last executing test programs: 12m56.38724122s ago: executing program 1 (id=341): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xa443f000) 12m55.7895929s ago: executing program 1 (id=346): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_create(0x80) 12m50.732139462s ago: executing program 1 (id=354): r0 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0x1f2c, 0x2, 0x3, 0x399}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000007c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x2000004) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 12m48.730337265s ago: executing program 1 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a80)={0x4c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x77}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x78, &(0x7f0000000b00), &(0x7f0000000240)=""/120, 0x8, 0x0, 0x1, 0x9a, &(0x7f0000000140)='[', &(0x7f00000002c0)="c5c5eef71ffac64374641562aa5f2a3dc457c25e4916cfd56ebb8a83cb155e19051986eb494dbbfc7024636301437437134cb8732c92049d7572bdd20428bd49bc69918c125012506eb484adb57c415a6108e6b24535cd94c551214d7d2e29880f45a62adc7c9eeb0c9a63956af74c795410eedacfa1142e09adfbdfa9d0358154372c8a6532310cb77585a24f9cc664d4048f51e3dc407c1dd0", 0x3, 0x0, 0x1}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000005280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0x28, 0x3a, 0xff, @private2, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xfffffff9, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x880, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x25, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x0, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x3, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x2, 0xcc, 0x6, 0x2, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x8ac1, 0x3, 0x4, 0x401, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) 12m44.743257013s ago: executing program 1 (id=363): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40", 0x20) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, 0xffffffffffffffff, 0x8000000) 12m42.521339025s ago: executing program 1 (id=367): r0 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./file0\x00', &(0x7f0000000980), &(0x7f0000000940)="22cff5fd56ac", 0x6, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) futex(&(0x7f0000004000), 0x8, 0x0, 0x0, &(0x7f0000004000)=0x1, 0xb201fffb) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000002c0)="c156550baee31b4966957a0430b48cb9676d131c220d21b85a86bfead734bd9c614dd8872fa56a9042c58b8bd182c20f3efd43a75986e007628005dbf79edf9f94e7a81d4bc4224486d5530475bced06e208d85b33c0ed0978b47308602e98bc7ebd25c30778aa2fcbc19150fb6c95adc4d909dd34d9f9fba649fb208684d58006f8f13cfdb32eaf06f487d5fbf858f1", 0x90, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0x6e}, 0x1, 0x0, 0x0, 0x28000}, 0x4004004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 12m27.257828023s ago: executing program 32 (id=367): r0 = fsopen(&(0x7f0000000180)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./file0\x00', &(0x7f0000000980), &(0x7f0000000940)="22cff5fd56ac", 0x6, 0x0) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) futex(&(0x7f0000004000), 0x8, 0x0, 0x0, &(0x7f0000004000)=0x1, 0xb201fffb) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000002c0)="c156550baee31b4966957a0430b48cb9676d131c220d21b85a86bfead734bd9c614dd8872fa56a9042c58b8bd182c20f3efd43a75986e007628005dbf79edf9f94e7a81d4bc4224486d5530475bced06e208d85b33c0ed0978b47308602e98bc7ebd25c30778aa2fcbc19150fb6c95adc4d909dd34d9f9fba649fb208684d58006f8f13cfdb32eaf06f487d5fbf858f1", 0x90, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x149a82, 0x40) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x0, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0x6e}, 0x1, 0x0, 0x0, 0x28000}, 0x4004004) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 12m7.570513169s ago: executing program 0 (id=420): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c86c0}]}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000000000000000693df1b6a8e8d0f5de18bc0ed85d5d88d969dbd0fc366c11c7c70a757dc85f5b47810e6f477167b062fee5808fdf02670260722bed9712d613535e65d45a0044d2286bed2ad34f90e5cda6857db2564ce0a5b495dfa5041dcd121e64e6441e81849c8b2beb04ce", @ANYRESOCT, @ANYRES32=r5], 0x48) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x6, 0x5, &(0x7f00000002c0)={0x99, "79b8142115db2c05f171f5306cef4870ae7ef9335b6e140c0afd2077a025abe98e"}}) 12m3.357510455s ago: executing program 0 (id=427): r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x4001, @private=0xa010100}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r4, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 11m59.208221894s ago: executing program 0 (id=433): syz_emit_ethernet(0x23c, &(0x7f0000000cc0)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "1cee7d", 0x206, 0x11, 0xff, @remote, @mcast1, {[@dstopts={0x16, 0x0, '\x00', [@ra]}, @routing={0x16, 0x4, 0x0, 0x5, 0x0, [@loopback, @mcast2]}, @fragment={0x73, 0x0, 0xed, 0x0, 0x0, 0x10, 0x67}, @srh={0x6c, 0xc, 0x4, 0x6, 0xe5, 0x20, 0x8, [@loopback, @ipv4={'\x00', '\xff\xff', @local}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, @private0]}, @srh={0x62, 0xc, 0x4, 0x6, 0x9, 0x48, 0x7, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @remote, @loopback, @empty, @empty]}, @routing={0x3a, 0xe, 0x2, 