last executing test programs: 15m26.252753895s ago: executing program 4 (id=635): ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x16, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = userfaultfd(0x80001) r2 = io_uring_setup(0x112b, &(0x7f0000000100)={0x0, 0xd71b, 0x100, 0x2, 0x1f3}) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000180), 0x1) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x7, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002fc0)=""/102400, 0x19000) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x3}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 15m20.989977627s ago: executing program 4 (id=651): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x68081) r1 = socket$pptp(0x18, 0x1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xffe6) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'veth1_to_team\x00', 'team0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xe}, @common=@frag={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dhcpd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000001440)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x4, @loopback, 0x40}, 0x10, 0x0, 0x2a}], 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f00000000c0)) r10 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r10, &(0x7f0000000000)={0x18, 0x2, {0x0, @remote}}, 0x1e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 15m20.712709822s ago: executing program 4 (id=655): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = getpid() get_robust_list(r1, &(0x7f0000000440)=&(0x7f00000003c0)={&(0x7f0000000300)={&(0x7f0000000080)}, 0x0, &(0x7f0000000380)}, &(0x7f0000000480)=0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0xd) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) ftruncate(r2, 0x1) keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, 0x0, 0x0) 15m20.165680217s ago: executing program 4 (id=657): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x40, 0xfb, 0x0, 0x4}, {0x6}]}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001600410a"], 0x18}}, 0x4001) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000100)=""/36, 0x24}], 0x1) write$ppp(r1, &(0x7f0000001140)="098a", 0x2) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, 0x0, 0x200, 0x0, 0xa, 0x1ff, 0x1}) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x922, 0x12) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioperm(0x0, 0x1fb, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 15m18.418283689s ago: executing program 4 (id=660): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a32"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @global=@item_4={0x3, 0x1, 0xa, "f4ac6cf7"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 15m16.047800163s ago: executing program 4 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0xa) io_uring_setup(0x4c2d, &(0x7f0000000480)={0x0, 0x6e21, 0x8, 0x2, 0x2ec}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0}) acct(0x0) 15m15.380123754s ago: executing program 32 (id=666): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_crypto(0x10, 0x3, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0xa) io_uring_setup(0x4c2d, &(0x7f0000000480)={0x0, 0x6e21, 0x8, 0x2, 0x2ec}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0}) acct(0x0) 4m49.003047083s ago: executing program 1 (id=3062): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, 0x0, 0x20000811) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_enter(r4, 0x2003, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 4m47.55851439s ago: executing program 1 (id=3065): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012"], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 4m46.575853115s ago: executing program 1 (id=3070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 4m46.361614474s ago: executing program 1 (id=3076): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf250400"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 4m44.188463556s ago: executing program 1 (id=3084): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x7, 0x9, 0x4, 0x10}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0xe, 0x1, 0x46c, 0x29, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa0cdf1967259d3c4, 0x8000, 0x7, 0x3}}) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x0, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x240000c0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000003c0)) read$msr(r0, &(0x7f0000000400)=""/148, 0x94) recvmmsg(r1, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/94, 0x5e}, {&(0x7f0000001680)=""/45, 0x2d}, {&(0x7f00000016c0)=""/128, 0x80}, {&(0x7f0000001740)=""/179, 0xb3}, {&(0x7f0000001800)=""/252, 0xfc}, {&(0x7f0000001900)=""/69, 0x45}, {&(0x7f0000001980)=""/183, 0xb7}], 0xa, &(0x7f0000001b00)=""/234, 0xea}, 0xa}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001c00)=""/144, 0x90}, {&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/21, 0x15}, {&(0x7f0000001d40)=""/181, 0xb5}], 0x4, &(0x7f0000001e40)=""/106, 0x6a}, 0x11}, {{&(0x7f0000001ec0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001f40)=""/84, 0x54}, {&(0x7f0000001fc0)=""/75, 0x4b}, {&(0x7f0000002040)=""/48, 0x30}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/107, 0x6b}, {&(0x7f0000003100)=""/106, 0x6a}], 0x6}, 0x80000001}, {{&(0x7f0000003200)=@ax25={{0x3, @bcast}, [@netrom, @remote, @default, @netrom, @null, @rose, @rose, @null]}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003280)=""/68, 0x44}, {&(0x7f0000003300)=""/191, 0xbf}, {&(0x7f00000033c0)=""/116, 0x74}, {&(0x7f0000003440)=""/133, 0x85}, {&(0x7f0000003500)=""/37, 0x25}, {&(0x7f0000003540)=""/93, 0x5d}, {&(0x7f00000035c0)=""/74, 0x4a}, {&(0x7f0000003640)=""/10, 0xa}, {&(0x7f0000003680)=""/79, 0x4f}, {&(0x7f0000003700)=""/5, 0x5}], 0xa}, 0x8}, {{&(0x7f0000003800)=@un=@abs, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/90, 0x5a}, {&(0x7f0000004900)=""/66, 0x42}, {&(0x7f0000004980)=""/63, 0x3f}, {&(0x7f00000049c0)=""/128, 0x80}, {&(0x7f0000004a40)=""/76, 0x4c}, {&(0x7f0000004ac0)=""/143, 0x8f}, {&(0x7f0000004b80)=""/5, 0x5}, {&(0x7f0000004bc0)=""/165, 0xa5}], 0x9, &(0x7f0000004d40)=""/117, 0x75}, 0x3}], 0x5, 0x40, 0x0) syz_open_dev$loop(&(0x7f0000004f00), 0x2, 0x800) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000004f40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xf0, &(0x7f0000004fc0)={[{0x41, 0x4e00, "192da0b54f3bb3954b2b9671e5d3f47763b25d2dc6f91fa4ae3c9ea92f2f99e629c80ec28562d7edd0a534c2eca11540c0bb4905e506b310215cc19f1e8fad9a01"}, {0x46, 0x4e00, "b81f092b1be611abed071a8271bcf0491945cecabb228b63a632e45e18994116a30295db4672559d6f0daafd87c020aadc03cd0282d1686bca5a06952559ca2120ade98fb4cc"}, {0x57, 0x4e00, "0ae79cdf9892cc77bd37dd1fd731438ea0d78351bb4a8c78819dccddacbaa801e85500451462b40f6df1acc25b4a24baaf839596116016382e657a4b09daec61efc720c48e366cec7f90465fd44747c3481a3af816b8aa"}]}) renameat(r0, &(0x7f00000050c0)='./file0\x00', r0, &(0x7f0000005100)='./file0\x00') read$FUSE(r0, &(0x7f0000005140)={0x2020}, 0x2020) 4m38.928545835s ago: executing program 1 (id=3101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfe2, 0x1}) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) fanotify_mark(r2, 0x1, 0x4800107b, r3, 0x0) read$ptp(r3, &(0x7f0000000340)=""/269, 0x10d) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fremovexattr(r1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0xffffffff, 0xbf23, 0x200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCAX25DELUID(r4, 0x89e2, 0x0) 4m23.355844267s ago: executing program 33 (id=3101): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfe2, 0x1}) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) fanotify_mark(r2, 0x1, 0x4800107b, r3, 0x0) read$ptp(r3, &(0x7f0000000340)=""/269, 0x10d) syz_io_uring_setup(0x2a20, 0x0, 0x0, 0x0) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fremovexattr(r1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0xffffffff, 0xbf23, 0x200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCAX25DELUID(r4, 0x89e2, 0x0) 10.781237988s ago: executing program 5 (id=3826): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022220000009623139384e5821a070c0009007a151608d91ea32a8000830404380006e53f"], 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140002"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 10.158938521s ago: executing program 2 (id=3830): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000400)={0x20000, 0x0, [0x9, 0x3, 0x2, 0x7, 0x6, 0x7, 0x6, 0x80000001]}) syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/55, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010003c01c"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x138, 0x11, 0x148, 0x0, 0x0, 0x238, 0x2a8, 0x2a8, 0x238, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@ecn={{0x28}, {0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r2 = socket(0x10, 0x3, 0x0) getrandom(&(0x7f0000000880)=""/254, 0xfe, 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x9) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x2000) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, @hci={0x1f, 0x2, 0x1}, @can, @isdn={0x22, 0x17, 0x7, 0x4, 0xb}, 0x4f, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='team0\x00', 0x3, 0xbb07, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x400102, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x6, 0x7, "c4378b8424ad2b8fd335f78dd314472df4838a624b5e63d5", {0x6, 0x1000}, 0x7}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) 9.925951095s ago: executing program 2 (id=3833): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x40) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)="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", 0x442}, {&(0x7f0000000400)="e2d3fd70739e51711cf4a739dd880460f2909081ee53c70100d5ce96822e8e23bec11635b5d954d94f90b97d2346", 0x2e}], 0x2}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) 9.834648071s ago: executing program 2 (id=3835): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000d40)=""/4084, 0xff4}], 0x1}, 0x8000}], 0x1, 0x12002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000001cc0)=""/4072, 0xc26bfe8e8f6baca8}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x78, "7e05cbdbe5d787ab225e55229c4de0dcd27d5d856245492907fbba3df91939d0db4bf1c3d4f8f0718ff89bbe7d0834a0deefc8278fd127ab2bc5eb7f0b1c1586f60ec77652caa014ce988775af082ac617c534a72447b1440379c63d2fe048e904972233a15f6da8300f1e3a1088258cf44380edb230c63e"}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0x40}}, 0x401, 0x8}, &(0x7f0000000380)=0x90) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0x12, 0x2, 0x1, 0x0, 'veth1_macvtap\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200), 0x0, 0x0, 0x0}) ioctl$IOC_PR_PREEMPT(r10, 0x401870cb, &(0x7f00000007c0)={0x9, 0x3, 0x5}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x68, r6, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r3) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="070004003362fb4700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000180012800e00010069703665727370616e00000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x6000000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x400c040}, 0x24000000) 8.914420882s ago: executing program 3 (id=3837): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) r6 = syz_io_uring_setup(0x31e2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10100, 0xfffffffe}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000100)={0x6, r6, 0x2, {0x2, 0x1}, 0xa9}, 0x1) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000380)) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) 8.828367368s ago: executing program 6 (id=3838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x12, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x40) 8.633177547s ago: executing program 3 (id=3839): gettid() r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, 0x0, &(0x7f00000001c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000040)) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) 8.469804533s ago: executing program 2 (id=3840): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000acdaa410ca110102667601020301090212000100000000090446fd000e000010"], 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000380)={0x8, 0xffffffffffffffff, 0x80000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0xc5a0}]}) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001680)={0x128, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x200}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_BYTES={0x0, 0x18, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x0, 0x15, 0xa}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0xffffffffffffff3a, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, @IPSET_ATTR_BYTES={0x0, 0x18, 0x1, 0x0, 0xff}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5a94fc71}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_SKBPRIO={0x0, 0x1c, 0x1, 0x0, 0x60}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe0}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8080}, 0x24004000) mlock(&(0x7f0000c03000/0x2000)=nil, 0x2000) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/15, 0xf}], 0x2}, 0xfffff120}], 0x1, 0x0, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008001d000000", 0x24) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xfd73) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0) syz_usb_ep_read(r6, 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000040)=[{0x81}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x4800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x401, 0x0, 0x51, 0x4}, {0xb, 0x3, 0x8, 0x40}, {0x1, 0xd, 0xfe, 0x945d}, {0x0, 0x91, 0x2, 0x4}]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) 7.635830233s ago: executing program 6 (id=3841): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x3ff, 0x191000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r0, 0x8924, 0x20001114) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000000f000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000004c0)=""/86) io_uring_enter(0xffffffffffffffff, 0x40d9, 0x4000, 0x8, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f00000000c0)=0x1, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a405dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_enter(r4, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 7.531941669s ago: executing program 3 (id=3842): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x3ff, 0x191000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r0, 0x8924, 0x20001114) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000000f000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000004c0)=""/86) io_uring_enter(0xffffffffffffffff, 0x40d9, 0x4000, 0x8, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f00000000c0)=0x1, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a405dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={r8, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x414}, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) io_uring_enter(r4, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 7.11088025s ago: executing program 5 (id=3843): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.019802119s ago: executing program 0 (id=3844): io_setup(0x5, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 6.915147343s ago: executing program 5 (id=3845): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e014000", 0x55}], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=r11], 0x23c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80041100", @ANYRES16=r10, @ANYBLOB="000829bd7000fedbdf250100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000060006004e220000060006004e200000080005000000000008000100", @ANYRES32=0x0], 0x80}, 0x1, 0x0, 0x0, 0x50}, 0xc000) r12 = syz_pidfd_open(r7, 0x0) setns(r12, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 6.862189153s ago: executing program 0 (id=3846): io_setup(0x5, &(0x7f0000000000)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r2 = io_uring_setup(0x4c8d, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000280)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0d1922c95775c57a04f598c78adc4cfc8f575ad73725cfcca19c6d76a612bf394319e5f3c63625862a499b5a41bd2b2c4da5599a1ab74e100eb1022777b8c149ae02c60a73b57083e6d9b1c42b1f44d7581a1f8e90018eda7b958208451bca8424a1bde51b90694003044e527eccd8de92c19c3b1e7b92aa4a8131825df44645ba21f2c69d", 0x85}, {&(0x7f0000000980)="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", 0x1000}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x60, 0x80}}, {{&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e40)=[{&(0x7f00000007c0)="81372cdda7c74af46e4a10cf9a7a415276c99c535e7d8e13bb403e008a04c15846d3af4a1a48b24d914fb3276032969cef9da15fffeea0df3cac79c45790378b660106cc4fd34ce5dacd5c6bc50e682cdddd70c8d7a5d5e91b1d5be8a40a67ca8c0d2260693330c028c1c2497e3755", 0x6f}, {&(0x7f0000001980)="892da0976451d554db255b76c14a544e82a7890d92da18ad8d2e0d2ada8df6489ec944e01919bf9de6ee959c86f0fd2823ef716d5a35f56eb765d5f467e48b664fe17a9bca6aad3fc43b92a851cb6e8b07eca23f09ad2d0c8c40de6b2acd193be7bff9f5c2b07cb54ed052c936105380f319f21b2f6441cbf902ea6c774957e313cd93ec1c19241754a52016273c62b69782e098b51bd998fa7659ca7c17dec3fa7a63060cbfc25376e7c93beadb2a654937f4ca7ba007ef03e7d6b2672e468558cb4a46dabe7e0d66a6d19d7a5dbf", 0xcf}, {&(0x7f0000001a80)="0500b15b6f96ccaccf143e28e41347dbed262960b399b3942ea5093c986193be2ef2c367fb6643ddd4328b2db5d55591e8e92bc0863faa0de513fef168dea4ac4e8bdabebdb55b02133e15cd7ceba27f9960b932941a57382e318fcf00ba7ddb2ffd59569e0cf3442bc067e13db369a674e1a94363097f45ce77ce618c0c13f8c2d9702fb7d86b67354188ab9dc2bd0caa88f95a057c3d1b00ad5ab3c4d8d7c7aa77a639da73b4885e293aa99fc85fe30d15d567b97fac7dce3e035decdb2686a948f9e6d7", 0xc5}, {&(0x7f0000000840)="2cc2a3bb3fc2cab635b4ec77d2f51c30e82566df560f1cd1da3cbaf2963efa0d68b5725467288ef78180061bf4391cc07653", 0x32}, {&(0x7f0000001b80)="d7dce35e45d2969d9811d1ce41cb18c9469219b093cc3bb0c7cdf8c29c83c05f10f0eea2381a98abc3684d0e70f7800634b4f13cbd067ea73a66cee1958ad200641f70da9a37bc0f39660a3f7bafee8f0a3da49bee6b176b377ab2924bc97cce82b7f153e64693fff1851c46975e6dac7083548004e77473faf5984f938af3ee5f13d3daa5a2d2052553fe7d246f28301639b390262a458492fdc7ddf7", 0x9d}, {&(0x7f0000001d40)="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", 0xfa}, {&(0x7f0000001c40)="15d707d5c2883f6ae5e7fbdf951105f3c407c89c9f03a7d36ff82c5fcad97cd6a93a0b793dd11901192f72ca068d0a8cc657eb3a692cb2fbabaed455b6b3f94097af9bd6347f7a91a36b7e9103a04d63292bd4035459f5ef996796c17a36a8f6c6b757f204798c6ed6c7aa5c6d6d771147658e343e4e96e8189ec7", 0x7b}], 0x7, &(0x7f0000004080)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r2]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0, 0x440c1}}, {{&(0x7f0000004140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004680)=[{&(0x7f00000041c0)="f695bab42772d56c9024926758ae684621c1a1c679d252139fead2632f2869a88e9eed820058cad54a0a5a91c081fd67eb6e980537187f4e6f6545e995ba27940043d2f5c6a85d288510e1ccc14794d5a3ce5f99c2571df0cb13638fd185372ee257074d9a37ce8f71fa2e96b4e74e9727a237c695049378fb3dbcbe0622dddce77f0280f30dd2ffb3fb41d6328fcd84e3b79c4ff1e453", 