syzkaller login: [ 272.706193][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 272.741799][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 272.781443][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:38502' (ECDSA) to the list of known hosts. 1970/01/01 00:05:45 fuzzer started 1970/01/01 00:05:59 dialing manager at localhost:40441 [ 365.183718][ T2032] cgroup: Unknown subsys name 'net' [ 366.263486][ T2032] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:06:05 syscalls: 2893 1970/01/01 00:06:05 code coverage: enabled 1970/01/01 00:06:05 comparison tracing: enabled 1970/01/01 00:06:05 extra coverage: enabled 1970/01/01 00:06:05 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:06:05 setuid sandbox: enabled 1970/01/01 00:06:05 namespace sandbox: enabled 1970/01/01 00:06:05 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:06:05 fault injection: enabled 1970/01/01 00:06:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:06:05 net packet injection: enabled 1970/01/01 00:06:05 net device setup: enabled 1970/01/01 00:06:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:06:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:06:05 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:06:05 USB emulation: enabled 1970/01/01 00:06:05 hci packet injection: /dev/vhci does not exist 1970/01/01 00:06:05 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:06:05 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:06:06 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:10 fetching corpus: 50, signal 28372/31786 (executing program) 1970/01/01 00:06:13 fetching corpus: 100, signal 42947/47587 (executing program) 1970/01/01 00:06:17 fetching corpus: 150, signal 52860/58637 (executing program) 1970/01/01 00:06:20 fetching corpus: 200, signal 59708/66577 (executing program) 1970/01/01 00:06:23 fetching corpus: 250, signal 65788/73672 (executing program) 1970/01/01 00:06:25 fetching corpus: 298, signal 70868/79732 (executing program) 1970/01/01 00:06:27 fetching corpus: 348, signal 74357/84264 (executing program) 1970/01/01 00:06:30 fetching corpus: 398, signal 78912/89631 (executing program) 1970/01/01 00:06:33 fetching corpus: 447, signal 82903/94433 (executing program) 1970/01/01 00:06:36 fetching corpus: 496, signal 86782/99059 (executing program) 1970/01/01 00:06:38 fetching corpus: 545, signal 90837/103730 (executing program) 1970/01/01 00:06:41 fetching corpus: 593, signal 93346/106924 (executing program) 1970/01/01 00:06:44 fetching corpus: 643, signal 95473/109818 (executing program) 1970/01/01 00:06:47 fetching corpus: 693, signal 97654/112684 (executing program) 1970/01/01 00:06:50 fetching corpus: 742, signal 100228/115801 (executing program) 1970/01/01 00:06:53 fetching corpus: 791, signal 102294/118514 (executing program) 1970/01/01 00:06:55 fetching corpus: 840, signal 103898/120795 (executing program) 1970/01/01 00:06:58 fetching corpus: 890, signal 105286/122916 (executing program) 1970/01/01 00:07:01 fetching corpus: 940, signal 107134/125270 (executing program) 1970/01/01 00:07:05 fetching corpus: 988, signal 110510/128875 (executing program) 1970/01/01 00:07:07 fetching corpus: 1038, signal 112508/131309 (executing program) 1970/01/01 00:07:10 fetching corpus: 1088, signal 114475/133659 (executing program) 1970/01/01 00:07:13 fetching corpus: 1138, signal 116466/135985 (executing program) 1970/01/01 00:07:15 fetching corpus: 1188, signal 119379/138972 (executing program) 1970/01/01 00:07:17 fetching corpus: 1238, signal 120887/140855 (executing program) 1970/01/01 00:07:19 fetching corpus: 1288, signal 123421/143486 (executing program) 1970/01/01 00:07:21 fetching corpus: 1338, signal 125118/145457 (executing program) 1970/01/01 00:07:23 fetching corpus: 1388, signal 126899/147439 (executing program) 1970/01/01 00:07:26 fetching corpus: 1438, signal 128955/149611 (executing program) 1970/01/01 00:07:29 fetching corpus: 1487, signal 130567/151455 (executing program) 1970/01/01 00:07:31 fetching corpus: 1537, signal 131908/153015 (executing program) 1970/01/01 00:07:33 fetching corpus: 1587, signal 133100/154478 (executing program) 1970/01/01 00:07:34 fetching corpus: 1636, signal 134612/156096 (executing program) 1970/01/01 00:07:37 fetching corpus: 1686, signal 136141/157739 (executing program) 1970/01/01 00:07:39 fetching corpus: 1735, signal 137367/159133 (executing program) 1970/01/01 00:07:43 fetching corpus: 1783, signal 138548/160458 (executing program) 1970/01/01 00:07:46 fetching corpus: 1833, signal 139456/161614 (executing program) 1970/01/01 00:07:49 fetching corpus: 1883, signal 141170/163202 (executing program) 1970/01/01 00:07:52 fetching corpus: 1933, signal 142089/164323 (executing program) 1970/01/01 00:07:54 fetching corpus: 1983, signal 143149/165503 (executing program) 1970/01/01 00:07:56 fetching corpus: 2033, signal 144137/166598 (executing program) 1970/01/01 00:07:59 fetching corpus: 2083, signal 145054/167685 (executing program) 1970/01/01 00:08:01 fetching corpus: 2132, signal 146228/168899 (executing program) 1970/01/01 00:08:03 fetching corpus: 2181, signal 147433/170056 (executing program) 1970/01/01 00:08:06 fetching corpus: 2231, signal 148587/171154 (executing program) 1970/01/01 00:08:08 fetching corpus: 2280, signal 149716/172295 (executing program) 1970/01/01 00:08:11 fetching corpus: 2328, signal 150805/173325 (executing program) 1970/01/01 00:08:13 fetching corpus: 2378, signal 151910/174374 (executing program) 1970/01/01 00:08:16 fetching corpus: 2428, signal 152991/175365 (executing program) 1970/01/01 00:08:18 fetching corpus: 2478, signal 153925/176249 (executing program) 1970/01/01 00:08:21 fetching corpus: 2528, signal 156136/177718 (executing program) 1970/01/01 00:08:24 fetching corpus: 2577, signal 156943/178494 (executing program) 1970/01/01 00:08:27 fetching corpus: 2626, signal 158126/179462 (executing program) 1970/01/01 00:08:29 fetching corpus: 2675, signal 158889/180191 (executing program) 1970/01/01 00:08:32 fetching corpus: 2724, signal 159661/180911 (executing program) 1970/01/01 00:08:34 fetching corpus: 2774, signal 160373/181624 (executing