0x86, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2a}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast2, @loopback]}, @fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x67}, @dstopts={0xf7, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x1, 0x6, 0x3, 0x3ff, [0x800, 0x7fff, 0x0]}}, @pad1, @pad1]}, @hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @pad1]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x2, 0x65}], {0x4e21, 0x4e21, 0xe, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x100, @void}, "144c"}}}}}}}, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002740), 0x80080) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) 11m57.362861365s ago: executing program 0 (id=437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 11m57.058438589s ago: executing program 0 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) mknodat(r3, 0x0, 0x1000, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000880)=""/4096, 0x1000) 11m55.744664798s ago: executing program 0 (id=440): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) epoll_create1(0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'}) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'sed\x00', 0x1, 0x0, 0x4}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r8, &(0x7f0000000300)=""/56, 0x38) 11m40.532526306s ago: executing program 33 (id=440): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) epoll_create1(0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'}) socket$alg(0x26, 0x5, 0x0) fsopen(0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$NFQNL_MSG_VERDICT(r1, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'sed\x00', 0x1, 0x0, 0x4}, 0x2c) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r8, &(0x7f0000000300)=""/56, 0x38) 10m2.161507858s ago: executing program 3 (id=667): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40", 0x20) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r4, 0x8000000) 9m57.672045694s ago: executing program 3 (id=678): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000040c0)={0x2020}, 0x2020) 9m55.547535205s ago: executing program 3 (id=683): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9m51.309501147s ago: executing program 3 (id=695): openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e3000000000000000", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090000000000080009000000000040000a"], 0x184}}, 0x0) 9m49.573473998s ago: executing program 3 (id=699): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=""/127, 0x10a, 0x7f, 0x0, 0x655}, 0x28) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101341) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)=0x6) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0x18}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c000000020601000600000600000000000a00000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000"], 0x6c}}, 0x40000) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x40050) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r6 = io_uring_setup(0x667, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 9m48.436740159s ago: executing program 3 (id=701): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x3c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x2c, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x11a, 0x0, 0x0, @uid=0xee00}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 9m33.068671348s ago: executing program 34 (id=701): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x3c, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x2c, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x11a, 0x0, 0x0, @uid=0xee00}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 8m37.357958902s ago: executing program 5 (id=826): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) 8m34.496615706s ago: executing program 5 (id=832): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 8m30.521493537s ago: executing program 5 (id=841): unshare(0x20000400) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r2, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) 8m26.633106543s ago: executing program 5 (id=846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000040)={0x2c, r1, 0x409, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 8m26.317122605s ago: executing program 5 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a80)={0x4c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10000, 0x77}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x78, &(0x7f0000000b00), &(0x7f0000000240)=""/120, 0x8, 0x0, 0x1, 0x9a, &(0x7f0000000140)='[', &(0x7f00000002c0)="c5c5eef71ffac64374641562aa5f2a3dc457c25e4916cfd56ebb8a83cb155e19051986eb494dbbfc7024636301437437134cb8732c92049d7572bdd20428bd49bc69918c125012506eb484adb57c415a6108e6b24535cd94c551214d7d2e29880f45a62adc7c9eeb0c9a63956af74c795410eedacfa1142e09adfbdfa9d0358154372c8a6532310cb77585a24f9cc664d4048f51e3dc407c1dd0", 0x3, 0x0, 0x1}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000005280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0x28, 0x3a, 0xff, @private2, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xfffffff9, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x880, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x25, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x0, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x3, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x2, 