0x97}, {&(0x7f0000004280)="d1ede405aba13b7b574e19b6c0dae51ee6f069ecf1af5fc3bef35bacf3af84a0b272156b0ffb652f8a1010a4ed524024fe494f580400d83e31fbef84f2bef4358189847268096df5a761126a42011bc84ebfc6e79342bb9a5dfe35927f69784ef600fd78faa0645dd1c7752365475c4bf83fdc535f158efd44d5d3698e813d142bf00c2bcffebabcb69027d7c419522839598740525b7af2dfcf899ab51179169b285ac07f2443c2024e9f7cc146e66ba8cc847f510d7bdf", 0xb8}, {&(0x7f0000004340)="8ab81fddf3e8ad47ecc56e62efdcd799ef9eac5b0c2dab4fd0e434410f97fae13877c7384714a93cc1483c64f3d738ffb74baf552a1895179e2122f016d12c5b66b6bcbd40a47f6d3a58cb7befd3a9a84ac45ca0b627b074dfb5891372", 0x5d}, {&(0x7f00000043c0)="f7c08fa3baaf3d0d89dd324f466aae80aea4cd7b7ef6d533bd5e2dcfc5b1a5b209542010629feff9100c03bb9dbd62dec72a1f1afe16ccaf66c0d66a73fb81a4520b689f3e8d98778d8febbc683cffa3449ac96fcd819f38876ac5c36d45da23d6b5d8d979127c0a99ec98521cfb28a6b81c9a9edc0922adc9636407891011082bf9f416b243734e68bd1bee", 0x8c}, {&(0x7f0000004480)="fbf7db3dd6370aab5e4aa524dd61270b1718df608f567bc3a8d61747a335934bd933f748446f5b405bb033e62f03b555aaeb033d972d705cd3b87873d22e919853ac0dc2d193d8d42b3a2834abfcf80f507f05ba149b13ae503e332265c30b98d4b98f3ccc9e0d66c60210fc99da899500c53a906f0346f936ab0e98e11abf02dd5b86318a", 0x85}, {&(0x7f0000004540)="245b2005d4870dffb313269f0b373dfcf8109946acd145a5b28508071b5239d17fc694efbb58edae463216ded7ebecfbd25a07fb52c1c21437642df087862ef785693ceeae7b5b97ac96f41f6a223f970b4783d0f54d7e557e1129f6fdd8c262d50f9a", 0x63}, {&(0x7f00000045c0)="18eaac997710d020658d9516d2d15aaeeb237b4a2d14bd64710a5be1aa78b54bbe45177b61548ccd37072458ea0a82ae289d2f7c5f3cac8895581707eba644e80a66b568b4345d7060676b2bafeda3e593dd2c6e055666d087f79d2614f366b1fe1b3308bd87d86cbb3394aa5e6bf7ad4a988b12c6ec26bc68972da14cae01892969228d", 0x84}], 0x7, &(0x7f0000004d40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r4, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0xf0, 0x40}}, {{&(0x7f0000004e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000004ec0)="6267c134c45b5b8866c106e502e92d95728f491c70bb316c51e6bca84fd3224fc5a7efd535a9d90fd1114337dd50f09f630caad16b341298a4e083abafdae6108aef108a6b15fb8a15d31680637e343fc030612813d1656594f32029ea16ef652a2f2feb2c32ede7189072f93d7f16668f3064d754837e54421730decbbcb2603d3b2798b0b22f5ebeaf2d", 0x8b}, {&(0x7f0000004f80)="0d59926db9fe157757882a015885e8f90cdd0e9e16744077aede4f9b2f870b9006e7765462f01d054271be118903f1f02c83", 0x32}, {&(0x7f0000004fc0)="89c10728b54cf55c5db2bd4d52ee962cf2221f1b5c3102f6e188a7f8c1b25265b7d52f2544296453ca837c6be34715d42a40f4b27173254330fe1598c41a42b01348556a5c1bfd5dfb354bb7bf22cf43cf706a156450273bf2d2dbe4d0cb2b8f4208d676e206d8cb57baa2243708ff4ff37cc21365e277de7559cac78393f8522262a1fccde30ff5062cd695d79218f4d46c52f92f575e29fd47fb0109e52025eff096f588c3f1aa3a79f21551bfc23fa7d24aee", 0xb4}, {&(0x7f0000005080)="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", 0x1000}, {&(0x7f0000006080)="02075c78e11e8078eeb2ade5f9150cbc5a6ebbb55b9be3dff4b27516601231d267d0d67a0fa2009836663edfbf109868e3b2896f3c0c14723a0c0ad1716d24b2e005662d5bf169a53d6e10a67ccbc24c4eda33a365f0e813addbf41c3b3560398f2946725eba9a7ea4c7419a44de55951f4adbcc7cc23bf17328002895c87491a33d179b553fc77efa03a8b8d0e9550f1c0eb0f525cd72358b6fb1e800b5abc45170cdd432b36aca35903c8d80c37c8ba423e1fa7bdb39cc1f6a5c34", 0xbc}, {&(0x7f0000006140)="16e3e0e7ef83afaee650be21e7b5ce8023d62b5c126d3d5658ba8dd53a54114362976650f39ba5a77d3346b5efafe3543f257bafa7e6bd5069166b4109fdd221d9844e4d2550730cd309f937573d21deacf30db4656573", 0x57}, {&(0x7f00000061c0)="a26ed9bb7a08684e5434f044c6ff8e1c7472098484ceb4786f7f1bafdc545d6ab7253942e3a6b89b34a13bba25caee1d5db7d8ca14bf2f23dd61a5c5b2b8e9dc", 0x40}, {&(0x7f0000006200)="06e6ab3ec2f91e80997dd8412d9bb07e31c01d71ce56f94d72f82d3793d5f14012a079b37bd2fdb5fa6a10494b3cd816ae2b55b564619fe9697efa933c", 0x3d}, {&(0x7f0000006240)="1435d4cc6d1705a38ef2b89630def58e8d358a3099e2729119726693f85d1867c3a6e95ee221939ed64e1e6bcd95987f1703ad7f22e2aa7d4ac7d3f4128451d58e3fef1f8c21afaeca0af858b6f2c331fa4d789a096410ad6d7e93e1031bd4a0b6d792918ec48f267b6a2a6e393343891f7b5ca7e8c84c2d5d990ed51dbaba65771fd34a539b6a51830a1193da8726f2af528be965547998bac00c7de2c2d69f9f6106193ae108da6b5c1d2856c4ae36e46afb155f", 0xb5}], 0x9, 0x0, 0x0, 0x4048044}}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f00000063c0)="5bd05313a206ad7dae791b7d5dccf3a2b1119063928441a5d009ef7390649ed2b5b050ab085d6605413ac10edd4a56560d4984d2de35bacb8ffadbd22437014cc0c781d78222a6a0ba6b937705657224fb31c4ed6f195adf55d04cb3f00b5b39f75c46193b09a9beee0f6011409194cebd2e488b9451bc397d00bc1146cef8bb3c21bee44f0b2e3c16", 0x89}, {&(0x7f0000006480)="3f84c868dac3e7a511ca0bd6394360d849c8723fa95464336336b56fbe0b01b43749d99667cb6477913f87cfb8cfdd0b805e933ea17034f742aa76b0aed78eda63cb21b0c17b04f3b42250b548143d613d40c497b28583f3a02b94ea88ef98bcc6339397ceac0906437f64ac05098f84a5d5833b434264e29ac4cfebe5bab690076b480962174b5c7bf05ae26df33f1b0b794166ab36955f170af4c1c180e644d0fb1bc30cf793f664a4920841fb608cfdfba80e2fd85e430201121c7154ad93bb00add88ac7ae2d15441bc42054e96cb8330023a32df1e15f3e6f532dc8c87aeb84e04c790afdbfccb7dba773e87a705b8bce6de46c599d41f9b35c23e77eb6a482e84370515792b0bc2234e0a5c733d36f62bdf767f871d6aaad7d6852b5c76b41268aa66dfa4d924558490e945a1f2004de72157ecf11f6b321314c0296b1ff93e3e41330b02317cfcb255e78e2873219bde4e2bcc97d8ebe876062b593d042415c9838695d15852ff023100459c22a0067d721ee2766ad2c48b0da62a39d59c3903ea1ba62372ded5f393c68c5c724e2f26ffc126ad746e045d47a27b34c98ee3c17064a979c7852ecfc9b2ddd036c27c0cafaf0618f0cc3854a23b8cd2c1601e7ad5133c62f053981675f3599d83a568a09a9ddda5133c3c2ca3e3cd14639acd5b23433908466a0e3405d1c3b59de895695fccab6051d33bd1de134f757bbb2e1dbb6693f37d2fbc44257feb9a2eea6cea90bf228d9b5575ddda0741ccd9946945deebb55688b308a024eb506a6d2c77b1ee7ed8636563b0346586ea69ab1b5d29ca05d0a6362b3ed9f320913dc7ff74e2006d214ff2e460be1fbdab5210bfa8297a8c961da479994c1a4c38edd99b48006ec9c9cc04c3b9fae2f12b9910b0496cea38565b9a534fb007fb76d23fbec0132aed5b2a5e2a39e0d11cb4228924592b3ea00061ef996958de8b889f18d5c86ef9d893d38c70c3d75ec34eaa43700bf8f7703f7a50f70708a54b23c7301993c2befb61660f3d424662215c6a1438260ed20f53955428ea530be7e57ddbf7b1280e8ca93a88f5a62a5c043610c55fa4c628c90c11aaaaf3bfe1941c0f45263c010b314ac4139e5183596049274a39c7f5871b91f3e1ed11c7e3189e1d5009969378ae09db4a6fa84b7ca162ff12ab213f528e4ad53ed32e2762fd2de01257f22b708f9fa4b5d150f1086b0c0b85e683bbf715d65c5bc517bec87c20d89916db879ffa03b3885f516fd145a8afa1fbf3f2773e6ea2e06a484ad438932d995ea76ab4d72975c6dc766480315686db7ded115625ff8ca74adc9fc86f3527442502a756fb37d94dd81f7f8427c89cb32e9f4be58fb9fc368b7304d7946f614a49ed7e07d9f6aa4d157204aedf74f963691d7dde652ee434d530e61cfe7dcea8336f25dff8acc7f368762205772cbf0ccfc9318cb80660bfa7b57fed39e47cd3316c44753ee20cedd2ffa5eb7e76dd6f53a1012437a43b17bbb4d776b30ddcccb2da529354c0a5302e09c5aba03cf1a81d54c9e6b1b640355893be1d406700d7a804710c0dfeaca86ab50c3ab262a99b3065bd9214831cd472158670f4053ae5e2d1146b29a371b1c1a2e1b60a390a7cf26cba6345409c66910f864b21a005cc19add2614fa1c416a0aebdc1ce923e38f6886160957d5fa0f5a67985116f2e86506ffd8e8775f2611808fc4d63c155d6fc4e7d23ed18ec52d71439bbcd0592380b3f0e15bf4bcecfe0866606032d702193b6d7a66e2580fd8cc589f025a1b4a8338c385b299f7d0e6ec611f2c11106f3015eadd5e05a9c615cc144bd9e163584d52eb30a209b82e1837f14332bd427ecdf3a53c4b4b942f3f4dba4e10f45a6f6f326600c85ada3786a0226f8c31d1214f2c1ac61e6fa14ce1a8105ad812e08f9594563468fec3f35db72ffc243512c607c7e3d4a181f99579c2a969056b1b7dfd74160fedcd8a6bb35f57ee6ba1b5f74ade868300d1d955ec39985fa541799140395d5686d108afc1edc8c27be10b2a0fd58f060bc14d0a734c801aaffbeb4863b1208f1004a333101f6aee4911cf5150a0c671354d3d1c778c6c1686e4c5a7cb273ee773790a14bb446f57f647ca78e2c0db63c74623c29182b6aae9920c6dec8fe7bbecfe3fc5d73e145bb56bc8d229554d26e5ab636b7dafe8e8137e8652bf5a8a5a91dc9a86470cc457c763ad96424111432b42cc21e649856a8929d2e71da5d422dbb5ef65865f98a746608a910146104c52b69d288a9501f157681c545741891a51eaeed7d444c868cca302ac8b28ac22b5ce09be6fb4b6029a6c0345dccc0e37c3c150d7c473216150724111b80d865a89317f052600d6c31e496d8024f007bccf0a24dc3589935363745cfb678dd7c872ebd45e39fccf9cc8ecef86ab57e550e5f68cd4b5c3102b41d9959e4fbe8a41d741d1ea5568867a2e9cc02d7f62e6780b6d695a36a6a8cdb9178b95cd97ce723b7c407324b3a92171f6a48c13c0e6f05de4878dcc7c5fd2930c769bd672a6f013c2f84e1f3ed76672a8532dd9292d369d44d174ec0c73bf2428dcf516a72cc92c1fa2c7f88aa8812721862d4a32236d38e72ecb294ca9e69d602beb228b1f3a0534c5c832deff9b0261ab0ec9c4ccc3e549878414ecb42d0267d74c6a421fe820fbb004a3e890a24930fc4ffe77594f2b6dfd22f660f7e9bfddead0388108598257f08f247fc23256abe2b1441e0e4fb4636906a5487062f4f06abdad3fb7252b7157068446e36c654304f28fbdc13fc735de321668f8f4d2dab2f74e8f2c86d1df8b05975f2d16975d56921366cd780f61ac844aac57f21be3930b0c05e5e649e5c25693cf064d0e33a8ccce2bed5544442b0160ec7625037d21b361a3c7f2b2abeffbda4d970ecd7f55da4df601b7f4b6f5086d8a2c207741f9a3cd9f9a6384db6049015822faa4eacfa71d548e9f4336345d0c67e29ec8f29a68ed2696eab35baabf4ddff69278a9cd177b09460c3844fa9c07473ab506ca34d56317ebb16e49b50433fdd4c7ac88ba97a7f59cb0c4ba81f811683f5805f6c73e9110bb8591f88fe36b7bcb811291c408760ca4e40f72bc76efbd260892e03ce3f7546b6006528bf39ba639c8cb1044c2fe3759080f1a492b4b4daeb01067ef901b3cdf760ed1f34de6cc6a9360d6208fc35dc7ef4822b65079b8c17d88d96f0ea09ac057aa8f67d385206f753b8964b8fb13c1b4f16ec1f7df262269c26b2e0f59a5f35f4019a264fe30893e11f204cd0a47f3ace83e80a5bfeb79d9e8621ea599d838d9f8c6a14a71f3045bbc386f7805b417a5d0ed3597efa926dc12307f9c3eebc7c91c84a95810b58954956d7fad29d416f3cf3ae9773cacb18a9fef45a48922f959ce31931adbdeadac5e5af80efe904d88f540bda111a7bdf8f0887ed13ed4bfc8cf66827a83b9ea67798b241270b47df36dc0c3b82f156168e13d7de7949547a918d43aef55ef58286a3dee05a7c41851aa8dd6a0df50d43c30a35caf041e1f7a03c01eed14dceff8e10cb7ee07748b0be40bf3e9aedeb62a714ba75910ccb7494638b2dbcf3cea17296b8ab32daeea75ba13950c1bf5836466a54611f7b338ed254975453dc39388acc65dbdcd1be5bb951e4cb9cdf7245c19c4ea535c36cec58c73441705ec0110373ef5310b6750473ba54aebf7c8e5203e50437b7eeb9b618b9243c866f5f7350fbafc4dc72c400c0e47850a4587da8cd1b720e050f0c6c89fbf36c3c4d4bb7f09f5c9929a8bd9ee10c43a01a408fe25ed57fdc5ad98f3d1645689bffa33a261e3bf309b26cc7303fe04c38ee26558b25a13f41238069f304f1880119826a7da12af55f8f1dba180ee127041368fa55ef39f12511c9375869a5f92099db41881c5ea3a04a5a1cee33585b830555334f5eea94b48ffc3fa1d0473ee5f657960c8bc36541d66b5b1c6bc03afa198f5457cf8654e8208980ef0c7460731b355be4f74aa68454951bc48076f75c193ec73a3f09c5678f9ad92f38c896c3385388a84323a54adb1242616e742c3becfc66a8ae9a64d95cbcbbefbd7a278d00c673e21a9a2093f8e3fa08dd04c8a22ef895eb9a03eca56f3bb8c8026b1ab833acfc6ec7fd6842b28439daf072064f5af3daea3e2279a626ad365d2b4b10facf4a963bb5d5cd0037ac53ec4be99ed79682010b491625c6f86ed968f87a85cd4446bb9ee1fd9c11de64ffa6f6b388fbcbd4ab147c95853de1aeb3470b2812d4c20e33b03b8ebad11e2691b6bc75801a3b15aad080a43bb78d8646a9e4ab7ff3bea40bbae8013bbbcfd7cb668ddc72c1e74c7e24106391de8b2ae5eca9bf6f20491f01eafbae76af64621e9b87e9de6e7818792eef2d15a6d6368ccbf08265c899d82e455b0a78a5eed85b877fe7f731b123c62fcd0d994657a696d6d4e991d93fabadd93f5745a7a43b641780f6caf94c68fcca4c7f0b401f2c72cc5d64592c8e583110b80fefb9772d876219f736a797a5e2ce0b1692ae162f60829224b3769e2b04ee5e1d759a5c9bb1ba077ff9d0774dac9a20ca1d74fee1526c9560162536f6055206e8eb0249bc6faa4d70cb2a25b1ff88ba540ba110dad179a2ea1fc539178c9bb3d93ebee6af3d94535ec82d1541e09295bb6b15aa9d63a80c25017fbd753bc90c73adfe1444c6769a20e46e1a042f215c27425f4c29cad05805dd8c4441ca1f5f15b310ec3542e4ddd0b382994364f124fcd398789bca7831810a7849b990957d82cd5ff0e314c0145c056b1ddd177d3fefbf08a21e8a2bcebeddfd89472041e3224f6fb1a2b2f2a71fd3bb5893f36d6f944f6631252a608bf169d62ea84df404f2f36fd52ae1033344c0725b4592601a7d777f54405cb03ab0ba6f0b105e35f1a0517db05890cf06be60907304c3b388c2f6c257187b7f243f0cfa96fb3fb734515e0668e8ea2f615e12452dccd1af55e39e5a3e0284721558390ec72210c7761296ce255ab5c1fba9297ab913f1cabe3d7f555c2d0c58ef74598777ab8da67852cba2c1fe79af919afca801ce7074df324a965cfdbdbee11ffe28a4d5a3012ee83920c43bd0b193e0f1a960ff6646b4d453a4cf9f8c5e0cf0a58580dd03a08fefdde1bf1a5286edb19b359de49a1139b94a5ae6379d096b845fc40f2987ff8e6bab7ed06d8507f84170b53a077b40a584f0da9a979f5ca206402cca6a7eff1bd643a3d84fc0b24a6a6fe1eea7c72d112aa9c9a661f6e195a91d5a4a898aed7a83235657afd7cca821e26b82c1301b338af6a924473f65a8a897904c10ee031ace7aab0dbb300c65ef28596393b58c364f916d32ebb54793ca8a909d5eed89af459d0577c5749e694bffc0a4b9e01bee18c0acfd85ed47f6af2fc795cdf24fe823c7dbe11dd703d8d944d0d52445ae6085d7ba94246b0f1fb7c0339e0710776dca448452cca7fb3fac3a13eaa45e5d553a895a0ba5b5839bb3a62ab0fd8b1a1fe3834a440d33efbcd52dbac7716f995beaf5788f12b25eabff3158aac9bd9694d7b75eafacbe272a4ff279d83e4ad426d0caf7a8ab4ddd1dc5ddc5070426da5668a5ed0fed8c6d2d6598d9603f5ba3fbff6ebc4fa2c8023354e2a9ab8f3d44bfee8a9abccb320b3dab043b3761f6badd399bc564d1cb967b761f7bb2a313233d82faa85be749d6758c53f0244f8e4da75a34abd0282bcc0ddfc546f1a187ca7f29af769813eef89c543ce5d62fcef80716b4e155c475af5f23ab0ad102efe1cc3f9670f58e44e406674f92cc69717b12def62ef", 0x1000}, {&(0x7f0000007480)="b42e5d3dbcc04eb89ffce8c40a38e53cc6d21fcee007fa6765afc148296d74ebd5368bb01460b6bd47ffc08bea4b177a13cc52e6f3eb2b849479f48ef6750661354066c95665527d7ec278dc776f8c253f998a733172b4e8cd8ef7e145c5d6b9f471878a74f7b4f79cc5ff18f23895cd1ce0f7f3ec46d4adbaeba0d658c9c3b995dd2fb29a663dfeb83c9d11dc69229b5c3de9a809e35a0670dfa3960d249c4ad9f9d6f1354bf61852688a86c32e9e9b3e7fc3b59733de3c8a83e5d953feb43fbecc5b91e5aa34e9a13eafe1cfb90d", 0xcf}, {&(0x7f0000007580)="dc1b3fec8dea8e528f345d88f057491a9be776f511d398b2a7d0c912d912dd1319f2dcc112e237cb2e8bab834f3fd9c9df78ba3aa7c8c498d79f3da2468f2ea6b3f377f818111c9912bcf2c58d5e796f7c28a3cee0955bbf8019c480b75a80953295fbb36174", 0x66}, {&(0x7f0000007600)="8f63491f96e505c8cc", 0x9}, {&(0x7f0000007640)="2907d1f7b2a0d4e544efc98e731c9bc0", 0x10}, {&(0x7f0000007680)="3d221ebe207e20bb9dc354a3792bc571d73d0e0f4589b4b713c634badd8a4b455a9fd24d91cf895643a302c5f875acf31f45172b07be86e8b8db2ab05fd3bc68942603088f0c5b4f527355a4bdc354ec558e90d8070eefd82073751af938855e170510770c6f789b5c1325d9a084a214e2b6d72cc587161759f194db6473a9972973dbfc3931dcb19176d332c1d8e876fb3b0110a8a432fa5d4e5d9661bfa7316ffe1de5cc40ca3e0ad41d0df345bb6676b4492020b6989e09e2bdb31f813d68e394a1bf5e066d2bfb230e8f74c004", 0xcf}], 0x7, 0x0, 0x0, 0x4000}}], 0x5, 0x40881) dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$pokeuser(0x6, 0x0, 0xa, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000400)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @private2, 0x7}, @ib={0x1b, 0x6, 0x2, {"2babbbde8347b60c410c98e6e8c78985"}, 0x1dc5261c, 0x3ff, 0x1}}}, 0x118) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x6, "420600753708259249154c944122ad063ff47d3bd7baef5d6bb4c78a0400", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000040)=0x8001) 5.388834899s ago: executing program 5 (id=3847): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000000f5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 5.277897083s ago: executing program 0 (id=3848): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x19, 0x82, 0x30, 0x20, 0x413, 0x6023, 0xece5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x84, 0x0, 0x1, 0xee, 0x48, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0xb}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x10, 0x3, "7168d6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.058755403s ago: executing program 6 (id=3849): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) r6 = syz_io_uring_setup(0x31e2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10100, 0xfffffffe}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000100)={0x6, r6, 0x2, {0x2, 0x1}, 0xa9}, 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) 5.002871925s ago: executing program 3 (id=3850): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) 4.864975691s ago: executing program 6 (id=3851): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 3.847662469s ago: executing program 2 (id=3852): gettid() r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) getsockopt$inet6_dccp_int(r2, 0x21, 0x11, 0x0, &(0x7f00000001c0)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r8, 0x400c55cb, &(0x7f0000000040)) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) 3.842553278s ago: executing program 6 (id=3853): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffc2071348430513ffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYBLOB="6fdd6020c6f2be30fe25f586706753e1103f3f16959b058c2db2e813c154a30e889a995f557328424ab3ca6e97c3a9a4c519a5a71eabb5d159e589267d71884b50c8d6263a392ea5c0193a7f159e0fbe2202861b27af73da9e8dc05ae8429aeff1171152a45c0d92cd1f0e1861089d27404231deb10a9cd06317194c447bb29bf1d1018311bcb0ec051c", @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfe2, 0x1}) r2 = fanotify_init(0x200, 0x0) r3 = dup(r2) fanotify_mark(r2, 0x1, 0x4800107b, r3, 0x0) read$ptp(r3, &(0x7f0000000340)=""/269, 0x10d) syz_io_uring_setup(0x2a20, 0x0, 0x0, &(0x7f00000002c0)) creat(0x0, 0x80) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) fremovexattr(r1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0xffffffff, 0xbf23, 0x200, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SIOCAX25DELUID(r4, 0x89e2, 0x0) 2.669221626s ago: executing program 3 (id=3854): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x3, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) 2.615132679s ago: executing program 2 (id=3855): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x9c0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022220000009623139384e5821a070c0009007a151608d91ea32a8000830404380006e53f"], 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='b', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140002"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 1.677237718s ago: executing program 0 (id=3856): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.674356596s ago: executing program 5 (id=3857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a000100000000000000000081000000", @ANYRES32=0x0, @ANYBLOB="00000000140002"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e0800050000000000ec010880800000801400040002000000e000000100000000000000001400040002000000e0000001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00000000000000fe880000000000000000000000000001000000000800030000000000060005000000000068010080fc00098070000080060001000200000008000200ac1414bb0500030000000000060001000a00000014000200ff01000000000000000000000000000105000300000000000600010002000000080002000000000005000300000000000600010002000000080002000a010102050003000200000088000080060001000200000008000200e00000020500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000a0000001400020000000000000000000000ffffac1414000500030000000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6200004000a00000000000000fe8000000000000000000000000000aa0000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r11], 0x23c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80041100", @ANYRES16=r10, @ANYBLOB="000829bd7000fedbdf250100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d78430800050001000000060006004e220000060006004e200000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="060006004e2200000800070008000000060006004e240000060006004e200000"], 