program) 1970/01/01 00:08:37 fetching corpus: 2824, signal 161257/182385 (executing program) 1970/01/01 00:08:39 fetching corpus: 2874, signal 162203/183120 (executing program) 1970/01/01 00:08:41 fetching corpus: 2924, signal 162852/183752 (executing program) 1970/01/01 00:08:43 fetching corpus: 2974, signal 163451/184305 (executing program) 1970/01/01 00:08:46 fetching corpus: 3023, signal 164211/184931 (executing program) 1970/01/01 00:08:48 fetching corpus: 3073, signal 165055/185548 (executing program) 1970/01/01 00:08:51 fetching corpus: 3123, signal 165811/186163 (executing program) 1970/01/01 00:08:53 fetching corpus: 3173, signal 166464/186699 (executing program) 1970/01/01 00:08:56 fetching corpus: 3223, signal 167160/187258 (executing program) 1970/01/01 00:08:58 fetching corpus: 3273, signal 168013/187860 (executing program) 1970/01/01 00:09:00 fetching corpus: 3323, signal 168992/188467 (executing program) 1970/01/01 00:09:03 fetching corpus: 3373, signal 169803/189029 (executing program) 1970/01/01 00:09:06 fetching corpus: 3422, signal 170545/189534 (executing program) 1970/01/01 00:09:08 fetching corpus: 3472, signal 171793/190187 (executing program) 1970/01/01 00:09:11 fetching corpus: 3522, signal 172409/190613 (executing program) 1970/01/01 00:09:13 fetching corpus: 3571, signal 173557/191151 (executing program) 1970/01/01 00:09:15 fetching corpus: 3621, signal 174222/191562 (executing program) 1970/01/01 00:09:17 fetching corpus: 3671, signal 175039/191989 (executing program) 1970/01/01 00:09:20 fetching corpus: 3721, signal 175652/192411 (executing program) 1970/01/01 00:09:22 fetching corpus: 3771, signal 176413/192782 (executing program) 1970/01/01 00:09:24 fetching corpus: 3820, signal 177019/193103 (executing program) 1970/01/01 00:09:27 fetching corpus: 3870, signal 177665/193482 (executing program) 1970/01/01 00:09:29 fetching corpus: 3919, signal 178136/193764 (executing program) 1970/01/01 00:09:32 fetching corpus: 3969, signal 179028/194107 (executing program) 1970/01/01 00:09:33 fetching corpus: 4019, signal 179699/194415 (executing program) 1970/01/01 00:09:35 fetching corpus: 4069, signal 180243/194675 (executing program) 1970/01/01 00:09:38 fetching corpus: 4119, signal 181025/194970 (executing program) 1970/01/01 00:09:42 fetching corpus: 4168, signal 181682/195217 (executing program) 1970/01/01 00:09:44 fetching corpus: 4216, signal 182447/195495 (executing program) 1970/01/01 00:09:46 fetching corpus: 4266, signal 183431/195812 (executing program) 1970/01/01 00:09:49 fetching corpus: 4316, signal 183971/195986 (executing program) 1970/01/01 00:09:52 fetching corpus: 4365, signal 184519/196173 (executing program) 1970/01/01 00:09:55 fetching corpus: 4414, signal 185764/196417 (executing program) 1970/01/01 00:09:57 fetching corpus: 4464, signal 186174/196576 (executing program) 1970/01/01 00:10:01 fetching corpus: 4513, signal 186764/196747 (executing program) 1970/01/01 00:10:04 fetching corpus: 4563, signal 187580/196939 (executing program) 1970/01/01 00:10:06 fetching corpus: 4613, signal 188368/197085 (executing program) 1970/01/01 00:10:08 fetching corpus: 4662, signal 188873/197216 (executing program) 1970/01/01 00:10:11 fetching corpus: 4711, signal 189533/197336 (executing program) 1970/01/01 00:10:13 fetching corpus: 4760, signal 190097/197444 (executing program) 1970/01/01 00:10:15 fetching corpus: 4810, signal 190576/197532 (executing program) 1970/01/01 00:10:18 fetching corpus: 4860, signal 191503/197584 (executing program) 1970/01/01 00:10:19 fetching corpus: 4909, signal 192059/197590 (executing program) 1970/01/01 00:10:22 fetching corpus: 4959, signal 192769/197590 (executing program) 1970/01/01 00:10:24 fetching corpus: 5009, signal 193362/197590 (executing program) 1970/01/01 00:10:26 fetching corpus: 5058, signal 194338/197597 (executing program) 1970/01/01 00:10:29 fetching corpus: 5108, signal 194844/197597 (executing program) 1970/01/01 00:10:31 fetching corpus: 5158, signal 195616/197638 (executing program) 1970/01/01 00:10:33 fetching corpus: 5202, signal 196029/197638 (executing program) 1970/01/01 00:10:33 fetching corpus: 5202, signal 196029/197638 (executing program) 1970/01/01 00:12:21 starting 2 fuzzer processes 00:12:21 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x41) 00:12:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 772.523296][ T2041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.740162][ T2041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.522891][ T2040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.625034][ T2040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.283816][ T2041] device hsr_slave_0 entered promiscuous mode [ 788.413518][ T2041] device hsr_slave_1 entered promiscuous mode [ 792.084000][ T2040] device hsr_slave_0 entered promiscuous mode [ 792.133331][ T2040] device hsr_slave_1 entered promiscuous mode [ 792.183222][ T2040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.189030][ T2040] Cannot create hsr debugfs directory [ 798.355980][ T2041] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.514611][ T2041] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 798.694630][ T2041] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 798.770755][ T2041] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 799.950667][ T2040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 800.103951][ T2040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 800.345827][ T2040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 800.590776][ T2040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 810.514229][ T2040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.542691][ T2041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.901316][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 811.967114][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.193454][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.254809][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 818.626526][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 818.703356][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 