0xcc, 0x6, 0x2, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x8ac1, 0x3, 0x4, 0x401, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x3b, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x8, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 8m24.198208116s ago: executing program 5 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r4, 0x141601) ioctl$TCSETAW(r5, 0x5407, 0x0) fcntl$setstatus(r5, 0x4, 0x102800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) 8m8.598616792s ago: executing program 35 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) capset(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r5 = syz_open_pts(r4, 0x141601) ioctl$TCSETAW(r5, 0x5407, 0x0) fcntl$setstatus(r5, 0x4, 0x102800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) 7m22.289265261s ago: executing program 6 (id=958): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40", 0x20) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r3, 0x8000000) 7m17.75903268s ago: executing program 6 (id=969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x40000) 7m16.153404225s ago: executing program 6 (id=972): r0 = socket(0xa, 0x3, 0x87) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002300)={{}, {}, [], {}, [{0x8, 0x6}, {0x8, 0x2}, {0x8, 0x4}, {}, {0x8, 0x1}, {0x8, 0x5, 0xee01}]}, 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x80000001}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x6, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01003bfd7000ffdbd725450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r6, 0xc02c5638, &(0x7f0000000400)={0x0, 0x5, 0x9c}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000071, 0x0, 0x8019b}]}) 7m12.510008767s ago: executing program 6 (id=979): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40", 0x20) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r3, 0x8000000) 7m7.777350888s ago: executing program 6 (id=991): socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) dup(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) 7m3.789477476s ago: executing program 6 (id=1002): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x10}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x48085) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000001}) 6m48.727300851s ago: executing program 36 (id=1002): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(0x0, 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x10}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r4) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x48085) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x30000001}) 19.99124411s ago: executing program 2 (id=2081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x1, 0x50, 0xfffffffb, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1003, r0}, 0x38) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) r5 = io_uring_setup(0x7, 0x0) futex(0x0, 0x7, 0x4008, 0x0, 0x0, 0xffffffff) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x69) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r3, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffc000/0x1000)=nil) socket$inet_sctp(0x2, 0x1, 0x84) 15.82925206s ago: executing program 7 (id=2093): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, 0x0, 0x0) write(r0, &(0x7f0000000080), 0x0) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r4, 0x8000000) 14.562362085s ago: executing program 4 (id=2094): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 14.405259786s ago: executing program 2 (id=2096): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="61157c000000000061134c0000000000bfa000000000000007000000080000002d03010000000000870500000000000069163e0000000000bf07000000000000550607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3897f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45d4e3b9e41c74a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8e545dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f020000361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d0000002100000000000020fbce0e69cc9c4e6b2816a5f31f0000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34a3c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000020000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c69396289549e7806e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f3b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a294ccba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4dc70667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000020000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a66700000000d5559a5bfd8035e0df99b775a2a49e648dc63b496680bfa8e6979f3e2d9c31083ac3af4e5eff4e8a4e4b6d3855939fbe54014e2e367cfd3872ed8831e709538ed1e61be4778839864f88faa8f4453046eb59b6eea0d1538ccbd86cdfd389ef5bb6d49a66ed8b8915eb8e4315437c54f88eac0c74981dfe8c1239af27e714497f475ead5933f66b7f66b15663adbd804c07a4a10d5283a2fd3a0f50c9d1c0b69aa4911b409b6dda3421dbab8302ff09338f815331e3f3dbf7c119cca600b2248e530fe46f66bd8daec3ac4120ca9e23e1bbbfca76c146397b2006c7186da1065746e1641a44c8d9577617bb9f1bc769861624824565774ea1c0e5c75acb7255bc3b6ebf7beba910830877ddc82be039d33dc3742bef24c290e52af147ce4665e9d23caeceb297c3957335103f6fc2fae34f7e12864311a898ead68e5f8238103301acb7bdd9972359aaa4c3cc3021507e79df0dd0183eb1f2f2379451f556bbd4e695f481a7de7659ade66efb5b09b13c6da24dffd88a0162528ea4962ecea6fe6ad61f64606eb79f87ce8bd3834bafc0cb43f3387a7cd63a84bc7915e63b24ee4388607ba11f80b5100f4c74d0f0f34f22b765ba1fd700e0056a1c48cd53f901e006cb078fb56fc0e293b341a3f61310e85e99527ef084025f058b45d271de774905bb20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 