0x80}, 0x1, 0x0, 0x0, 0x50}, 0xc000) r12 = syz_pidfd_open(r7, 0x0) setns(r12, 0x24020000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 1.594454374s ago: executing program 3 (id=3858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x0, 0x0, 0x2a0001) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20050800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 1.439978374s ago: executing program 0 (id=3859): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x2, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0xfffffffffffffffe, 0x401, 0x6, 0x2, 0x0, 0x2, 0x100000001, 0xba25, 0x4000ffe, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x44090}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 552.194463ms ago: executing program 5 (id=3860): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0), 0x3ff, 0x191000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5) ioctl$TCFLSH(r0, 0x8924, 0x20001114) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000000f000/0x3000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f00000004c0)=""/86) io_uring_enter(0xffffffffffffffff, 0x40d9, 0x4000, 0x8, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f00000000c0)=0x1, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a405dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000}) socket$inet_smc(0x2b, 0x1, 0x0) io_uring_enter(r4, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 346.474618ms ago: executing program 0 (id=3861): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8905, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) r6 = syz_io_uring_setup(0x31e2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10100, 0xfffffffe}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000100)={0x6, r6, 0x2, {0x2, 0x1}, 0xa9}, 0x1) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) 0s ago: executing program 6 (id=3862): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@multicast2, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, 0x0) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) kernel console output (not intermixed with test programs): dv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.236103][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.628923][ T5862] usbhid 3-1:0.0: can't add hid device: -71 [ 891.641599][T16551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.644874][ T5862] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 891.743027][ T5862] usb 3-1: USB disconnect, device number 86 [ 891.947909][T16551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.974000][T16551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.020712][T16551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.035441][ T5865] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 892.151202][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 892.198838][T16454] hsr_slave_0: left promiscuous mode [ 892.215041][T16454] hsr_slave_1: left promiscuous mode [ 892.215853][ T5865] usb 6-1: Using ep0 maxpacket: 8 [ 892.226009][T16454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.243863][T16454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.245327][ T5865] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 892.264463][T16454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.270582][ T5865] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.285191][T16454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.322619][ T5865] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 892.323314][T16454] veth1_macvtap: left promiscuous mode [ 892.333987][ T5865] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.344784][T16454] veth0_macvtap: left promiscuous mode [ 892.360060][ T5865] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.377139][ T5865] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 892.398593][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.440892][T16454] veth1_vlan: left promiscuous mode [ 892.461158][T16454] veth0_vlan: left promiscuous mode [ 892.686315][ T5865] usb 6-1: usb_control_msg returned -32 [ 892.692101][ T5865] usbtmc 6-1:16.0: can't read capabilities [ 893.321633][T16704] binder: BINDER_SET_CONTEXT_MGR already set [ 893.327744][T16704] binder: 16699:16704 ioctl 4018620d 20004a80 returned -16 [ 893.458792][ T25] usb 6-1: USB disconnect, device number 46 [ 894.065188][ T8] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 894.291939][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 894.317510][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 894.327356][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 894.363634][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 894.435023][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 894.446754][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 894.464214][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 894.494284][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 894.503403][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.565076][ T8] usb 3-1: config 0 descriptor?? [ 894.721321][T16454] team0 (unregistering): Port device team_slave_1 removed [ 894.894426][T16454] team0 (unregistering): Port device team_slave_0 removed [ 894.985575][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 895.064059][ T2144] usb 3-1: USB disconnect, device number 87 [ 895.082779][ T2144] usblp0: removed [ 896.077925][T16729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3168'. [ 896.473484][T16551] hsr_slave_0: entered promiscuous mode [ 896.480771][T16551] hsr_slave_1: entered promiscuous mode [ 896.512752][T16551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.520720][T16551] Cannot create hsr debugfs directory [ 896.896998][T16544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.229122][T16544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.389761][T16544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.528114][T16544] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.131219][T16544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 898.176426][T16544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 898.222330][T16544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 898.252398][T16544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 898.441784][T16551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 898.481391][T16551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 898.527238][T16551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 898.559763][T16551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 898.700854][T16544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.798864][T16544] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.832942][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.840194][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.853522][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.860670][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.014981][ T5862] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 899.184335][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 899.191341][T16551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.203459][ T5862] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 899.284080][ T5862] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 899.317845][ T5862] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 899.319118][T16544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.364233][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 899.369863][T16551] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.399727][ T5862] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 899.439713][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 899.444979][T15992] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.459909][T15992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.479559][ T5862] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 899.493398][T15992] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.500568][T15992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.542794][T16544] veth0_vlan: entered promiscuous mode [ 899.556177][T16551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 899.568592][T16551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.597095][T16544] veth1_vlan: entered promiscuous mode [ 899.611862][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.676320][T16544] veth0_macvtap: entered promiscuous mode [ 899.679921][ T5862] usb 3-1: config 0 descriptor?? [ 899.705353][T16544] veth1_macvtap: entered promiscuous mode [ 899.785619][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.841563][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.882526][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.099277][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.110709][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.121543][ T5862] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 900.139159][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.169825][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.181779][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.192158][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.256598][T16801] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 900.256598][T16801] program syz.3.3177 not setting count and/or reply_len properly [ 900.435251][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.453240][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.464163][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.475104][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.485753][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.495877][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.507258][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.525447][T16544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.668327][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.680007][ T2144] usb 3-1: USB disconnect, device number 88 [ 900.684129][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.699929][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.715315][ T2144] usblp0: removed [ 900.721151][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.731147][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.741659][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.752015][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.762544][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.772816][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.783794][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.793674][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.804898][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.814988][T16544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.825746][T16544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.837109][T16544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.961909][T16544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.971499][T16544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.980825][T16544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.989645][T16544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.015603][T16551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.245997][T16454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.273538][T16454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.349565][T16454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.365739][T16454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.502560][T16551] veth0_vlan: entered promiscuous mode [ 901.562344][T16551] veth1_vlan: entered promiscuous mode [ 902.355456][T16551] veth0_macvtap: entered promiscuous mode [ 903.052059][T16551] veth1_macvtap: entered promiscuous mode [ 903.224825][T16845] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 903.226236][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.279717][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.290459][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.311165][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.337423][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.358472][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.379401][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.430705][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.440769][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.453679][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.464104][T15859] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 903.468813][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.474494][ T5866] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 903.485900][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.607972][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 903.851121][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.056051][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.069174][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.079343][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.090383][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.101656][T16551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.112120][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.133787][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.144343][T15859] usb 3-1: Using ep0 maxpacket: 8 [ 904.151304][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.162031][ T5866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.183164][T15859] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 904.192422][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.204060][T15859] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.213863][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.234084][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.254451][T15859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.264066][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.268679][ T5866] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 904.290860][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 904.301174][T15859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 904.312872][ T5866] usb 6-1: SerialNumber: syz [ 904.317627][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.319828][T15859] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.352248][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.362768][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.373536][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.389143][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.400887][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.423817][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.446383][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.474109][T16551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.509758][T15859] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 904.518969][T15859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.528208][T16551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.556335][T16861] siw: device registration error -23 [ 904.558271][T16551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.870666][ T29] audit: type=1400 audit(1733970796.389:784): avc: denied { sys_chroot } for pid=16863 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 905.109815][T16551] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.161038][T15859] usb 3-1: usb_control_msg returned -32 [ 905.166968][T15859] usbtmc 3-1:16.0: can't read capabilities [ 905.175958][ T5866] usb 6-1: 0:2 : does not exist [ 905.180900][ T5866] usb 6-1: unit 5 not found! [ 905.187908][ T29] audit: type=1400 audit(1733970796.429:785): avc: denied { setgid } for pid=16863 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 905.254061][T16551] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.296648][ T29] audit: type=1400 audit(1733970796.429:786): avc: denied { setrlimit } for pid=16863 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 905.317127][T16551] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.328333][T16551] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.361557][ T5866] usb 6-1: USB disconnect, device number 47 [ 905.547527][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.555877][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.600053][T16874] usbtmc 3-1:16.0: INITIATE_CLEAR returned 0 [ 905.694563][ T1402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.702677][ T1402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.431622][T16884] xt_socket: unknown flags 0x8 [ 906.695333][T16897] netlink: 'syz.6.3194': attribute type 1 has an invalid length. [ 906.704069][T16897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3194'. [ 907.048803][ T5865] usb 3-1: USB disconnect, device number 89 [ 907.817845][T16921] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3200'. [ 908.039776][ T5866] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 908.570344][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 908.582097][ T5866] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 908.597110][ T5866] usb 3-1: config 0 has no interface number 0 [ 908.621542][ T5866] usb 3-1: config 0 interface 70 has no altsetting 0 [ 908.672800][ T5866] usb 3-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 908.684340][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.813149][ T5866] usb 3-1: Product: syz [ 908.951900][ T5866] usb 3-1: Manufacturer: syz [ 908.989215][ T5866] usb 3-1: SerialNumber: syz [ 909.845234][ T5866] usb 3-1: config 0 descriptor?? [ 909.973571][T16936] fuse: Bad value for 'fd' [ 910.337568][ T29] audit: type=1326 audit(1733970801.849:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.2.3198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe521b7ff19 code=0x0 [ 910.543252][T16917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.545631][T16955] netlink: 'syz.5.3207': attribute type 1 has an invalid length. [ 910.552159][T16917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.623921][T16952] serio: Serial port ptm0 [ 910.629352][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'. [ 910.643031][T16955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3207'. [ 910.708043][T16952] ebt_among: src integrity fail: 30a [ 910.876133][T16969] binder: 16962:16969 unknown command 0 [ 910.889281][T16969] binder: 16962:16969 ioctl c0306201 200001c0 returned -22 [ 910.906619][T16969] binder: 16962:16969 ioctl 401870cb 200007c0 returned -22 [ 910.931072][ T5901] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 911.084560][ T5901] usb 7-1: Using ep0 maxpacket: 8 [ 911.100374][ T5901] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 911.114098][ T5901] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.143278][ T5901] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.163267][ T5901] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 911.176715][ T5901] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.202515][ T5901] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 911.223258][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.456287][ T5901] usb 7-1: usb_control_msg returned -32 [ 911.469439][ T5901] usbtmc 7-1:16.0: can't read capabilities [ 911.995555][ T5866] cdc_acm 3-1:0.70: Zero length descriptor references [ 912.002397][ T5866] cdc_acm 3-1:0.70: probe with driver cdc_acm failed with error -22 [ 912.013667][ T5866] usb 3-1: USB disconnect, device number 90 [ 912.766789][T17001] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 913.137759][T17009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3214'. [ 914.549749][ T25] usb 7-1: USB disconnect, device number 2 [ 915.074113][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 915.150926][T17043] siw: device registration error -23 [ 915.304026][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 915.421224][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 915.464951][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 916.042252][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 916.163033][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 916.223876][T17057] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 916.239202][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 916.255739][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 916.268923][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.441257][T17054] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3226'. [ 917.551019][T17065] serio: Serial port ptm0 [ 917.593410][T17068] ebt_among: src integrity fail: 30a [ 918.085895][T17074] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 918.102518][ T5866] usb 7-1: USB disconnect, device number 3 [ 918.122368][ T5901] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 918.307579][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 918.316042][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 918.330200][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.404125][ T5901] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 918.413485][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.440253][ T5901] usb 3-1: config 0 descriptor?? [ 920.534131][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 920.541752][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 920.647876][ T5901] usb 3-1: USB disconnect, device number 91 [ 921.340927][T17123] binder: BINDER_SET_CONTEXT_MGR already set [ 921.347141][T17123] binder: 17105:17123 ioctl 4018620d 20004a80 returned -16 [ 924.764254][ T5901] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 925.084369][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.096574][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.683791][T17174] binder: BINDER_SET_CONTEXT_MGR already set [ 925.689927][T17174] binder: 17161:17174 ioctl 4018620d 20004a80 returned -16 [ 925.760209][ T5901] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 925.769917][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.789100][ T5901] usb 3-1: config 0 descriptor?? [ 926.012143][T17177] siw: device registration error -23 [ 926.574576][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 926.581114][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 926.589826][T17183] netlink: 'syz.5.3251': attribute type 1 has an invalid length. [ 926.609114][T17185] fuse: Unknown parameter '000000000000000000040x0000000000000005' [ 926.945209][T17192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3251'. [ 927.194180][T17192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3251'. [ 927.213619][T17183] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 927.237495][ T5901] usb 3-1: USB disconnect, device number 92 [ 927.272043][T17192] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 928.314545][T17217] nvme_fabrics: missing parameter 'transport=%s' [ 928.336138][T17217] nvme_fabrics: missing parameter 'nqn=%s' [ 928.342839][T17223] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3259'. [ 928.529486][ T5822] Bluetooth: hci5: command 0x0406 tx timeout [ 929.228767][T17233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3261'. [ 931.032408][T17260] netlink: 'syz.5.3266': attribute type 1 has an invalid length. [ 931.145386][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3266'. [ 931.154423][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3266'. [ 932.054648][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.060921][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.641758][T17293] binder: BINDER_SET_CONTEXT_MGR already set [ 932.647894][T17293] binder: 17284:17293 ioctl 4018620d 20004a80 returned -16 [ 933.279269][T17302] siw: device registration error -23 [ 933.307650][T17305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3272'. [ 937.005962][T17344] binder: BINDER_SET_CONTEXT_MGR already set [ 937.012025][T17344] binder: 17336:17344 ioctl 4018620d 20004a80 returned -16 [ 937.994125][ T8] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 938.554082][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 938.595193][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 938.686148][T17367] binder: BINDER_SET_CONTEXT_MGR already set [ 938.692225][T17367] binder: 17355:17367 ioctl 4018620d 20004a80 returned -16 [ 939.229562][ T8] usb 6-1: config 4 interface 0 has no altsetting 0 [ 939.246214][ T8] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 939.256609][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.381109][ T8] usb 6-1: Product: syz [ 939.385986][ T8] usb 6-1: Manufacturer: syz [ 939.390625][ T8] usb 6-1: SerialNumber: syz [ 939.682897][T17380] binder: BINDER_SET_CONTEXT_MGR already set [ 939.689652][T17380] binder: 17370:17380 ioctl 4018620d 20004a80 returned -16 [ 940.596820][ T8] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 940.614727][ T8] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 940.625613][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 940.632735][ T8] usb 6-1: media controller created [ 940.649413][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 940.765728][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 941.337632][ T8] usb 6-1: USB disconnect, device number 48 [ 941.456273][T17411] nvme_fabrics: missing parameter 'transport=%s' [ 941.462666][T17411] nvme_fabrics: missing parameter 'nqn=%s' [ 943.385534][T17430] netlink: 'syz.6.3296': attribute type 25 has an invalid length. [ 945.374389][ T5865] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 945.646618][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.658418][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.712491][ T5865] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 945.721819][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.731787][ T5865] usb 6-1: config 0 descriptor?? [ 946.084065][T15859] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 946.155483][ T5865] usbhid 6-1:0.0: can't add hid device: -71 [ 946.161862][ T5865] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 946.214319][ T5865] usb 6-1: USB disconnect, device number 49 [ 946.316769][T15859] usb 7-1: Using ep0 maxpacket: 8 [ 946.514273][T15859] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 946.532752][T15859] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.179421][T15859] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.189447][T15859] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 947.225519][T15859] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.238696][T15859] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 947.247882][T15859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.326375][T17493] netlink: 'syz.5.3310': attribute type 25 has an invalid length. [ 947.693267][T15859] usb 7-1: usb_control_msg returned -32 [ 947.702545][T15859] usbtmc 7-1:16.0: can't read capabilities [ 948.649599][T17506] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 949.543693][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 950.033402][ T5865] usb 7-1: USB disconnect, device number 4 [ 951.169688][T17537] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3322'. [ 951.988824][T17541] overlayfs: missing 'lowerdir' [ 952.418516][T17552] netlink: 'syz.2.3324': attribute type 25 has an invalid length. [ 952.874559][ T5901] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 952.920707][T17565] overlayfs: failed to resolve './file0': -2 [ 953.254621][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 953.364452][ T5901] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 953.372816][ T5901] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.392730][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 953.514002][ T5901] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 953.537430][ T5901] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 954.288798][ T5901] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 954.364033][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.429048][T17574] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 954.619750][ T5901] usb 3-1: usb_control_msg returned -32 [ 954.625609][ T5901] usbtmc 3-1:16.0: can't read capabilities [ 955.589621][T17592] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 955.770863][T17595] overlayfs: missing 'lowerdir' [ 958.657986][ T8] usb 3-1: USB disconnect, device number 93 [ 961.506566][T17634] siw: device registration error -23 [ 961.722376][T17638] overlayfs: missing 'workdir' [ 963.404058][T17652] binder: BINDER_SET_CONTEXT_MGR already set [ 963.410148][T17652] binder: 17647:17652 ioctl 4018620d 20004a80 returned -16 [ 965.804241][ T8] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 965.964174][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 965.970584][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 965.988781][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 966.009668][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 966.023274][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 966.034209][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 966.051293][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 966.065001][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 966.065462][T17676] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 966.065462][T17676] program syz.5.3356 not setting count and/or reply_len properly [ 966.074550][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.076498][ T8] usb 3-1: config 0 descriptor?? [ 966.104777][T15859] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 966.274114][T15859] usb 7-1: Using ep0 maxpacket: 32 [ 966.285728][T15859] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 966.303318][T15859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.334352][T15859] usb 7-1: config 0 has no interface number 0 [ 966.340748][T15859] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 966.351555][T15859] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 966.365112][T17667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17667 comm=syz.2.3359 [ 966.386512][T17680] overlayfs: missing 'workdir' [ 966.658780][T15859] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 966.667972][T15859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.676080][T15859] usb 7-1: Product: syz [ 966.680259][T15859] usb 7-1: Manufacturer: syz [ 966.685052][T15859] usb 7-1: SerialNumber: syz [ 966.703729][T15859] usb 7-1: config 0 descriptor?? [ 966.708981][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 94 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 966.720330][T17674] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 966.728568][T17674] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 966.775020][T15859] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 966.945425][ C0] usblp0: nonzero read bulk status received: -71 [ 966.952032][T17667] usblp0: error -71 reading from printer [ 966.952515][T15859] usb 3-1: USB disconnect, device number 94 [ 967.011341][T17674] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 967.029307][ T8] usb 7-1: USB disconnect, device number 5 [ 967.187001][T17665] usblp0: removed [ 967.904062][ T25] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 968.066523][ T25] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 968.214688][T17703] binder: BINDER_SET_CONTEXT_MGR already set [ 968.220751][T17703] binder: 17697:17703 ioctl 4018620d 20004a80 returned -16 [ 968.728936][ T25] usb 7-1: config 0 has no interface number 0 [ 968.740257][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 968.751649][ T25] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 968.763648][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 968.775707][ T25] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 968.930690][ T25] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 968.943826][ T25] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 968.952958][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.085831][ T25] usb 7-1: config 0 descriptor?? [ 969.134662][T17693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 969.145383][ T25] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 969.226466][T17711] serio: Serial port ptm0 [ 969.319184][T17711] ebt_among: src integrity fail: 30a [ 969.499765][ T8] usb 7-1: USB disconnect, device number 6 [ 969.505865][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 969.523596][ T8] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 969.710511][T17693] ldusb: No device or device unplugged -19 [ 970.318935][T17725] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 970.326015][T17725] PKCS7: Only support pkcs7_signedData type [ 974.312922][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 974.728999][T17751] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 974.739084][T17751] PKCS7: Only support pkcs7_signedData type [ 975.640219][T17754] binder: BINDER_SET_CONTEXT_MGR already set [ 975.646442][T17754] binder: 17744:17754 ioctl 4018620d 20004a80 returned -16 [ 976.444679][T15859] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 976.544615][ T5816] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 976.587058][T17765] IPv6: syztnl0: Disabled Multicast RS [ 976.604410][T15859] usb 6-1: Using ep0 maxpacket: 16 [ 976.619802][T15859] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 976.630269][T15859] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.648812][T15859] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.668448][T15859] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.681419][T15859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.694228][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 976.705820][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short [ 976.716297][ T5816] usb 3-1: config 4 interface 0 has no altsetting 0 [ 976.728178][T15859] usb 6-1: Product: syz [ 976.730414][ T5816] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 976.749308][T15859] usb 6-1: Manufacturer: syz [ 976.750156][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.763309][ T5816] usb 3-1: Product: syz [ 976.763401][T15859] usb 6-1: SerialNumber: syz [ 976.780974][ T5816] usb 3-1: Manufacturer: syz [ 976.789259][ T5816] usb 3-1: SerialNumber: syz [ 976.941281][T17767] serio: Serial port ptm0 [ 976.999398][T17767] ebt_among: src integrity fail: 30a [ 977.254755][T15859] usb 6-1: 0:2 : does not exist [ 977.256316][ T5816] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 977.276140][ T5816] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 977.299868][ T5816] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 977.322068][ T5816] usb 3-1: media controller created [ 977.350290][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 977.394053][ T5816] zl10353_read_register: readreg error (reg=127, ret==0) [ 977.579803][ T5816] usb 3-1: USB disconnect, device number 95 [ 978.392018][T17778] binder: 17777:17778 unknown command 0 [ 978.397847][T17778] binder: 17777:17778 ioctl c0306201 200001c0 returned -22 [ 978.408987][T17778] binder: 17777:17778 ioctl 401870cb 200007c0 returned -22 [ 978.648002][T17780] binder: 17779:17780 unknown command 0 [ 978.663291][T17780] binder: 17779:17780 ioctl c0306201 200001c0 returned -22 [ 978.680475][T17780] binder: 17779:17780 ioctl 401870cb 200007c0 returned -22 [ 978.927735][ T5816] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 978.936584][T17787] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 978.978987][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3394'. [ 979.114552][ T5816] usb 7-1: Using ep0 maxpacket: 32 [ 979.188616][ T5816] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 979.709243][ T5816] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 979.727281][ T5816] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 979.737124][ T5816] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 979.747201][ T5816] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 979.757488][ T5816] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 979.790626][T15859] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 979.802068][ T5816] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 980.035372][ T5816] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.065482][ T5816] usb 7-1: config 0 descriptor?? [ 981.788632][ T5816] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 981.809311][ T5816] usb 7-1: USB disconnect, device number 7 [ 981.818434][ T5816] usblp0: removed [ 981.824637][T15859] usb 6-1: USB disconnect, device number 50 [ 981.846896][T17814] binder: 17813:17814 unknown command 0 [ 981.852507][T17814] binder: 17813:17814 ioctl c0306201 200001c0 returned -22 [ 981.970251][T17817] binder: 17813:17817 ioctl 401870cb 200007c0 returned -22 [ 982.001879][T17819] serio: Serial port ptm0 [ 982.074413][T17819] ebt_among: src integrity fail: 30a [ 982.524188][T15859] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 982.824121][ T5866] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 982.854226][T15859] usb 6-1: Using ep0 maxpacket: 16 [ 982.868170][T15859] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 982.933367][T15859] usb 6-1: config 0 has no interface number 0 [ 982.982784][T15859] usb 6-1: config 0 interface 70 has no altsetting 0 [ 982.999906][T15859] usb 6-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 983.010298][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 983.080973][ T5866] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.226140][ T5866] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 983.261020][T15859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.358685][T15859] usb 6-1: Product: syz [ 983.368700][ T5866] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 983.385571][T15859] usb 6-1: Manufacturer: syz [ 983.394570][T15859] usb 6-1: SerialNumber: syz [ 983.399310][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.413840][T15859] usb 6-1: config 0 descriptor?? [ 983.508889][ T5866] usb 7-1: config 0 descriptor?? [ 983.784964][ T29] audit: type=1326 audit(1733970875.309:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17811 comm="syz.5.3400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b097ff19 code=0x0 [ 