818.922619][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 818.977026][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 819.235626][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 819.332742][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 819.356642][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 820.060209][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 820.140092][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 820.154278][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 820.173994][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 820.631470][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 820.646406][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 820.664173][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 821.335752][ T2040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.422242][ T2040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 821.683078][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 821.710974][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 821.975847][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 822.055534][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 822.357029][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 822.491073][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 822.667412][ T2041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 827.729025][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 827.733724][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 828.306928][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 828.313717][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 841.604201][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.691570][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.892158][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.961913][ T2035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 849.521441][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 849.566769][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 849.757075][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 849.822601][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 849.844806][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 849.863589][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 849.970260][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 850.026629][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 850.051514][ T2040] device veth0_vlan entered promiscuous mode [ 850.185563][ T2041] device veth0_vlan entered promiscuous mode [ 850.577243][ T2040] device veth1_vlan entered promiscuous mode [ 850.785362][ T2041] device veth1_vlan entered promiscuous mode [ 851.020246][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 852.470199][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.555708][ T2386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 852.929643][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 852.966437][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 853.043830][ T2040] device veth0_macvtap entered promiscuous mode [ 853.292106][ T2041] device veth0_macvtap entered promiscuous mode [ 853.436913][ T2040] device veth1_macvtap entered promiscuous mode [ 853.684924][ T2041] device veth1_macvtap entered promiscuous mode [ 854.014204][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 854.060705][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 854.086914][ T2034] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 854.915253][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 854.942546][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 854.992347][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 855.035002][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 855.563897][ T2040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.621751][ T2040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.624019][ T2040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.625864][ T2040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.935669][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.035918][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.091459][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 856.127051][ T82] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 856.242952][ T2041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.246935][ T2041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.265448][ T2041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.267068][ T2041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:14:25 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x41) 00:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:31 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x41) 00:14:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:37 executing program 0: prctl$PR_SET_PDEATHSIG(0x1, 0x41) 00:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:14:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x18, r1, 0xfb946bc7bfab935f, 0x0, 0x0, {0x2}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 00:15:01 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) lseek(r0, 0x4, 0x1) 00:15:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 00:15:04 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) lseek(r0, 0x4, 0x1) 00:15:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 00:15:07 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) lseek(r0, 0x4, 0x1) 00:15:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 00:15:11 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) lseek(r0, 0x4, 0x1) 00:15:12 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2}, 0x8) 00:15:15 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:15:15 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 920.090544][ T2782] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:15:21 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:15:22 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 925.102965][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:15:25 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 928.964015][ T2800] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:15:29 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:15:30 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 933.322838][ T2802] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:15:38 executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:15:40 executing program 1: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:15:46 executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:15:48 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 953.375832][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:15:54 executing program 0: socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:15:54 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 958.071371][ T2838] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:15:59 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001940)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 962.620542][ T2847] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 00:16:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) 00:16:05 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) fallocate(r0, 0x40, 0x0, 0x101) 00:16:06 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) 00:16:08 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) fallocate(r0, 0x40, 0x0, 0x101) 00:16:09 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) 00:16:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) fallocate(r0, 0x40, 0x0, 0x101) 00:16:12 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) 00:16:13 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/ldiscs\x00', 0x0, 0x0) fallocate(r0, 0x40, 0x0, 0x101) 00:16:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) 00:16:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xab80000000000000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x44}}, 0x40010) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 979.731783][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 979.735610][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 979.737045][ T2868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:16:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) 00:16:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xab80000000000000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x44}}, 0x40010) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:16:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "80733d22f46e10a02943b6a8715ace6dc8a9203a5979f2893fb0357fcb736926452e80a6d8a6938fb92054f8739a8b31dc352f3c9dc3345eb0d0ac87eb4c8df7"}, 0x48, r0) [ 987.635880][ T2875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 987.644353][ T2875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 987.646350][ T2875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:16:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xab80000000000000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x44}}, 0x40010) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:16:31 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/133, 0x2e, 0x85, 0x1}, 0x20) [ 996.735553][ T2883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 996.773797][ T2883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 996.776476][ T2883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:16:36 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/133, 0x2e, 0x85, 0x1}, 0x20) 00:16:38 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xab80000000000000}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}]}]}, 0x44}}, 0x40010) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:16:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/133, 0x2e, 0x85, 0x1}, 0x20) [ 1002.381725][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1002.383429][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1002.384828][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:16:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/133, 0x2e, 0x85, 0x1}, 0x20) 00:16:44 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) 00:16:46 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) 00:16:47 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1010.293207][ T2902] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:16:50 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) 00:16:50 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1012.932373][ T2905] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:16:53 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:53 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000080)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) [ 1016.092761][ T2909] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:16:55 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:57 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1019.399117][ T2912] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1020.763026][ T2914] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:16:59 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:17:00 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1022.443658][ T2916] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:17:02 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1023.925460][ T2918] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:17:03 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1025.730648][ T2920] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1026.520992][ T2922] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:17:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000240), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:17:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 1028.853537][ T2924] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. 