca0c150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 2122.106155][ T38] #5: ffffffff8d851160 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 2122.106211][ T38] 2 locks held by kworker/u8:12/22493: [ 2122.106226][ T38] 1 lock held by syz.2.4895/23173: [ 2122.106238][ T38] #0: ffff888027c17188 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x790 [ 2122.106300][ T38] [ 2122.106306][ T38] ============================================= [ 2122.106306][ T38] [ 2122.106323][ T38] NMI backtrace for cpu 1 [ 2122.106339][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2122.106365][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2122.106378][ T38] Call Trace: [ 2122.106387][ T38] [ 2122.106396][ T38] dump_stack_lvl+0x189/0x250 [ 2122.106435][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2122.106468][ T38] ? __pfx__printk+0x10/0x10 [ 2122.106507][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 2122.106539][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2122.106571][ T38] ? __pfx__printk+0x10/0x10 [ 2122.106601][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2122.106631][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2122.106664][ T38] watchdog+0xf93/0xfe0 [ 2122.106699][ T38] ? watchdog+0x1de/0xfe0 [ 2122.106735][ T38] kthread+0x70e/0x8a0 [ 2122.106772][ T38] ? __pfx_watchdog+0x10/0x10 [ 2122.106800][ T38] ? __pfx_kthread+0x10/0x10 [ 2122.106839][ T38] ? __pfx_kthread+0x10/0x10 [ 2122.106874][ T38] ret_from_fork+0x436/0x7d0 [ 2122.106913][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2122.106949][ T38] ? __switch_to_asm+0x39/0x70 [ 2122.106969][ T38] ? __switch_to_asm+0x33/0x70 [ 2122.106989][ T38] ? __pfx_kthread+0x10/0x10 [ 2122.107024][ T38] ret_from_fork_asm+0x1a/0x30 [ 2122.107064][ T38] [ 2122.107072][ T38] Sending NMI from CPU 1 to CPUs 0: [ 2122.107099][ C0] NMI backtrace for cpu 0 [ 2122.107117][ C0] CPU: 0 UID: 0 PID: 22493 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2122.107151][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2122.107164][ C0] Workqueue: bat_events batadv_nc_worker [ 2122.107191][ C0] RIP: 0010:__lock_acquire+0xab9/0xd20 [ 2122.107217][ C0] Code: 8d e8 eb 2d e7 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 6a 01 00 00 4c 89 f6 89 ea 4c 89 f9 e8 27 38 00 00 <85> c0 0f 84 e4 01 00 00 41 f6 46 22 10 75 2e 48 8b 1c 24 4c 89 bb [ 2122.107235][ C0] RSP: 0018:ffffc9000582f670 EFLAGS: 00000082 [ 2122.107250][ C0] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 416a5276dccd4300 [ 2122.107262][ C0] RDX: 0000000000000000 RSI: ffff88806cde29d0 RDI: ffff88806cde1dc0 [ 2122.107274][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8af95440 [ 2122.107286][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ac27 R12: 00000000dc7d2288 [ 2122.107299][ C0] R13: ffff88806cde28e0 R14: ffff88806cde29d0 R15: 74905ebd89dbbfe4 [ 2122.107313][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 2122.107327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2122.107340][ C0] CR2: 0000563c6ef04168 CR3: 000000003e100000 CR4: 00000000003526f0 [ 2122.107357][ C0] Call Trace: [ 2122.107364][ C0] [ 2122.107375][ C0] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 2122.107398][ C0] lock_acquire+0x120/0x360 [ 2122.107422][ C0] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 2122.107453][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2122.107481][ C0] ? rt_mutex_slowunlock+0xb0/0x8a0 [ 2122.107504][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2122.107535][ C0] ? __lock_acquire+0xab9/0xd20 [ 2122.107561][ C0] rt_mutex_slowunlock+0xb0/0x8a0 [ 2122.107585][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 2122.107613][ C0] ? rt_spin_lock+0x1bb/0x2c0 [ 2122.107635][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2122.107662][ C0] ? rt_spin_unlock+0x65/0x80 [ 2122.107685][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 2122.107715][ C0] batadv_nc_purge_paths+0x33e/0x3f0 [ 2122.107743][ C0] ? batadv_nc_purge_paths+0x6a/0x3f0 [ 2122.107774][ C0] batadv_nc_worker+0x8c8/0xbc0 [ 2122.107803][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 2122.107827][ C0] process_scheduled_works+0xade/0x17b0 [ 2122.107864][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2122.107897][ C0] worker_thread+0x8a0/0xda0 [ 2122.107922][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2122.107955][ C0] ? __kthread_parkme+0x7b/0x200 [ 2122.107985][ C0] kthread+0x70e/0x8a0 [ 2122.108014][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2122.108038][ C0] ? __pfx_kthread+0x10/0x10 [ 2122.108067][ C0] ? __rcu_read_unlock+0x84/0xe0 [ 2122.108090][ C0] ? __pfx_kthread+0x10/0x10 [ 2122.108119][ C0] ret_from_fork+0x436/0x7d0 [ 2122.108152][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2122.108179][ C0] ? __switch_to_asm+0x39/0x70 [ 2122.108196][ C0] ? __switch_to_asm+0x33/0x70 [ 2122.108214][ C0] ? __pfx_kthread+0x10/0x10 [ 2122.108241][ C0] ret_from_fork_asm+0x1a/0x30 [ 2122.108267][ C0] [ 2122.109102][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2122.109119][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2122.109145][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2122.109159][ T38] Call Trace: [ 2122.109168][ T38] [ 2122.109178][ T38] dump_stack_lvl+0x99/0x250 [ 2122.109212][ T38] ? __asan_memcpy+0x40/0x70 [ 2122.109237][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2122.109270][ T38] ? __pfx__printk+0x10/0x10 [ 2122.109309][ T38] vpanic+0x281/0x750 [ 2122.109345][ T38] ? __pfx_vpanic+0x10/0x10 [ 2122.109375][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 2122.109399][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 2122.109445][ T38] panic+0xb9/0xc0 [ 2122.109477][ T38] ? __pfx_panic+0x10/0x10 [ 2122.109514][ T38] ? irq_work_queue+0xc3/0x140 [ 2122.109547][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2122.109580][ T38] watchdog+0xfd2/0xfe0 [ 2122.109613][ T38] ? watchdog+0x1de/0xfe0 [ 2122.109648][ T38] kthread+0x70e/0x8a0 [ 2122.109685][ T38] ? __pfx_watchdog+0x10/0x10 [ 2122.109713][ T38] ? __pfx_kthread+0x10/0x10 [ 2122.109753][ T38] ? __pfx_kthread+0x10/0x10 [ 2122.109788][ T38] ret_from_fork+0x436/0x7d0 [ 2122.109821][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2122.109857][ T38] ? __switch_to_asm+0x39/0x70 [ 2122.109877][ T38] ? __switch_to_asm+0x33/0x70 [ 2122.109905][ T38] ? __pfx_kthread+0x10/0x10 [ 2122.109940][ T38] ret_from_fork_asm+0x1a/0x30 [ 2122.109980][ T38] [ 2122.110275][ T38] Kernel Offset: disabled