983.981884][T17842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.485676][T17842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.599600][T17847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3408'. [ 986.163171][ T5866] usb 7-1: USB disconnect, device number 8 [ 986.186452][T15859] cdc_acm 6-1:0.70: Zero length descriptor references [ 986.196640][T15859] cdc_acm 6-1:0.70: probe with driver cdc_acm failed with error -22 [ 986.242622][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.279567][T15859] usb 6-1: USB disconnect, device number 51 [ 986.282682][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 986.834315][T17872] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 986.846302][T17872] PKCS7: Only support pkcs7_signedData type [ 991.254381][ T46] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 991.421061][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 991.452066][ T46] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 991.756105][ T46] usb 6-1: config 0 has no interface number 0 [ 991.762264][ T46] usb 6-1: config 0 interface 70 has no altsetting 0 [ 991.801137][ T46] usb 6-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 991.810795][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.864563][ T46] usb 6-1: Product: syz [ 991.868921][ T46] usb 6-1: Manufacturer: syz [ 991.874009][ T46] usb 6-1: SerialNumber: syz [ 991.897741][ T46] usb 6-1: config 0 descriptor?? [ 991.918081][T17908] binder: 17907:17908 unknown command 0 [ 992.370541][T17908] binder: 17907:17908 ioctl c0306201 200001c0 returned -22 [ 992.419150][ T29] audit: type=1326 audit(1733970883.939:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17898 comm="syz.5.3426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b097ff19 code=0x0 [ 992.471172][T17913] binder: 17907:17913 ioctl 401870cb 200007c0 returned -22 [ 992.523816][T17915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.582044][T17915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.026503][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.033803][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.771247][T17930] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 993.778328][T17930] PKCS7: Only support pkcs7_signedData type [ 994.135292][ T46] cdc_acm 6-1:0.70: Zero length descriptor references [ 994.142131][ T46] cdc_acm 6-1:0.70: probe with driver cdc_acm failed with error -22 [ 994.162964][ T46] usb 6-1: USB disconnect, device number 52 [ 997.929863][T17963] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3441'. [ 999.134197][T17976] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 999.141188][T17976] PKCS7: Only support pkcs7_signedData type [ 1000.054230][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1000.994871][T14679] Bluetooth: hci2: command 0x0406 tx timeout [ 1001.003335][T14679] Bluetooth: hci6: command 0x0406 tx timeout [ 1001.064289][ T8] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1001.073370][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.081601][ T8] usb 7-1: Product: syz [ 1001.085874][ T8] usb 7-1: Manufacturer: syz [ 1001.090470][ T8] usb 7-1: SerialNumber: syz [ 1001.097647][ T8] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1001.368678][T18006] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1001.377512][T18006] PKCS7: Only support pkcs7_signedData type [ 1001.673189][ T5862] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1001.704508][T18008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3453'. [ 1002.227821][T17921] usb 7-1: USB disconnect, device number 9 [ 1002.765419][ T5862] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1002.772438][ T5862] ath9k_htc: Failed to initialize the device [ 1002.914134][T15859] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1002.951705][T17921] usb 7-1: ath9k_htc: USB layer deinitialized [ 1003.683720][ T2144] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1004.914171][ T2144] usb 6-1: Using ep0 maxpacket: 32 [ 1004.943420][ T2144] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1004.967559][ T2144] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1005.014012][ T2144] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1005.072281][T15859] usb 3-1: Using ep0 maxpacket: 32 [ 1005.080641][T15859] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1005.121192][ T2144] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1005.131414][ T2144] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1005.141374][ T2144] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1005.155070][ T2144] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1005.164677][ T2144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.174870][T15859] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.195831][T15859] usb 3-1: config 0 has no interface number 0 [ 1005.202074][T15859] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1005.242436][ T2144] usb 6-1: config 0 descriptor?? [ 1005.263424][T15859] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1005.293633][T15859] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1005.410325][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.484211][T18015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18015 comm=syz.5.3455 [ 1005.502193][ T2144] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1005.627200][T15859] usb 3-1: Product: syz [ 1005.631805][T15859] usb 3-1: Manufacturer: syz [ 1005.636599][T15859] usb 3-1: SerialNumber: syz [ 1005.676074][T15859] usb 3-1: config 0 descriptor?? [ 1005.761706][T18042] binder: BINDER_SET_CONTEXT_MGR already set [ 1005.767898][T18042] binder: 18037:18042 ioctl 4018620d 20004a80 returned -16 [ 1006.419028][T15859] usb 3-1: can't set config #0, error -71 [ 1006.446685][T15859] usb 3-1: USB disconnect, device number 96 [ 1006.564674][T18047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3464'. [ 1006.608944][T18050] netlink: 'syz.3.3465': attribute type 1 has an invalid length. [ 1006.615922][ T46] usb 6-1: USB disconnect, device number 53 [ 1006.616844][ C0] usblp0: nonzero read bulk status received: -71 [ 1006.631508][T18045] usblp0: error -71 reading from printer [ 1006.785535][T18050] bond2 (unregistering): Released all slaves [ 1007.421766][T18051] siw: device registration error -23 [ 1007.435340][T18014] usblp0: removed [ 1007.549621][T18060] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1008.027012][ T8] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1008.388891][ T8] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1008.542080][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.556908][ T8] usb 7-1: Product: syz [ 1008.561768][ T8] usb 7-1: Manufacturer: syz [ 1008.566849][ T8] usb 7-1: SerialNumber: syz [ 1008.639836][ T8] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1008.696219][T15859] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1009.634742][T18087] binder: BINDER_SET_CONTEXT_MGR already set [ 1009.640836][T18087] binder: 18080:18087 ioctl 4018620d 20004a80 returned -16 [ 1010.495961][T15859] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1010.503160][T15859] ath9k_htc: Failed to initialize the device [ 1010.603267][ T46] usb 7-1: USB disconnect, device number 10 [ 1010.668247][ T46] usb 7-1: ath9k_htc: USB layer deinitialized [ 1012.370717][T18111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1012.694359][T15859] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1013.024086][T15859] usb 3-1: Using ep0 maxpacket: 8 [ 1013.038924][T15859] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1013.060909][T15859] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1013.081314][T15859] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1013.095174][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.103625][T15859] usb 3-1: Product: syz [ 1013.112418][T15859] usb 3-1: Manufacturer: syz [ 1013.118865][T15859] usb 3-1: SerialNumber: syz [ 1013.126092][T18126] netlink: 'syz.5.3484': attribute type 1 has an invalid length. [ 1013.353658][T18130] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3484'. [ 1013.576038][T18134] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1013.576038][T18134] program syz.0.3485 not setting count and/or reply_len properly [ 1014.127978][T15859] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1014.185978][T15859] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1014.234269][T15859] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1014.241474][T15859] usb 3-1: media controller created [ 1014.289017][T15859] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1014.333813][T18140] bond1 (unregistering): Released all slaves [ 1014.376054][T15859] zl10353_read_register: readreg error (reg=127, ret==0) [ 1014.454104][T15859] usb 3-1: USB disconnect, device number 97 [ 1014.524875][ T2144] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1014.730986][ T2144] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1014.781826][ T2144] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.883528][ T2144] usb 6-1: Product: syz [ 1014.897369][ T2144] usb 6-1: Manufacturer: syz [ 1014.902036][ T2144] usb 6-1: SerialNumber: syz [ 1014.942684][ T2144] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1014.968047][ T46] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1015.506136][T15859] usb 6-1: USB disconnect, device number 54 [ 1016.044984][ T46] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1016.075278][ T46] ath9k_htc: Failed to initialize the device [ 1016.160512][T15859] usb 6-1: ath9k_htc: USB layer deinitialized [ 1016.997221][T18167] netlink: 'syz.3.3499': attribute type 1 has an invalid length. [ 1017.086083][T18173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1017.730643][T15859] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1019.224038][T18187] binder: BINDER_SET_CONTEXT_MGR already set [ 1019.230104][T18187] binder: 18181:18187 ioctl 4018620d 20004a80 returned -16 [ 1019.826828][T15859] usb 3-1: Using ep0 maxpacket: 8 [ 1019.833408][T15859] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1019.844666][T15859] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.879092][T15859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1020.499351][T15859] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1020.509436][T15859] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.522639][T15859] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1020.532011][T15859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.585486][T15859] usb 3-1: can't set config #16, error -71 [ 1020.606020][T15859] usb 3-1: USB disconnect, device number 98 [ 1021.026692][ T46] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1021.824444][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 1021.851038][ T46] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1021.875623][ T46] usb 6-1: config 0 has no interface number 0 [ 1021.920165][ T46] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1021.962039][ T46] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1021.982737][ T46] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1022.043524][ T46] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1022.064873][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.072908][ T46] usb 6-1: Product: syz [ 1022.095044][ T46] usb 6-1: Manufacturer: syz [ 1022.099851][ T46] usb 6-1: SerialNumber: syz [ 1022.148613][ T46] usb 6-1: config 0 descriptor?? [ 1022.171362][T18198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1022.180470][T18198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1022.230460][T18215] binder: 18214:18215 unknown command 0 [ 1022.249132][T18215] binder: 18214:18215 ioctl c0306201 200001c0 returned -22 [ 1022.276681][T18215] binder: 18214:18215 ioctl 401870cb 200007c0 returned -22 [ 1022.469072][T18198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1022.494399][T18198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1022.596883][T18221] netlink: 'syz.6.3513': attribute type 1 has an invalid length. [ 1022.648000][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3513'. [ 1022.995498][ T46] Error reading MAC address [ 1023.005686][T18198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1023.012920][T18198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1023.131928][T18234] binder: BINDER_SET_CONTEXT_MGR already set [ 1023.138115][T18234] binder: 18226:18234 ioctl 4018620d 20004a80 returned -16 [ 1023.954346][ T5865] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1024.246124][ T5865] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.257788][ T5865] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1024.319634][ T5865] usb 7-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1024.334287][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.342444][ T5865] usb 7-1: Product: syz [ 1024.353142][ T5865] usb 7-1: Manufacturer: syz [ 1024.362311][ T5865] usb 7-1: SerialNumber: syz [ 1024.457936][ T5865] usb 7-1: config 0 descriptor?? [ 1025.138221][ T8] usb 7-1: USB disconnect, device number 11 [ 1025.563083][ T46] sr9700 6-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet, 4e:1c:67:e3:6f:bb [ 1025.585105][ T46] usb 6-1: USB disconnect, device number 55 [ 1025.592037][ T46] sr9700 6-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet [ 1026.407491][T18266] netlink: 'syz.6.3526': attribute type 1 has an invalid length. [ 1026.494041][T18267] netlink: 'syz.5.3527': attribute type 25 has an invalid length. [ 1026.502678][T18266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3526'. [ 1026.828414][T18278] binder: BINDER_SET_CONTEXT_MGR already set [ 1026.835058][T18278] binder: 18271:18278 ioctl 4018620d 20004a80 returned -16 [ 1027.274187][ T8] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1027.476014][ T8] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1027.574611][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.582699][ T8] usb 3-1: Product: syz [ 1027.587413][ T8] usb 3-1: Manufacturer: syz [ 1027.592044][ T8] usb 3-1: SerialNumber: syz [ 1027.781511][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1027.827819][ T8] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1027.989560][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 1028.551851][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1028.562598][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1028.572761][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1028.582751][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1028.593386][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.614812][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1028.624089][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.679563][T18290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1028.685488][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1029.014895][ T25] usb 7-1: usb_control_msg returned -32 [ 1029.049341][ T25] usbtmc 7-1:16.0: can't read capabilities [ 1029.363339][ T29] audit: type=1800 audit(1733970920.849:790): pid=18299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3537" name="bus" dev="overlay" ino=2863 res=0 errno=0 [ 1029.468477][ T25] usb 3-1: USB disconnect, device number 99 [ 1029.550446][T18300] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 1029.558355][ T5863] usb 7-1: USB disconnect, device number 12 [ 1029.725104][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1029.732202][ T8] ath9k_htc: Failed to initialize the device [ 1029.740622][ T25] usb 3-1: ath9k_htc: USB layer deinitialized [ 1029.754214][T15859] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1029.914157][T15859] usb 6-1: Using ep0 maxpacket: 8 [ 1029.925569][T15859] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1029.933817][T15859] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1029.944732][T15859] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1029.955568][T15859] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1029.966114][T15859] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.980017][T15859] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1029.990188][T15859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.224378][T15859] usb 6-1: usb_control_msg returned -32 [ 1030.234690][T18315] netlink: 'syz.6.3543': attribute type 1 has an invalid length. [ 1030.245186][T15859] usbtmc 6-1:16.0: can't read capabilities [ 1030.303412][T18315] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3543'. [ 1030.938039][T18323] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 1031.910612][T18338] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1031.910612][T18338] program syz.0.3545 not setting count and/or reply_len properly [ 1032.377231][T15859] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1032.444941][ T25] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1032.489108][T18340] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1032.564560][T17921] usb 6-1: USB disconnect, device number 56 [ 1032.604149][T15859] usb 3-1: Using ep0 maxpacket: 16 [ 1032.609871][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1032.619062][T15859] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 1032.639886][T15859] usb 3-1: config 0 has no interface number 0 [ 1032.644020][ T25] usb 7-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1032.655145][T15859] usb 3-1: config 0 interface 70 has no altsetting 0 [ 1032.656879][T15859] usb 3-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 1032.672380][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.693799][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.701726][ T25] usb 7-1: config 0 descriptor?? [ 1032.714956][T15859] usb 3-1: Product: syz [ 1032.719174][T15859] usb 3-1: Manufacturer: syz [ 1032.723128][T18337] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1032.736302][T15859] usb 3-1: SerialNumber: syz [ 1032.743398][T15859] usb 3-1: config 0 descriptor?? [ 1032.780306][T18347] binder: 18346:18347 unknown command 0 [ 1032.786654][T18347] binder: 18346:18347 ioctl c0306201 200001c0 returned -22 [ 1032.795260][T18347] binder: 18346:18347 ioctl 401870cb 200007c0 returned -22 [ 1033.014682][T17921] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1033.022423][ T29] audit: type=1326 audit(1733970924.539:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18333 comm="syz.2.3547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe521b7ff19 code=0x0 [ 1033.335837][T18351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.349388][T18351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.357158][T17921] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1033.390952][T17921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.399181][T17921] usb 6-1: Product: syz [ 1033.403381][T17921] usb 6-1: Manufacturer: syz [ 1033.408662][T17921] usb 6-1: SerialNumber: syz [ 1033.439781][T17921] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1033.463058][ T5865] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1033.505644][T18337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.547696][T18337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.660530][ T25] usbhid 7-1:0.0: can't add hid device: -71 [ 1033.694201][ T25] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1033.703007][T18358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3554'. [ 1034.241258][ T25] usb 7-1: USB disconnect, device number 13 [ 1034.251610][ T8] usb 6-1: USB disconnect, device number 57 [ 1034.642580][ T5865] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1034.650312][ T5865] ath9k_htc: Failed to initialize the device [ 1034.674128][ T8] usb 6-1: ath9k_htc: USB layer deinitialized [ 1034.707300][T15859] cdc_acm 3-1:0.70: Zero length descriptor references [ 1034.788333][T18366] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.794580][T18366] binder: 18362:18366 ioctl 4018620d 20004a80 returned -16 [ 1035.665358][T15859] cdc_acm 3-1:0.70: probe with driver cdc_acm failed with error -22 [ 1035.711204][T15859] usb 3-1: USB disconnect, device number 100 [ 1036.856258][T17921] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1037.084137][T18392] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.090186][T18392] binder: 18384:18392 ioctl 4018620d 20004a80 returned -16 [ 1037.274270][T17921] usb 7-1: Using ep0 maxpacket: 8 [ 1037.505707][T17921] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1037.544540][T17921] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1037.622216][T17921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1037.718192][T17921] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1037.729097][T17921] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.742689][T17921] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1037.752100][T17921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.858620][ T29] audit: type=1800 audit(1733970929.359:792): pid=18400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3565" name="bus" dev="overlay" ino=2894 res=0 errno=0 [ 1037.976814][T17921] usb 7-1: usb_control_msg returned -32 [ 1037.982452][T17921] usbtmc 7-1:16.0: can't read capabilities [ 1038.074041][T18405] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1038.082440][T18405] PKCS7: Only support pkcs7_signedData type [ 1038.762333][T18416] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.768500][T18416] binder: 18409:18416 ioctl 4018620d 20004a80 returned -16 [ 1038.964737][T17921] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1039.030255][T18415] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 1039.169667][T17921] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1039.180961][T17921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.190255][T17921] usb 3-1: Product: syz [ 1039.195237][T17921] usb 3-1: Manufacturer: syz [ 1039.200178][T17921] usb 3-1: SerialNumber: syz [ 1039.208348][T17921] usb 3-1: config 0 descriptor?? [ 1039.214197][T15859] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1039.414127][T15859] usb 6-1: Using ep0 maxpacket: 16 [ 1039.425340][T15859] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 1039.433557][T15859] usb 6-1: config 0 has no interface number 0 [ 1039.439741][T15859] usb 6-1: config 0 interface 70 has no altsetting 0 [ 1039.451650][T15859] usb 6-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 1039.464390][T15859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.473778][T15859] usb 6-1: Product: syz [ 1039.478576][T15859] usb 6-1: Manufacturer: syz [ 1039.483454][T15859] usb 6-1: SerialNumber: syz [ 1039.522202][T15859] usb 6-1: config 0 descriptor?? [ 1039.752492][ T29] audit: type=1326 audit(1733970931.269:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18407 comm="syz.5.3568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b097ff19 code=0x0 [ 1040.017228][T18424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.044522][T18424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.588611][ T5862] usb 7-1: USB disconnect, device number 14 [ 1040.744713][T17921] usb 3-1: non-Atmel transceiver xxxx6cf2 [ 1040.914653][ T5862] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1041.008359][T17921] usb 3-1: Firmware version (0.0) predates our first public release. [ 1041.028859][T17921] usb 3-1: Please update to version 0.2 or newer [ 1041.044759][T17921] usb 3-1: atusb_probe: initialization failed, error = -19 [ 1041.076832][T17921] usb 3-1: USB disconnect, device number 101 [ 1041.272644][T18438] binder: BINDER_SET_CONTEXT_MGR already set [ 1041.278826][T18438] binder: 18434:18438 ioctl 4018620d 20004a80 returned -16 [ 1041.887267][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 1041.895635][T15859] cdc_acm 6-1:0.70: Zero length descriptor references [ 1041.902467][T15859] cdc_acm 6-1:0.70: probe with driver cdc_acm failed with error -22 [ 1041.913763][T15859] usb 6-1: USB disconnect, device number 58 [ 1041.922797][ T5862] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1041.932360][ T5862] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1041.941007][ T5862] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1041.950767][ T5862] usb 7-1: config 250 has no interface number 0 [ 1041.963030][ T5862] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1041.990352][ T5862] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1042.014943][ T5862] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1042.037762][ T5862] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1042.084923][ T5862] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1042.179013][ T5862] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1042.353225][ T5862] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1042.372864][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1042.497278][T18454] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1042.497278][T18454] program syz.0.3578 not setting count and/or reply_len properly [ 1042.941816][ T5862] usb 7-1: Product: syz [ 1042.946467][ T5862] usb 7-1: SerialNumber: syz [ 1043.088241][ T5862] hub 7-1:250.228: bad descriptor, ignoring hub [ 1043.095581][ T5862] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1043.150155][T18456] overlayfs: missing 'lowerdir' [ 1043.347690][T18460] binder: 18458:18460 unknown command 0 [ 1043.354627][T18460] binder: 18458:18460 ioctl c0306201 200001c0 returned -22 [ 1043.367771][T18460] binder: 18458:18460 ioctl 401870cb 200007c0 returned -22 [ 1043.592735][ T5862] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1043.714223][T15859] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1043.992332][T15859] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1044.046051][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.168367][T15859] usb 3-1: Product: syz [ 1044.194109][T15859] usb 3-1: Manufacturer: syz [ 1044.206201][T15859] usb 3-1: SerialNumber: syz [ 1044.223125][T15859] usb 3-1: config 0 descriptor?? [ 1044.239239][T15859] sierra 3-1:0.0: Sierra USB modem converter detected [ 1044.559573][ T5865] usb 7-1: USB disconnect, device number 15 [ 1044.646387][ T5865] usblp0: removed [ 1044.956121][T15859] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1044.971864][T15859] usb 3-1: USB disconnect, device number 102 [ 1045.054681][T15859] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1045.078287][T15859] sierra 3-1:0.0: device disconnected [ 1045.224584][T17921] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1045.373843][T18482] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.380688][T18482] binder: 18478:18482 ioctl 4018620d 20004a80 returned -16 [ 1045.494236][T17921] usb 6-1: Using ep0 maxpacket: 16 [ 1045.832747][T17921] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 1045.841214][T17921] usb 6-1: config 0 has no interface number 0 [ 1046.053788][T17921] usb 6-1: config 0 interface 70 has no altsetting 0 [ 1046.078843][T17921] usb 6-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 1046.089161][T17921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.097442][T17921] usb 6-1: Product: syz [ 1046.101811][T17921] usb 6-1: Manufacturer: syz [ 1046.108636][T17921] usb 6-1: SerialNumber: syz [ 1046.143362][T17921] usb 6-1: config 0 descriptor?? [ 1046.201056][T15859] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1046.390292][ T29] audit: type=1326 audit(1733970937.909:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18476 comm="syz.5.3587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31b097ff19 code=0x0 [ 1046.637305][T15859] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1046.646383][T18494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.646630][T18494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.655243][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.670679][T15859] usb 3-1: Product: syz [ 1046.675009][T15859] usb 3-1: Manufacturer: syz [ 1046.679668][T15859] usb 3-1: SerialNumber: syz [ 1046.688133][T15859] usb 3-1: config 0 descriptor?? [ 1046.695639][T15859] sierra 3-1:0.0: Sierra USB modem converter detected [ 1046.938558][T15859] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 1046.960138][T15859] usb 3-1: USB disconnect, device number 103 [ 1047.120826][T15859] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1047.132277][T15859] sierra 3-1:0.0: device disconnected [ 1047.249063][T18503] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.256106][T18503] binder: 18498:18503 ioctl 4018620d 20004a80 returned -16 [ 1048.000376][T17921] cdc_acm 6-1:0.70: Zero length descriptor references [ 1048.012137][T17921] cdc_acm 6-1:0.70: probe with driver cdc_acm failed with error -22 [ 1048.055114][T17921] usb 6-1: USB disconnect, device number 59 [ 1048.314758][ T25] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1048.491375][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 1048.769326][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1048.870924][ T25] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1048.879936][ T25] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1048.889032][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1048.898551][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1048.908812][ T25] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1048.918571][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1048.932554][ T25] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1048.942198][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.965489][ T25] usb 7-1: config 0 descriptor?? [ 1049.182504][T18511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18511 comm=syz.6.3596 [ 1050.287442][ T25] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1050.384647][T15859] usb 7-1: USB disconnect, device number 16 [ 1050.401716][T15859] usblp0: removed [ 1050.555026][T18545] binder: 18544:18545 unknown command 0 [ 1050.560347][T18541] ebt_among: src integrity fail: 30a [ 1050.560625][T18545] binder: 18544:18545 ioctl c0306201 200001c0 returned -22 [ 1050.578017][T18545] binder: 18544:18545 ioctl 401870cb 200007c0 returned -22 [ 1050.689211][T18548] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1050.754540][ T5866] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1050.935288][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 1051.128215][ T5866] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1051.138631][ T5866] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1051.175439][ T5866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1051.191113][ T5866] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1051.202898][ T5866] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1051.221046][ T5866] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1051.264633][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.257364][ T5866] usb 6-1: usb_control_msg returned -32 [ 1053.263225][ T5866] usbtmc 6-1:16.0: can't read capabilities [ 1053.628930][T18571] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1053.636880][T18571] PKCS7: Only support pkcs7_signedData type [ 1053.753630][T18572] No control pipe specified [ 1054.504760][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.511120][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.384671][ T25] usb 6-1: USB disconnect, device number 60 [ 1055.480556][T18584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3615'. [ 1055.716807][T18590] netlink: 'syz.6.3618': attribute type 1 has an invalid length. [ 1055.812270][T18590] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1055.976206][T18594] IPv6: syztnl0: Disabled Multicast RS [ 1056.224260][ T5866] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1056.894444][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 1056.905545][ T5866] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1056.993020][ T5866] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1057.014228][ T5866] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1057.024199][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1057.034104][ T5866] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1057.044351][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1057.064102][ T5866] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1057.107191][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.142287][ T5866] usb 6-1: config 0 descriptor?? [ 1057.205640][T18606] ebt_among: src integrity fail: 30a [ 1057.367686][T18595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18595 comm=syz.5.3619 [ 1057.415003][ T5866] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1057.454239][ T25] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1057.629035][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 1057.639436][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1057.658357][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1057.694830][ T25] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1057.714879][ C1] usblp0: nonzero read bulk status received: -71 [ 1057.715731][T15859] usb 6-1: USB disconnect, device number 61 [ 1057.721504][T18595] usblp0: error -71 reading from printer [ 1057.763715][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.793609][ T25] usb 7-1: config 0 descriptor?? [ 1057.794090][ T5866] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1057.922841][T18592] usblp0: removed [ 1057.954067][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1057.990239][ T5866] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1058.011971][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.023531][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1058.040806][ T5866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1058.050099][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.058258][ T5866] usb 3-1: Product: syz [ 1058.062560][ T5866] usb 3-1: Manufacturer: syz [ 1058.067296][ T5866] usb 3-1: SerialNumber: syz [ 1058.229070][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1058.236832][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1058.244948][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1058.252227][ T25] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1058.260564][ T25] microsoft 0003:045E:07DA.0022: unbalanced collection at end of report description [ 1058.270615][ T25] microsoft 0003:045E:07DA.0022: parse failed [ 1058.277411][ T25] microsoft 0003:045E:07DA.0022: probe with driver microsoft failed with error -22 [ 1058.631963][ T5866] usb 3-1: 0:2 : does not exist [ 1058.640541][ T25] usb 7-1: USB disconnect, device number 17 [ 1059.625977][T18620] vlan2: entered promiscuous mode [ 1059.631112][T18620] vlan2: entered allmulticast mode [ 1059.679279][T18620] vlan0: entered allmulticast mode [ 1059.688277][T18620] veth0_vlan: entered allmulticast mode [ 1059.697166][T18620] vlan0: entered promiscuous mode [ 1059.780322][T18620] team0: Port device vlan2 added [ 1059.800818][ T5863] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1059.974129][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 1059.981791][ T5863] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1060.040209][ T5863] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1060.064254][ T5863] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1060.120033][T18623] could not allocate digest TFM handle cbcmac-aes-neon [ 1060.127722][ T5863] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1060.137793][ T5863] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.142363][T18632] netlink: 'syz.3.3630': attribute type 1 has an invalid length. [ 1060.159843][ T5863] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1060.169990][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.316609][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3630'. [ 1060.387864][ T5863] usb 6-1: usb_control_msg returned -32 [ 1060.467683][ T5863] usbtmc 6-1:16.0: can't read capabilities [ 1061.179462][ T5866] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1061.221067][ T5866] usb 3-1: USB disconnect, device number 104 [ 1061.508356][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1062.151556][ T25] usb 6-1: USB disconnect, device number 62 [ 1062.966932][T18653] binder: BINDER_SET_CONTEXT_MGR already set [ 1062.973094][T18653] binder: 18646:18653 ioctl 4018620d 20004a80 returned -16 [ 1063.494467][T18655] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1063.504040][T18655] PKCS7: Only support pkcs7_signedData type [ 1063.549661][T18657] serio: Serial port ptm0 [ 1063.615547][T18657] ebt_among: src integrity fail: 30a [ 1063.851992][T18665] ebt_among: src integrity fail: 30a [ 1063.862101][T18668] binder: 18667:18668 unknown command 0 [ 1063.871073][T18668] binder: 18667:18668 ioctl c0306201 200001c0 returned -22 [ 1063.878862][T18668] binder: 18667:18668 ioctl 401870cb 200007c0 returned -22 [ 1063.894940][T17921] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1064.064440][T17921] usb 3-1: Using ep0 maxpacket: 16 [ 1064.077046][T17921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1064.088355][T17921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1064.094093][ T5866] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1064.102054][T17921] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1064.118381][T17921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.129036][T17921] usb 3-1: config 0 descriptor?? [ 1064.174204][ T5862] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1064.265269][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 1064.271870][ T5866] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1064.283251][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1064.296260][ T5866] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1064.305371][ T5866] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.315812][ T5866] usb 6-1: config 0 descriptor?? [ 1064.334115][ T5862] usb 7-1: Using ep0 maxpacket: 32 [ 1064.340989][ T5862] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1064.350368][ T5862] usb 7-1: config 0 has no interface number 0 [ 1064.356755][ T5862] usb 7-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1064.373583][ T5862] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1064.383191][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.391771][ T5862] usb 7-1: Product: syz [ 1064.396583][ T5862] usb 7-1: Manufacturer: syz [ 1064.401235][ T5862] usb 7-1: SerialNumber: syz [ 1064.409105][ T5862] usb 7-1: config 0 descriptor?? [ 1064.415332][T18670] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1064.426857][ T5862] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1064.437019][ T5862] em28xx 7-1:0.132: Video interface 132 found: bulk [ 1064.554411][T17921] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1064.561855][T17921] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1064.569791][T17921] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1064.577493][T17921] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0 [ 1064.585303][T17921] microsoft 0003:045E:07DA.0023: unbalanced collection at end of report description [ 1064.596128][T17921] microsoft 0003:045E:07DA.0023: parse failed [ 1064.602281][T17921] microsoft 0003:045E:07DA.0023: probe with driver microsoft failed with error -22 [ 1064.736146][ T5866] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1064.743432][ T5866] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1064.784185][ T5866] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1064.791519][ T5866] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1064.834217][ T5866] microsoft 0003:045E:07DA.0024: unbalanced collection at end of report description [ 1064.865096][ T5866] microsoft 0003:045E:07DA.0024: parse failed [ 1064.881945][ T5866] microsoft 0003:045E:07DA.0024: probe with driver microsoft failed with error -22 [ 1064.895477][ T5862] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1065.024054][T15859] usb 3-1: USB disconnect, device number 105 [ 1065.204567][ T5863] usb 6-1: USB disconnect, device number 63 [ 1065.509635][ T5862] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1065.524102][ T5862] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 1065.534142][ T5862] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1065.624155][ T5862] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1065.644160][ T5862] em28xx 7-1:0.132: analog set to bulk mode. [ 1065.650274][ T5863] em28xx 7-1:0.132: Registering V4L2 extension [ 1065.678553][ T5862] usb 7-1: USB disconnect, device number 18 [ 1065.745972][ T5862] em28xx 7-1:0.132: Disconnecting em28xx [ 1066.099836][ T5863] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1066.108750][ T5863] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1066.124939][ T5863] em28xx 7-1:0.132: No AC97 audio processor [ 1066.151827][ T5863] usb 7-1: Decoder not found [ 1066.174347][ T5863] em28xx 7-1:0.132: failed to create media graph [ 1066.180751][ T5863] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1066.200385][ T5863] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1066.220215][ T5862] em28xx 7-1:0.132: Closing input extension [ 1066.244375][ T5862] em28xx 7-1:0.132: Freeing device [ 1066.594035][T17921] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1066.796734][T17921] usb 6-1: Using ep0 maxpacket: 8 [ 1066.808796][T17921] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1066.941720][T17921] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1067.167170][T17921] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1067.239251][T17921] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1067.274255][T17921] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.357313][T17921] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1067.366534][T17921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.486692][T18693] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1068.524362][T17921] usb 6-1: usb_control_msg returned -71 [ 1068.530095][T17921] usbtmc 6-1:16.0: can't read capabilities [ 1068.542363][T17921] usb 6-1: USB disconnect, device number 64 [ 1070.572389][T18711] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1070.572389][T18711] program syz.6.3652 not setting count and/or reply_len properly [ 1071.005385][T18716] ebt_among: src integrity fail: 30a [ 1071.594068][ T5863] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1071.754128][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 1071.762777][ T5863] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 1071.773622][ T5863] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.789270][ T5863] usb 7-1: config 0 has no interface number 0 [ 1071.798522][ T5863] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1071.804596][T17921] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1071.809210][ T5863] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1071.865980][ T5863] usb 7-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1071.881775][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.897391][ T5863] usb 7-1: Product: syz [ 1071.901608][ T5863] usb 7-1: Manufacturer: syz [ 1071.912920][ T5863] usb 7-1: SerialNumber: syz [ 1071.932032][ T5863] usb 7-1: config 0 descriptor?? [ 1071.940522][T18720] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.958704][T18720] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1071.975890][T17921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.011657][T17921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.029572][ T5863] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1072.039376][T17921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1072.162817][T17921] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1072.199515][T17921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.223367][T17921] usb 3-1: config 0 descriptor?? [ 1072.319339][T18720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1072.397108][ T5866] usb 7-1: USB disconnect, device number 19 [ 1072.932465][T17921] usbhid 3-1:0.0: can't add hid device: -71 [ 1072.940248][T17921] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1072.970231][T17921] usb 3-1: USB disconnect, device number 106 [ 1074.973406][T18758] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1074.973406][T18758] program syz.5.3666 not setting count and/or reply_len properly [ 1074.991216][ T5866] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1075.144119][ T5866] usb 7-1: Using ep0 maxpacket: 16 [ 1075.160774][ T5866] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1075.173910][ T5866] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.184710][ T5866] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.195871][ T5866] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1075.205807][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.213850][ T5866] usb 7-1: Product: syz [ 1075.219088][ T5866] usb 7-1: Manufacturer: syz [ 1075.223711][ T5866] usb 7-1: SerialNumber: syz [ 1075.786248][ T5866] usb 7-1: 0:2 : does not exist [ 1075.877261][T18757] vlan2: entered promiscuous mode [ 1075.882444][T18757] vlan2: entered allmulticast mode [ 1075.895565][T18757] vlan0: entered allmulticast mode [ 1075.908674][T18757] veth0_vlan: entered allmulticast mode [ 1075.915111][ T25] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1075.924185][T18757] vlan0: entered promiscuous mode [ 1075.954660][T18757] team0: Port device vlan2 added [ 1075.967420][ T5866] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1075.987350][ T5866] usb 7-1: USB disconnect, device number 20 [ 1076.087458][ T25] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1076.097067][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.105236][ T25] usb 6-1: Product: syz [ 1076.109666][ T25] usb 6-1: Manufacturer: syz [ 1076.114398][ T25] usb 6-1: SerialNumber: syz [ 1076.120477][ T25] usb 6-1: config 0 descriptor?? [ 1076.179393][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.495232][ T5866] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1076.664206][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 1076.675204][ T5866] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1076.683348][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.717841][ T5866] usb 3-1: config 0 has no interface number 0 [ 1076.732264][ T5866] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1076.753468][ T5866] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1076.760011][T18771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1076.774326][ T5862] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1076.785507][ T5866] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1076.804692][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.805938][T18771] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 1076.812711][ T5866] usb 3-1: Product: syz [ 1076.812733][ T5866] usb 3-1: Manufacturer: syz [ 1076.812750][ T5866] usb 3-1: SerialNumber: syz [ 1076.831451][ T5866] usb 3-1: config 0 descriptor?? [ 1076.845144][T18767] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1076.852463][T18767] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1077.011311][ T5866] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1077.085232][T18767] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1077.166938][ T25] usb 6-1: non-Atmel transceiver xxxx6cf2 [ 1077.289143][ T5862] usb 7-1: device descriptor read/64, error -71 [ 1077.335017][ T5866] usb 3-1: USB disconnect, device number 107 [ 1077.534135][ T5862] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1077.572825][T16652] udevd[16652]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.679225][ T5862] usb 7-1: device descriptor read/64, error -71 [ 1077.717629][ T25] usb 6-1: Firmware version (0.0) predates our first public release. [ 1077.813029][ T25] usb 6-1: Please update to version 0.2 or newer [ 1077.819992][ T5862] usb usb7-port1: attempt power cycle [ 1077.825985][ T25] usb 6-1: atusb_probe: initialization failed, error = -19 [ 1077.837838][ T25] usb 6-1: USB disconnect, device number 65 [ 1078.289172][ T5862] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1078.429834][ T5862] usb 7-1: device descriptor read/8, error -71 [ 1078.588699][T18784] IPv6: syztnl0: Disabled Multicast RS [ 1079.404213][ T46] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1079.567960][ T5862] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1079.594382][ T5862] usb 7-1: device descriptor read/8, error -71 [ 1079.594538][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 1080.174928][ T5862] usb usb7-port1: unable to enumerate USB device [ 1080.277972][ T46] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1080.292594][ T46] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1080.302936][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1080.316416][T18804] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1080.330660][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1080.342490][T18804] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 1080.358577][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1080.547287][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1080.560701][ T46] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1080.571367][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.893579][ T46] usb 3-1: config 0 descriptor?? [ 1082.140751][ T46] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 108 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1082.604230][T18829] autofs: Unknown parameter '0x0000000000000000' [ 1082.666032][ C0] usblp0: nonzero read bulk status received: -71 [ 1082.756955][T18786] usblp0: error -71 reading from printer [ 1082.767321][ C0] usblp0: nonzero read bulk status received: -71 [ 1083.051708][ T5862] usb 3-1: USB disconnect, device number 108 [ 1083.075845][T18785] usblp0: removed [ 1083.448001][T18828] mkiss: ax0: crc mode is auto. [ 1083.987428][T18844] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1083.994447][T18844] PKCS7: Only support pkcs7_signedData type [ 1084.170074][T18846] serio: Serial port ptm0 [ 1084.925958][T18846] ebt_among: src integrity fail: 30a [ 1085.224107][ T5866] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1085.404697][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1085.537348][ T5862] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1085.570728][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1085.604038][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1085.784393][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1085.793544][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.818202][ T5866] usb 3-1: config 0 descriptor?? [ 1085.914126][ T5862] usb 7-1: Using ep0 maxpacket: 8 [ 1085.921598][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.949273][ T5862] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1085.964781][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.993545][ T5862] usb 7-1: config 0 descriptor?? [ 1086.005527][ T5862] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1086.251264][ T5866] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1086.259554][ T5866] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1086.277459][ T5866] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1086.304320][ T5866] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1086.312567][ T5866] microsoft 0003:045E:07DA.0025: unbalanced collection at end of report description [ 1086.354679][ T5866] microsoft 0003:045E:07DA.0025: parse failed [ 1086.361724][ T5866] microsoft 0003:045E:07DA.0025: probe with driver microsoft failed with error -22 [ 1086.524542][ T25] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1086.632888][ T5862] gspca_vc032x: reg_r err -32 [ 1086.638665][ T5862] vc032x 7-1:0.0: probe with driver vc032x failed with error -32 [ 1087.114063][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 1087.121066][ T25] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1087.204174][ T25] usb 6-1: config 0 has no interface number 0 [ 1087.210330][ T25] usb 6-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1087.323780][ T25] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1087.360436][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.398477][ T25] usb 6-1: Product: syz [ 1087.402891][ T25] usb 6-1: Manufacturer: syz [ 1087.426882][ T25] usb 6-1: SerialNumber: syz [ 1087.482739][ T25] usb 6-1: config 0 descriptor?? [ 1087.521712][T18864] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1087.594849][ T25] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1087.605469][ T25] em28xx 6-1:0.132: Video interface 132 found: bulk [ 1088.108147][ T5866] usb 3-1: USB disconnect, device number 109 [ 1088.392040][ T25] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 1088.475719][T18888] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1088.482392][T18888] PKCS7: Only support pkcs7_signedData type [ 1089.747101][ T25] em28xx 6-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1089.759445][ T25] em28xx 6-1:0.132: failed to read eeprom (err=-5) [ 1089.786552][ T25] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1089.902596][T18904] netlink: 'syz.0.3709': attribute type 25 has an invalid length. [ 1089.919377][ T5862] usb 7-1: USB disconnect, device number 25 [ 1089.941792][ T25] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1089.941825][ T25] em28xx 6-1:0.132: analog set to bulk mode. [ 1089.966233][T17921] em28xx 6-1:0.132: Registering V4L2 extension [ 1090.013827][T17921] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1090.025425][T17921] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1090.037712][T17921] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1090.046657][ T25] usb 6-1: USB disconnect, device number 66 [ 1090.053618][ T25] em28xx 6-1:0.132: Disconnecting em28xx [ 1090.061520][T17921] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1090.166334][T17921] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 1090.173456][T17921] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1090.180883][T17921] em28xx 6-1:0.132: No AC97 audio processor [ 1090.184124][ T5863] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1090.190578][T17921] usb 6-1: Decoder not found [ 1090.200572][T17921] em28xx 6-1:0.132: failed to create media graph [ 1090.207098][T17921] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1090.215093][T17921] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1090.216420][T18917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1090.224146][ T25] em28xx 6-1:0.132: Closing input extension [ 1090.246293][ T25] em28xx 6-1:0.132: Freeing device [ 1090.362686][ T5863] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1090.408304][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.516185][ T5863] usb 3-1: Product: syz [ 1090.520404][ T5863] usb 3-1: Manufacturer: syz [ 1090.545173][ T5863] usb 3-1: SerialNumber: syz [ 1090.546713][T18917] bond1 (unregistering): Released all slaves [ 1090.551621][ T5863] usb 3-1: config 0 descriptor?? [ 1090.807464][ T5862] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1091.161802][ T29] audit: type=1800 audit(1733970982.679:795): pid=18931 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3718" name="bus" dev="overlay" ino=636 res=0 errno=0 [ 1091.164134][ T5862] usb 7-1: Using ep0 maxpacket: 16 [ 1091.215250][ T5862] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1091.330316][ T5862] usb 7-1: config 0 has no interface number 0 [ 1091.336972][ T5862] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1091.346945][ T5862] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1091.361764][ T5862] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1091.371513][ T5862] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1091.381426][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.390179][ T5862] usb 7-1: Product: syz [ 1091.394820][ T5862] usb 7-1: Manufacturer: syz [ 1091.402127][ T5862] usb 7-1: SerialNumber: syz [ 1091.918261][ T5862] usb 7-1: config 0 descriptor?? [ 1091.933420][T18921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1091.945441][T18921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1091.986491][T18942] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1091.993319][T18942] PKCS7: Only support pkcs7_signedData type [ 1092.210220][T18921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1092.249093][ T5863] usb 3-1: non-Atmel transceiver xxxx6cf2 [ 1092.283674][T18921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1092.888550][ T5862] Error reading MAC address [ 1092.902456][ T5863] usb 3-1: Firmware version (0.0) predates our first public release. [ 1092.917677][T18921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1092.922846][ T5863] usb 3-1: Please update to version 0.2 or newer [ 1092.925396][T18921] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1092.943064][ T5863] usb 3-1: atusb_probe: initialization failed, error = -19 [ 1092.986944][ T5863] usb 3-1: USB disconnect, device number 110 [ 1095.392005][T18976] mkiss: ax0: crc mode is auto. [ 1095.529622][ T5862] sr9700 7-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.6-1, CoreChip SR9700 USB Ethernet, f6:0d:3e:d9:7a:11 [ 1095.631008][ T5862] usb 7-1: USB disconnect, device number 26 [ 1095.644973][ T5862] sr9700 