00:17:10 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 00:17:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 00:17:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1036e1, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) 00:17:21 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:25 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:27 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:30 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:34 executing program 0: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = memfd_create(&(0x7f00000094c0)=']V-#h{\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 00:17:37 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f75045a2a7bbeb7f37a2a44618b8bc258b398264180551b9f6cf188b52f5990000005d32824a8e73b69e9bce23175030405d8d4d9900"}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x20008082, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x336, 0x3, 0x40, 0xcc, 0x0, @broadcast}, 0x10) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) listen(r0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040)=0x1ff, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) accept4(r2, &(0x7f0000000200)=@alg, &(0x7f0000000040)=0x80, 0xb4ff7624991946da) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={r3, 0x0, &(0x7f0000000640)=""/193}, 0x20) 00:17:38 executing program 0: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = memfd_create(&(0x7f00000094c0)=']V-#h{\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 00:17:41 executing program 0: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = memfd_create(&(0x7f00000094c0)=']V-#h{\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 00:17:43 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) 00:17:46 executing program 0: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = memfd_create(&(0x7f00000094c0)=']V-#h{\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001680)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2}]) 00:17:46 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) 00:17:50 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) 00:17:50 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) 00:17:53 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) 00:17:54 executing program 1: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) [ 1076.888149][ C1] hrtimer: interrupt took 1837600 ns 00:17:56 executing program 0: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x4, "8c9ba27f9fbf0f07f1edcd3b57ec6a94a7c42dfa6f8949b84c79c8e9e2e98b66"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "65e9d63f0315439cbedae467ecfc78e74439fd8013035338eaedff0e119d4796"}) 00:17:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) close(r0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 00:17:58 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:17:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:02 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:18:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:05 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:18:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:08 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:18:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "071731ab0ad55c191f714e3f04afeb2a7e027d"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "5a9d423106000000e79e25828a03000000d74f"}) 00:18:24 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:18:29 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:18:29 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) [ 1114.025955][ T3020] loop0: detected capacity change from 0 to 2048 00:18:34 executing program 1: r0 = syz_io_uring_setup(0x7345, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) [ 1116.783189][ T3020] EXT4-fs: failed to create workqueue [ 1116.784554][ T3020] EXT4-fs (loop0): mount failed 00:18:38 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) [ 1123.134643][ T3033] loop0: detected capacity change from 0 to 2048 00:18:42 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) [ 1124.880708][ T3033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1125.255000][ T3042] loop1: detected capacity change from 0 to 2048 [ 1126.623535][ T3042] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 00:18:45 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) 00:18:47 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) [ 1130.892104][ T3057] loop0: detected capacity change from 0 to 2048 [ 1132.340449][ T3057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1132.637082][ T3064] loop1: detected capacity change from 0 to 2048 00:18:53 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) [ 1135.013775][ T3064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 00:18:55 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x2080}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c653000", 0x3a, 0x8000}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)=ANY=[], 0x0) syz_io_uring_setup(0x27be, &(0x7f0000000300)={0x0, 0xb137}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f00000003c0)) renameat2(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00', 0x0) [ 1138.224801][ T3075] loop0: detected capacity change from 0 to 2048 [ 1139.315391][ T3075] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1140.425547][ T3085] loop1: detected capacity change from 0 to 2048 [ 1141.966090][ T3085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. 00:19:02 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1145.184080][ T2755] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1145.592541][ T2755] usb 1-1: Using ep0 maxpacket: 8 [ 1146.043304][ T2755] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1146.075768][ T2755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.544065][ T2755] usb 1-1: config 0 descriptor?? [ 1147.380500][ T2755] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input0 [ 1147.436806][ T3095] UDC core: couldn't find an available UDC or it's busy: -16 [ 1147.469287][ T3095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1148.083917][ T2755] usb 1-1: USB disconnect, device number 2 00:19:09 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:19:09 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1152.070538][ T2732] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1152.339877][ T2732] usb 2-1: Using ep0 maxpacket: 8 [ 1152.574761][ T2732] usb 2-1: config 0 has no interfaces? [ 1152.673559][ T2732] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1152.675277][ T2732] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1152.699503][ T2732] usb 2-1: Product: syz [ 1152.815607][ T2732] usb 2-1: config 0 descriptor?? [ 1153.461588][ T2755] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1153.743582][ T82] usb 2-1: USB disconnect, device number 2 [ 1153.830505][ T2755] usb 1-1: Using ep0 maxpacket: 8 [ 1154.062852][ T2755] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1154.067025][ T2755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.305990][ T2755] usb 1-1: config 0 descriptor?? [ 1154.680494][ T2755] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input1 [ 1155.516333][ T3118] UDC core: couldn't find an available UDC or it's busy: -16 [ 1155.520722][ T3118] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1155.820811][ T2734] usb 1-1: USB disconnect, device number 3 00:19:16 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:19:18 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1160.070717][ T2732] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1160.379857][ T2732] usb 2-1: Using ep0 maxpacket: 8 [ 1160.702200][ T2732] usb 2-1: config 0 has no interfaces? [ 1160.803977][ T2732] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1160.805503][ T2732] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1160.846977][ T2732] usb 2-1: Product: syz [ 1160.977207][ T2732] usb 2-1: config 0 descriptor?? [ 1161.793177][ T2732] usb 2-1: USB disconnect, device number 3 [ 1161.843533][ T82] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1162.101576][ T82] usb 1-1: Using ep0 maxpacket: 8 [ 1162.293959][ T82] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1162.295813][ T82] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.473252][ T82] usb 1-1: config 0 descriptor?? [ 1162.929949][ T82] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input2 [ 1163.226676][ T3146] UDC core: couldn't find an available UDC or it's busy: -16 [ 1163.264210][ T3146] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.646829][ T2732] usb 1-1: USB disconnect, device number 4 00:19:24 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:19:25 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1168.931021][ T2734] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1169.240054][ T2734] usb 2-1: Using ep0 maxpacket: 8 [ 1169.362131][ T2734] usb 2-1: config 0 has no interfaces? [ 1169.450955][ T82] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1169.503157][ T2734] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1169.504874][ T2734] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1169.507137][ T2734] usb 2-1: Product: syz [ 1169.652139][ T2734] usb 2-1: config 0 descriptor?? [ 1169.750437][ T82] usb 1-1: Using ep0 maxpacket: 8 [ 1169.936704][ T82] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1169.941371][ T82] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.115985][ T82] usb 1-1: config 0 descriptor?? [ 1170.540579][ T82] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 1170.592999][ T2732] usb 2-1: USB disconnect, device number 4 [ 1170.717196][ T3170] UDC core: couldn't find an available UDC or it's busy: -16 [ 1170.779537][ T3170] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1171.126627][ T5] usb 1-1: USB disconnect, device number 5 00:19:33 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:19:35 executing program 0: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1177.721426][ T2104] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1178.025836][ T2104] usb 2-1: Using ep0 maxpacket: 8 [ 1178.110672][ T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1178.203169][ T2104] usb 2-1: config 0 has no interfaces? [ 1178.363510][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 1178.524659][ T5] usb 1-1: config 0 has no interfaces? [ 1178.563536][ T2104] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1178.565384][ T2104] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1178.566895][ T2104] usb 2-1: Product: syz [ 1178.612524][ T5] usb 1-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1178.614222][ T5] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1178.616415][ T5] usb 1-1: Product: syz [ 1178.864809][ T2104] usb 2-1: config 0 descriptor?? [ 1179.075089][ T5] usb 1-1: config 0 descriptor?? [ 1179.973114][ T82] usb 2-1: USB disconnect, device number 5 [ 1180.159615][ T5] usb 1-1: USB disconnect, device number 6 00:19:42 executing program 0: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:19:46 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1187.852536][ T82] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1188.141250][ T82] usb 1-1: Using ep0 maxpacket: 8 [ 1188.292705][ T82] usb 1-1: config 0 has no interfaces? [ 1188.453191][ T82] usb 1-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1188.455061][ T82] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1188.456448][ T82] usb 1-1: Product: syz [ 1188.612818][ T82] usb 1-1: config 0 descriptor?? [ 1189.179836][ T2732] usb 1-1: USB disconnect, device number 7 [ 1189.509832][ T5] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1189.780199][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 1189.904337][ T5] usb 2-1: config 0 has no interfaces? [ 1189.992319][ T5] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1189.994586][ T5] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1189.995927][ T5] usb 2-1: Product: syz [ 1190.154072][ T5] usb 2-1: config 0 descriptor?? [ 1190.641129][ T5] usb 2-1: USB disconnect, device number 6 00:19:52 executing program 0: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1195.483579][ T82] usb 1-1: new high-speed USB device number 8 using dummy_hcd 00:19:54 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1195.770660][ T82] usb 1-1: Using ep0 maxpacket: 8 [ 1195.926587][ T82] usb 1-1: config 0 has no interfaces? [ 1196.071629][ T82] usb 1-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1196.072917][ T82] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1196.073855][ T82] usb 1-1: Product: syz [ 1196.251328][ T82] usb 1-1: config 0 descriptor?? [ 1197.194507][ T5] usb 1-1: USB disconnect, device number 8 [ 1197.781255][ T2755] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1198.152235][ T2755] usb 2-1: Using ep0 maxpacket: 8 [ 1198.335744][ T2755] usb 2-1: config 0 has no interfaces? [ 1198.483135][ T2755] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1198.485114][ T2755] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1198.486674][ T2755] usb 2-1: Product: syz [ 1198.746440][ T2755] usb 2-1: config 0 descriptor?? [ 1199.592712][ T2755] usb 2-1: USB disconnect, device number 7 00:20:00 executing program 0: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:20:02 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1205.090613][ T82] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1205.429710][ T82] usb 1-1: Using ep0 maxpacket: 8 [ 1205.573117][ T82] usb 1-1: config 0 has no interfaces? [ 1205.651978][ T82] usb 1-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1205.653310][ T82] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1205.654366][ T82] usb 1-1: Product: syz [ 1205.765668][ T82] usb 1-1: config 0 descriptor?? [ 1206.910609][ T2104] usb 1-1: USB disconnect, device number 9 [ 1207.000988][ T2755] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1207.291932][ T2755] usb 2-1: Using ep0 maxpacket: 8 [ 1207.489849][ T2755] usb 2-1: config 0 has no interfaces? [ 1207.850545][ T2755] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1207.852548][ T2755] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1207.854883][ T2755] usb 2-1: Product: syz [ 1208.087233][ T2755] usb 2-1: config 0 descriptor?? [ 1208.980150][ T2104] usb 2-1: USB disconnect, device number 8 00:20:09 executing program 0: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:20:12 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1214.580129][ T2104] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1214.850499][ T2104] usb 1-1: Using ep0 maxpacket: 8 [ 1215.012443][ T2104] usb 1-1: config 0 has no interfaces? [ 1215.103169][ T2104] usb 1-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1215.104409][ T2104] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1215.105443][ T2104] usb 1-1: Product: syz [ 1215.242505][ T2104] usb 1-1: config 0 descriptor?? [ 1216.001873][ T82] usb 1-1: USB disconnect, device number 10 [ 1216.590410][ T2734] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1216.990647][ T2734] usb 2-1: Using ep0 maxpacket: 8 [ 1217.141905][ T2734] usb 2-1: config 0 has no interfaces? [ 1217.222773][ T2734] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1217.224752][ T2734] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1217.226152][ T2734] usb 2-1: Product: syz [ 1217.426151][ T2734] usb 2-1: config 0 descriptor?? [ 1218.591982][ T2104] usb 2-1: USB disconnect, device number 9 00:20:18 executing program 0: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:20:21 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) [ 1223.451953][ T2732] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1223.751806][ T2732] usb 1-1: Using ep0 maxpacket: 8 [ 1223.903259][ T2732] usb 1-1: config 0 has no interfaces? [ 1224.006992][ T2732] usb 1-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1224.010098][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1224.011609][ T2732] usb 1-1: Product: syz [ 1224.196295][ T2732] usb 1-1: config 0 descriptor?? [ 1224.974474][ T2732] usb 1-1: USB disconnect, device number 11 [ 1227.100885][ T2732] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1227.400487][ T2732] usb 2-1: Using ep0 maxpacket: 8 [ 1227.571627][ T2732] usb 2-1: config 0 has no interfaces? [ 1227.672261][ T2732] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1227.676569][ T2732] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1227.709263][ T2732] usb 2-1: Product: syz [ 1227.872095][ T2732] usb 2-1: config 0 descriptor?? [ 1229.455530][ T2732] usb 2-1: USB disconnect, device number 10 00:20:31 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1235.562247][ T2732] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1235.881779][ T2732] usb 1-1: Using ep0 maxpacket: 8 [ 1236.219325][ T2732] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1236.221686][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.565852][ T2732] usb 1-1: config 0 descriptor?? [ 1237.353066][ T2732] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input4 [ 1237.521263][ T3290] UDC core: couldn't find an available UDC or it's busy: -16 [ 1237.561863][ T3290] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1238.513621][ T2732] usb 1-1: USB disconnect, device number 12 00:20:38 executing program 1: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, &(0x7f00000009c0)) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x6c, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100002cd85c082d1e6c001a46002000010902"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000080)={&(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3}) flistxattr(0xffffffffffffffff, 0x0, 0x0) 00:20:41 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1243.181377][ T2732] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1243.471024][ T2732] usb 2-1: Using ep0 maxpacket: 8 [ 1243.642059][ T2732] usb 2-1: config 0 has no interfaces? [ 1243.736822][ T2732] usb 2-1: New USB device found, idVendor=1e2d, idProduct=006c, bcdDevice=46.1a [ 1243.748526][ T2732] usb 2-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 1243.750093][ T2732] usb 2-1: Product: syz [ 1244.005483][ T2732] usb 2-1: config 0 descriptor?? [ 1245.253591][ T2732] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1245.550547][ T2732] usb 1-1: Using ep0 maxpacket: 8 [ 1245.732241][ T2732] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1245.734677][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.934993][ T2734] usb 2-1: USB disconnect, device number 11 [ 1245.990404][ T2732] usb 1-1: config 0 descriptor?? [ 1246.480079][ T2732] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 1246.746615][ T3314] UDC core: couldn't find an available UDC or it's busy: -16 [ 1246.764717][ T3314] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1247.766354][ T2104] usb 1-1: USB disconnect, device number 13 00:20:50 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) 00:20:50 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc3, 0xef, 0x4d, 0x8, 0x5ac, 0x273, 0xf388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x68, 0x2}}]}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) [ 1253.340690][ T2732] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1253.612453][ T2732] usb 2-1: Using ep0 maxpacket: 8 [ 1253.785173][ T2732] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1253.787155][ T2732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.997395][ T2732] usb 2-1: config 0 descriptor?? [ 1254.311795][ T2732] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 1254.754750][ T3334] UDC core: couldn't find an available UDC or it's busy: -16 [ 1254.769769][ T3334] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1255.180873][ T2732] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1255.461243][ T2732] usb 1-1: Using ep0 maxpacket: 8 [ 1255.602502][ T82] usb 2-1: USB disconnect, device number 12 [ 1255.644182][ T2732] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=f3.88 [ 1255.646171][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.895106][ T2732] usb 1-1: config 0 descriptor?? [ 1256.331445][ T2732] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1256.333598][ T2732] CPU: 0 PID: 2732 Comm: kworker/0:4 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1256.335282][ T2732] Hardware name: riscv-virtio,qemu (DT) [ 1256.337220][ T2732] Workqueue: usb_hub_wq hub_event [ 1256.340440][ T2732] Call Trace: [ 1256.341467][ T2732] [] dump_backtrace+0x2e/0x3c [ 1256.342950][ T2732] [] show_stack+0x34/0x40 [ 1256.344214][ T2732] [] dump_stack_lvl+0xe4/0x150 [ 1256.345579][ T2732] [] dump_stack+0x1c/0x24 [ 1256.346907][ T2732] [] panic+0x24a/0x634 [ 1256.348669][ T2732] [] schedule+0x0/0x14c [ 1256.349950][ T2732] [] preempt_schedule_notrace+0x9c/0x19a [ 1256.351461][ T2732] [] trace_lock_acquire+0xd6/0x1fc [ 1256.352805][ T2732] [] lock_acquire+0x28/0x6a [ 1256.354023][ T2732] [] fs_reclaim_acquire+0xb4/0xda [ 1256.355335][ T2732] [] __kmalloc_track_caller+0x5c/0x30e [ 1256.356705][ T2732] [] kvasprintf+0x4e/0xc0 [ 1256.358427][ T2732] [] kvasprintf_const+0x6e/0xc6 [ 1256.360509][ T2732] [] kobject_set_name_vargs+0x50/0xf8 [ 1256.361855][ T2732] [] dev_set_name+0xa2/0xd0 [ 1256.363189][ T2732] [] input_allocate_device+0x160/0x184 [ 1256.364476][ T2732] [] bcm5974_probe+0x130/0xc7a [ 1256.365767][ T2732] [] usb_probe_interface+0x21c/0x57a [ 1256.367090][ T2732] [] really_probe+0x1a6/0x89e [ 1256.368746][ T2732] [] __driver_probe_device+0x24a/0x2d4 [ 1256.370391][ T2732] [] driver_probe_device+0x60/0x1a4 [ 1256.371706][ T2732] [] __device_attach_driver+0x17c/0x224 [ 1256.373043][ T2732] [] bus_for_each_drv+0x132/0x1a6 [ 1256.374423][ T2732] [] __device_attach+0x1e0/0x372 [ 1256.375702][ T2732] [] device_initial_probe+0x1c/0x26 [ 1256.376954][ T2732] [] bus_probe_device+0x144/0x154 [ 1256.379010][ T2732] [] device_add+0x91e/0x129e [ 1256.380360][ T2732] [] usb_set_configuration+0xafe/0xf6a [ 1256.381680][ T2732] [] usb_generic_driver_probe+0xb2/0x122 [ 1256.384022][ T2732] [] usb_probe_device+0xa8/0x204 [ 1256.385345][ T2732] [] really_probe+0x1a6/0x89e [ 1256.386632][ T2732] [] __driver_probe_device+0x24a/0x2d4 [ 1256.388791][ T2732] [] driver_probe_device+0x60/0x1a4 [ 1256.390295][ T2732] [] __device_attach_driver+0x17c/0x224 [ 1256.391714][ T2732] [] bus_for_each_drv+0x132/0x1a6 [ 1256.393192][ T2732] [] __device_attach+0x1e0/0x372 [ 1256.394536][ T2732] [] device_initial_probe+0x1c/0x26 [ 1256.395922][ T2732] [] bus_probe_device+0x144/0x154 [ 1256.397277][ T2732] [] device_add+0x91e/0x129e [ 1256.399345][ T2732] [] usb_new_device+0x5c8/0xd78 [ 1256.400730][ T2732] [] hub_event+0x1b3e/0x3364 [ 1256.402013][ T2732] [] process_one_work+0x654/0xffe [ 1256.403360][ T2732] [] worker_thread+0x360/0x8fa [ 1256.404626][ T2732] [] kthread+0x19e/0x1fa [ 1256.405966][ T2732] [] ret_from_exception+0x0/0x10 [ 1256.407780][ T2732] SMP: stopping secondary CPUs [ 1256.411647][ T2732] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:09:34 Registers: info registers vcpu 0 pc ffffffff82705e9a mhartid 0000000000000000 mstatus 00000000000000a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff8000f97e sepc 00007fff9566c264 mcause 0000000000000009 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8013fa3e x2/sp ffffaf80123232b0 x3/gp ffffffff85863ac0 x4/tp ffffaf800e14b080 x5/t0 00007ffff1315850 x6/t1 7194279460046400 x7/t2 a0a521d2aa094bc1 x8/s0 ffffaf8012323210 x9/s1 0000000000000000 x10/a0 ffffaf800e14bae8 x11/a1 0000000000000007 x12/a2 1ffff5f001c29750 x13/a3 ffffffff80112588 x14/a4 0000000000000000 x15/a5 fffffffef0cda09b x16/a6 ffffffff866d04d8 x17/a7 ffffffff803ccf2c x18/s2 0000000000000142 x19/s3 ffffffff8343c5e8 x20/s4 ffffaf800e14c080 x21/s5 ffffaf800e14ba98 x22/s6 ffffffff858c4ca0 x23/s7 0000000000001fff x24/s8 ffffaf800e14bac8 x25/s9 ffffaf805a9e45e8 x26/s10 ffffaf800e14baa0 x27/s11 ffffaf800e14b080 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f002464628 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffff80099b68 mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80201300 sepc ffffffff8010b26a mcause 8000000000000007 scause 8000000000000009 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80099b68 x2/sp ffffaf800ca22560 x3/gp ffffffff85863ac0 x4/tp ffffaf800e5d48c0 x5/t0 ffffffff84a9f210 x6/t1 fffff5ef0b53910c x7/t2 0000000000000000 x8/s0 ffffaf800ca226f0 x9/s1 0000000000000000 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 ffff8f8012e48000 x13/a3 ffffffff80099b68 x14/a4 ffff8f801303b988 x15/a5 000000000003e731 x16/a6 0000000000f00000 x17/a7 ffffaf805a9c8863 x18/s2 ffffffff81a3a998 x19/s3 1ffff5f0019444b0 x20/s4 ffffaf800ca22640 x21/s5 ffffffff85889780 x22/s6 ffffffff838d2e20 x23/s7 ffffaf800ca22600 x24/s8 ffffffff831a6c62 x25/s9 ffffaf800ca20000 x26/s10 ffffaf800e98d024 x27/s11 ffffffff852f4720 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef0b53910c x30/t5 fffff5ef0b53910d x31/t6 ffffaf800ca22058 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000