7-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.6-1, CoreChip SR9700 USB Ethernet [ 1095.658901][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3731'. [ 1095.881167][T18993] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1095.890119][T18993] PKCS7: Only support pkcs7_signedData type [ 1096.167713][T18991] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 1096.180232][T18991] PKCS7: Only support pkcs7_signedData type [ 1096.945104][ T2144] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1097.119187][ T2144] usb 3-1: Using ep0 maxpacket: 16 [ 1097.126582][ T2144] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1097.135858][ T2144] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.146520][ T2144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.173229][ T2144] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1097.185070][ T2144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.193254][ T2144] usb 3-1: Product: syz [ 1097.201808][ T2144] usb 3-1: Manufacturer: syz [ 1097.208540][ T2144] usb 3-1: SerialNumber: syz [ 1098.028751][ T2144] usb 3-1: 0:2 : does not exist [ 1098.044735][ T46] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1098.204314][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 1098.215105][ T46] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1098.336514][ T46] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.387615][ T46] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1098.576197][ T46] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1098.600726][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.627347][ T46] usbtmc 6-1:16.0: bulk endpoints not found [ 1098.713726][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3744'. [ 1098.849284][T19025] bond4 (unregistering): Released all slaves [ 1099.473050][ T2144] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1099.534418][ T2144] usb 3-1: USB disconnect, device number 111 [ 1099.957364][T19041] binder: BINDER_SET_CONTEXT_MGR already set [ 1099.963436][T19041] binder: 19033:19041 ioctl 4018620d 20004a80 returned -16 [ 1100.374756][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.475200][T19046] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3749'. [ 1100.990616][T15859] usb 6-1: USB disconnect, device number 67 [ 1101.651696][T19061] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1101.683245][T19061] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 1101.813518][ T2144] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1102.594046][ T2144] usb 7-1: Using ep0 maxpacket: 16 [ 1102.614438][ T2144] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1102.637069][T19068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19068 comm=syz.0.3745 [ 1102.664365][ T2144] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.703635][ T2144] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1102.772480][ T2144] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1102.796697][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.803494][T19072] serio: Serial port ptm0 [ 1102.837512][ T2144] usb 7-1: Product: syz [ 1103.064095][ T2144] usb 7-1: Manufacturer: syz [ 1103.068888][ T2144] usb 7-1: SerialNumber: syz [ 1103.184206][T19072] ebt_among: src integrity fail: 30a [ 1103.434169][ T5862] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1103.594156][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 1103.607739][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1103.628681][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1103.646197][ T2144] usb 7-1: 0:2 : does not exist [ 1103.651389][ T5862] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1103.663477][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.685561][ T5862] usb 6-1: config 0 descriptor?? [ 1104.163639][ T5862] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1104.171570][ T5862] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1104.180229][ T5862] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1104.189176][ T5862] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1104.196897][ T5862] microsoft 0003:045E:07DA.0026: unbalanced collection at end of report description [ 1104.220821][ T5862] microsoft 0003:045E:07DA.0026: parse failed [ 1104.229957][ T5862] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 1104.358173][T19082] bond1 (unregistering): Released all slaves [ 1104.748728][ T25] usb 6-1: USB disconnect, device number 68 [ 1106.336346][ T2144] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1106.379079][ T2144] usb 7-1: USB disconnect, device number 27 [ 1106.587735][T19103] siw: device registration error -23 [ 1106.728588][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.904549][T19110] siw: device registration error -23 [ 1107.170402][T19117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1107.543127][T19117] bond4 (unregistering): Released all slaves [ 1107.874157][T15859] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1108.694171][T15859] usb 3-1: Using ep0 maxpacket: 16 [ 1108.702654][T15859] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1109.202502][T15859] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.213064][T15859] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.305687][T15859] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.315453][T15859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.504049][T15859] usb 3-1: Product: syz [ 1109.508255][T15859] usb 3-1: Manufacturer: syz [ 1109.637904][T15859] usb 3-1: SerialNumber: syz [ 1109.794201][T19150] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1109.808437][T19150] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 1110.645279][T15859] usb 3-1: 0:2 : does not exist [ 1110.939647][T19165] siw: device registration error -23 [ 1111.576764][T19153] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 1111.576764][T19153] program syz.6.3775 not setting count and/or reply_len properly [ 1112.636846][T15859] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1112.664328][T15859] usb 3-1: USB disconnect, device number 112 [ 1114.065633][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1115.364734][ T25] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1115.885575][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.891990][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.502706][T19226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3796'. [ 1116.527564][T19226] bond1 (unregistering): Released all slaves [ 1116.684264][T15859] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1116.984160][T15859] usb 6-1: Using ep0 maxpacket: 32 [ 1117.167676][T15859] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1117.175981][T15859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.195106][T15859] usb 6-1: config 0 has no interface number 0 [ 1117.203849][T15859] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1117.214036][T15859] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1117.243874][T15859] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1117.253135][T15859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.264975][T15859] usb 6-1: Product: syz [ 1117.269593][T15859] usb 6-1: Manufacturer: syz [ 1117.274871][T15859] usb 6-1: SerialNumber: syz [ 1117.314487][T15859] usb 6-1: config 0 descriptor?? [ 1117.557230][T19224] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1117.599201][T19224] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1117.609722][T15859] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1118.586094][ T46] usb 6-1: USB disconnect, device number 70 [ 1118.924978][ T2144] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1119.094376][ T2144] usb 3-1: Using ep0 maxpacket: 16 [ 1119.108576][ T2144] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1119.124644][ T2144] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.166833][ T2144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1119.188095][ T2144] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.197770][ T2144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.227111][ T2144] usb 3-1: Product: syz [ 1119.241436][ T2144] usb 3-1: Manufacturer: syz [ 1119.253052][ T2144] usb 3-1: SerialNumber: syz [ 1119.682249][ T2144] usb 3-1: 0:2 : does not exist [ 1119.867352][T19254] siw: device registration error -23 [ 1122.606912][ T2144] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1122.645996][ T2144] usb 3-1: USB disconnect, device number 113 [ 1125.037816][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.799939][T19304] mkiss: ax0: crc mode is auto. [ 1126.837094][T19321] binder: BINDER_SET_CONTEXT_MGR already set [ 1126.843152][T19321] binder: 19315:19321 ioctl 4018620d 20004a80 returned -16 [ 1128.161863][T19325] siw: device registration error -23 [ 1128.786360][T19340] serio: Serial port ptm0 [ 1128.878424][T19340] ebt_among: src integrity fail: 30a [ 1128.947919][T19347] siw: device registration error -23 [ 1129.164248][ T5862] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1129.734155][ T5862] usb 6-1: Using ep0 maxpacket: 16 [ 1130.026215][ T5862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1130.039589][T19362] binder: 19358:19362 unknown command 0 [ 1130.044228][ T5862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1130.058210][T19362] binder: 19358:19362 ioctl c0306201 200001c0 returned -22 [ 1130.088994][T19362] binder: 19358:19362 ioctl 401870cb 200007c0 returned -22 [ 1130.110528][ T5862] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1130.120016][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.135009][ T5862] usb 6-1: config 0 descriptor?? [ 1130.570361][ T5862] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1130.582390][ T5862] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1130.590921][ T5862] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1130.599571][ T5862] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1130.839874][ T5862] microsoft 0003:045E:07DA.0027: unbalanced collection at end of report description [ 1130.853173][ T5862] microsoft 0003:045E:07DA.0027: parse failed [ 1130.860048][ T5862] microsoft 0003:045E:07DA.0027: probe with driver microsoft failed with error -22 [ 1131.323748][ T5866] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1131.346879][ T5862] usb 6-1: USB disconnect, device number 71 [ 1131.483769][T19381] mkiss: ax0: crc mode is auto. [ 1131.490597][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1131.493514][T19383] mkiss: ax1: crc mode is auto. [ 1131.502789][ T5866] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 1131.518534][ T5866] usb 3-1: config 0 has no interface number 0 [ 1131.530652][ T5866] usb 3-1: config 0 interface 70 has no altsetting 0 [ 1131.540026][ T5866] usb 3-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=76.66 [ 1131.564277][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.572584][ T5866] usb 3-1: Product: syz [ 1131.620021][ T5866] usb 3-1: Manufacturer: syz [ 1131.625478][ T5866] usb 3-1: SerialNumber: syz [ 1131.631710][ T5866] usb 3-1: config 0 descriptor?? [ 1131.885750][ T29] audit: type=1326 audit(1733971023.409:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19376 comm="syz.2.3840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe521b7ff19 code=0x0 [ 1132.045257][T19390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.185987][T19390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.068880][ T5866] cdc_acm 3-1:0.70: Zero length descriptor references [ 1135.130767][ T5866] cdc_acm 3-1:0.70: probe with driver cdc_acm failed with error -22 [ 1135.150987][ T5866] usb 3-1: USB disconnect, device number 114 [ 1136.352298][T19433] serio: Serial port ptm0 [ 1136.405125][T19433] ebt_among: src integrity fail: 30a [ 1137.224203][ T5866] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1137.384357][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1137.395762][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1137.418158][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1137.482176][ T5866] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1137.578330][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.602717][ T5866] usb 3-1: config 0 descriptor?? [ 1138.426560][T19451] mkiss: ax0: crc mode is auto. [ 1138.508854][ T5866] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1138.518168][ T5866] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1138.525919][ T5866] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1138.539476][ T5866] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1138.547442][ T5866] microsoft 0003:045E:07DA.0028: unbalanced collection at end of report description [ 1138.557423][ T5866] microsoft 0003:045E:07DA.0028: parse failed [ 1138.563693][ T5866] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 1138.972052][ T5866] usb 3-1: USB disconnect, device number 115 [ 1139.046433][T19453] [ 1139.048789][T19453] ============================= [ 1139.053611][T19453] [ BUG: Invalid wait context ] [ 1139.058435][T19453] 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Not tainted [ 1139.065538][T19453] ----------------------------- [ 1139.070357][T19453] syz.0.3861/19453 is trying to lock: [ 1139.075705][T19453] ffff88802c459bd8 (&sighand->siglock){-.-.}-{3:3}, at: __lock_task_sighand+0xc2/0x340 [ 1139.085356][T19453] other info that might help us debug this: [ 1139.091234][T19453] context-{5:5} [ 1139.094677][T19453] 4 locks held by syz.0.3861/19453: [ 1139.099857][T19453] #0: ffff88805e78a0a8 (&ctx->uring_lock){+.+.}-{4:4}, at: __x64_sys_io_uring_register+0x168/0x2b0 [ 1139.110631][T19453] #1: ffff88804e6cb928 (&acct->lock){+.+.}-{2:2}, at: io_acct_cancel_pending_work+0x2d/0x690 [ 1139.120882][T19453] #2: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1c2/0x590 [ 1139.130271][T19453] #3: ffffffff8e1bb500 (rcu_read_lock){....}-{1:3}, at: __lock_task_sighand+0x3f/0x340 [ 1139.139990][T19453] stack backtrace: [ 1139.143683][T19453] CPU: 0 UID: 0 PID: 19453 Comm: syz.0.3861 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 1139.154431][T19453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1139.164476][T19453] Call Trace: [ 1139.167744][T19453] [ 1139.170654][T19453] dump_stack_lvl+0x116/0x1f0 [ 1139.175315][T19453] __lock_acquire+0x878/0x3c40 [ 1139.180060][T19453] ? __pfx___lock_acquire+0x10/0x10 [ 1139.185240][T19453] ? __pfx___lock_acquire+0x10/0x10 [ 1139.190419][T19453] ? hlock_class+0x4e/0x130 [ 1139.194917][T19453] lock_acquire.part.0+0x11b/0x380 [ 1139.200020][T19453] ? __lock_task_sighand+0xc2/0x340 [ 1139.205203][T19453] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1139.210819][T19453] ? rcu_is_watching+0x12/0xc0 [ 1139.215565][T19453] ? trace_lock_acquire+0x14e/0x1f0 [ 1139.220744][T19453] ? trace_lock_acquire+0x14e/0x1f0 [ 1139.225922][T19453] ? __lock_task_sighand+0xc2/0x340 [ 1139.231098][T19453] ? lock_acquire+0x2f/0xb0 [ 1139.235579][T19453] ? __lock_task_sighand+0xc2/0x340 [ 1139.240753][T19453] _raw_spin_lock_irqsave+0x3a/0x60 [ 1139.245928][T19453] ? __lock_task_sighand+0xc2/0x340 [ 1139.251103][T19453] __lock_task_sighand+0xc2/0x340 [ 1139.256104][T19453] group_send_sig_info+0x290/0x300 [ 1139.261197][T19453] ? __pfx_group_send_sig_info+0x10/0x10 [ 1139.266809][T19453] ? __pfx___lock_acquire+0x10/0x10 [ 1139.271984][T19453] ? __pfx_mark_lock+0x10/0x10 [ 1139.276725][T19453] bpf_send_signal_common+0x3d3/0x530 [ 1139.282076][T19453] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 1139.287945][T19453] ? trace_lock_acquire+0x14e/0x1f0 [ 1139.293126][T19453] ? __lock_acquire+0x15a9/0x3c40 [ 1139.298126][T19453] ? bpf_trace_run2+0x1c2/0x590 [ 1139.302958][T19453] bpf_send_signal+0x1d/0x30 [ 1139.307549][T19453] bpf_prog_631417f49dd64198+0x25/0x48 [ 1139.312981][T19453] bpf_trace_run2+0x231/0x590 [ 1139.317636][T19453] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1139.322814][T19453] ? __pfx___lock_acquire+0x10/0x10 [ 1139.327994][T19453] __bpf_trace_contention_end+0xca/0x110 [ 1139.333605][T19453] ? __pfx___bpf_trace_contention_end+0x10/0x10 [ 1139.339825][T19453] ? hlock_class+0x4e/0x130 [ 1139.344321][T19453] ? __lock_acquire+0x15a9/0x3c40 [ 1139.349342][T19453] trace_contention_end.constprop.0+0xf0/0x170 [ 1139.355481][T19453] __pv_queued_spin_lock_slowpath+0x27e/0xc90 [ 1139.361548][T19453] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1139.368131][T19453] ? lock_acquire.part.0+0x11b/0x380 [ 1139.373393][T19453] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1139.379026][T19453] do_raw_spin_lock+0x210/0x2c0 [ 1139.383855][T19453] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1139.389222][T19453] ? lock_acquire+0x2f/0xb0 [ 1139.393705][T19453] ? io_acct_cancel_pending_work+0x2d/0x690 [ 1139.399580][T19453] io_acct_cancel_pending_work+0x2d/0x690 [ 1139.405283][T19453] ? bpf_bprintf_prepare+0x5ea/0x1490 [ 1139.410639][T19453] io_wq_cancel_cb+0xda/0x390 [ 1139.415315][T19453] ? __pfx_io_wq_cancel_cb+0x10/0x10 [ 1139.420581][T19453] ? __pfx_io_cancel_cb+0x10/0x10 [ 1139.425583][T19453] ? __fget_files+0x1fc/0x3a0 [ 1139.430238][T19453] io_async_cancel_one+0xa0/0x100 [ 1139.435254][T19453] io_try_cancel+0xf2/0x280 [ 1139.439745][T19453] __io_async_cancel+0xac/0x420 [ 1139.444587][T19453] __io_sync_cancel+0x1a4/0x220 [ 1139.449428][T19453] io_sync_cancel+0x5d5/0x6c0 [ 1139.454090][T19453] ? __pfx_io_sync_cancel+0x10/0x10 [ 1139.459272][T19453] ? bpf_trace_run2+0x2a6/0x590 [ 1139.464105][T19453] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1139.469303][T19453] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1139.475360][T19453] ? __mutex_trylock_common+0xea/0x250 [ 1139.480798][T19453] __io_uring_register+0x3a6/0x2290 [ 1139.485975][T19453] ? trace_contention_end+0xee/0x140 [ 1139.491256][T19453] ? __pfx___io_uring_register+0x10/0x10 [ 1139.496864][T19453] ? __mutex_lock+0x1cc/0xa60 [ 1139.501522][T19453] ? __fget_files+0x1fc/0x3a0 [ 1139.506189][T19453] ? __x64_sys_io_uring_register+0x168/0x2b0 [ 1139.512176][T19453] ? __pfx_lock_release+0x10/0x10 [ 1139.517214][T19453] ? __pfx___mutex_lock+0x10/0x10 [ 1139.522220][T19453] ? __fget_files+0x40/0x3a0 [ 1139.526789][T19453] ? __fget_files+0x206/0x3a0 [ 1139.531445][T19453] __x64_sys_io_uring_register+0x17a/0x2b0 [ 1139.537237][T19453] do_syscall_64+0xcd/0x250 [ 1139.541720][T19453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.547593][T19453] RIP: 0033:0x7f866597ff19 [ 1139.551999][T19453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.571597][T19453] RSP: 002b:00007f86666f3058 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1139.579983][T19453] RAX: ffffffffffffffda RBX: 00007f8665b45fa0 RCX: 00007f866597ff19 [ 1139.587932][T19453] RDX: 0000000020000100 RSI: 0000000000000018 RDI: 0000000000000009 [ 1139.595890][T19453] RBP: 00007f86659f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 1139.603858][T19453] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1139.611822][T19453] R13: 0000000000000000 R14: 00007f8665b45fa0 R15: 00007ffe6afb3558 [ 1139.619798][T19453] [ 1139.622888][ C0] vkms_vblank_simulate: vblank timer overrun