14.192899926s ago: executing program 7 (id=2097): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 13.307340853s ago: executing program 2 (id=2098): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000580)={0x200d}) 12.996840615s ago: executing program 7 (id=2101): bpf$PROG_LOAD(0x5, 0x0, 0xba162d27) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x1}}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xfffb, 0xfff2}, {0xd, 0x8}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x850) 10.871932182s ago: executing program 7 (id=2103): syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0/file1\x00') 10.823326983s ago: executing program 8 (id=2104): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 10.1054398s ago: executing program 4 (id=2105): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 9.229741588s ago: executing program 4 (id=2106): socket$inet6(0xa, 0x3, 0x8000000003c) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) set_mempolicy(0x1, 0x0, 0xff) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 9.155873174s ago: executing program 7 (id=2107): r0 = syz_io_uring_setup(0x17f9, &(0x7f0000000440)={0x0, 0x2, 0x10100, 0x80001, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x4e22, 0x200000, @loopback}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) 9.0782054s ago: executing program 8 (id=2108): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="61157c000000000061134c0000000000bfa000000000000007000000080000002d03010000000000870500000000000069163e0000000000bf07000000000000550607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3897f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45d4e3b9e41c74a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8e545dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f020000361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d0000002100000000000020fbce0e69cc9c4e6b2816a5f31f0000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34a3c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000020000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c69396289549e7806e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f3b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a294ccba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4dc70667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000020000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a66700000000d5559a5bfd8035e0df99b775a2a49e648dc63b496680bfa8e6979f3e2d9c31083ac3af4e5eff4e8a4e4b6d3855939fbe54014e2e367cfd3872ed8831e709538ed1e61be4778839864f88faa8f4453046eb59b6eea0d1538ccbd86cdfd389ef5bb6d49a66ed8b8915eb8e4315437c54f88eac0c74981dfe8c1239af27e714497f475ead5933f66b7f66b15663adbd804c07a4a10d5283a2fd3a0f50c9d1c0b69aa4911b409b6dda3421dbab8302ff09338f815331e3f3dbf7c119cca600b2248e530fe46f66bd8daec3ac4120ca9e23e1bbbfca76c146397b2006c7186da1065746e1641a44c8d9577617bb9f1bc769861624824565774ea1c0e5c75acb7255bc3b6ebf7beba910830877ddc82be039d33dc3742bef24c290e52af147ce4665e9d23caeceb297c3957335103f6fc2fae34f7e12864311a898ead68e5f8238103301acb7bdd9972359aaa4c3cc3021507e79df0dd0183eb1f2f2379451f556bbd4e695f481a7de7659ade66efb5b09b13c6da24dffd88a0162528ea4962ecea6fe6ad61f64606eb79f87ce8bd3834bafc0cb43f3387a7cd63a84bc7915e63b24ee4388607ba11f80b5100f4c74d0f0f34f22b765ba1fd700e0056a1c48cd53f901e006cb078fb56fc0e293b341a3f61310e85e99527ef084025f058b45d271de774905bb20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 7.89082678s ago: executing program 8 (id=2109): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c86c0}]}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000693df1b6a8e8d0f5de18bc0ed85d5d88d969dbd0fc366c11c7c70a757dc85f5b47810e6f477167b062fee5808fdf02670260722bed9712d613535e65d45a0044d2286bed2ad34f90e5cda6857db2564ce0a5b495dfa5041dcd121e64e6441e81849c8b2beb04ce", @ANYRESOCT, @ANYRES32=r3], 0x48) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220500000027d2903aabc49f9316b36d4e"], 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x6, 0x5, &(0x7f00000002c0)={0x99, "79b8142115db2c05f171f5306cef4870ae7ef9335b6e140c0afd2077a025abe98e"}}) 6.072234084s ago: executing program 2 (id=2114): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000005280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0x28, 0x3a, 0xff, @private2, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xfffffff9, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x880, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x25, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x0, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x3, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x2, 0xcc, 0x6, 0x2, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x8ac1, 0x3, 0x4, 0x401, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000003f80)=""/4117, 0x1015}], 0x1}, 0x20f2) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x18, 0x29, 0x3b, {0x2}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x8, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0) 5.875530957s ago: executing program 9 (id=2115): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x80e0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 4.897329396s ago: executing program 8 (id=2116): unshare(0x62040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2a, 0x40, 0xf2}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 4.609174833s ago: executing program 2 (id=2117): syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0/file1\x00') 3.128146419s ago: executing program 2 (id=2118): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2.817653321s ago: executing program 9 (id=2119): unshare(0x2c020400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) lseek(r0, 0xb, 0x1) 2.54553208s ago: executing program 9 (id=2120): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x5a, 0x5) 2.418667127s ago: executing program 9 (id=2121): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$RNDADDENTROPY(r0, 0x5207, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 2.182762584s ago: executing program 4 (id=2122): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20004040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.802734873s ago: executing program 9 (id=2123): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x42, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000002680)) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000000001800000000000000170100000400000007000800000000000000000000000000170100000400000001000000000000000000000000170100000200000065000000433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d3fda90bbe4fc93ce397e33566a5f1637eabb82231e64719d3529d653ab937022831b3a638704fe05ac900800000000000000000"], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4488040, 0x30) socket(0x10, 0x803, 0x800017) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.628062381s ago: executing program 4 (id=2124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_emit_ethernet(0x48, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x26, 0x0, @wg=@data={0x220, 0x0, 0x0, "200200"/14}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000480)=""/26, 0x1a}, {&(0x7f00000004c0)=""/158, 0x9e}], 0x4}, 0x60002000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 693.237238ms ago: executing program 9 (id=2125): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000580)={0x200d}) 612.080443ms ago: executing program 4 (id=2126): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3c86c0}]}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000693df1b6a8e8d0f5de18bc0ed85d5d88d969dbd0fc366c11c7c70a757dc85f5b47810e6f477167b062fee5808fdf02670260722bed9712d613535e65d45a0044d2286bed2ad34f90e5cda6857db2564ce0a5b495dfa5041dcd121e64e6441e81849c8b2beb04ce", @ANYRESOCT, @ANYRES32=r3], 0x48) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220500000027d2903aabc49f9316b36d4e"], 0x0}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x6, 0x5, &(0x7f00000002c0)={0x99, "79b8142115db2c05f171f5306cef4870ae7ef9335b6e140c0afd2077a025abe98e"}}) 581.262867ms ago: executing program 8 (id=2127): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x181c81, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0xfffffffb, 0x4) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000080000000000000000000000030006000000000002004e32ffffffff00000000000000000b0005000000000002004e22e00000020000000000000000"], 0x40}}, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES32=r5], 0x3c}}, 0xea5bc50b6199d76e) write$FUSE_LK(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0xa443f000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r6, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$video4linux(&(0x7f0000000080), 0x6, 0x2500) 65.512971ms ago: executing program 7 (id=2128): syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0/file1\x00') 0s ago: executing program 8 (id=2129): syz_usb_connect(0x5, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x110, 0xa3, 0xb5, 0x34, 0x40, 0x129b, 0x160c, 0x2186, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x3, 0x90, 0xfa, "", [{{0x9, 0x4, 0x14, 0x9, 0x0, 0x3d, 0x5c, 0xad, 0xeb}}]}}]}}, 0x0) msgget$private(0x0, 0x420) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(r2, 0x4, 0x52c00) splice(r1, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) r5 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) kernel console output (not intermixed with test programs): vice number 8 [ 521.646474][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 521.668838][ T8095] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 521.676840][ T8095] netlink: 240 bytes leftover after parsing attributes in process `syz.2.882'. [ 522.615497][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 522.698652][ T8097] xt_hashlimit: size too large, truncated to 1048576 [ 522.732902][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 522.815634][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.967325][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.275345][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.552794][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.564008][ T8113] nfs: Unknown parameter 'ÿÿÿÿ' [ 523.811582][ T8069] device bridge_slave_0 entered promiscuous mode [ 523.924153][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.982784][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.990975][ T8069] device bridge_slave_1 entered promiscuous mode [ 524.103979][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.282509][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.407918][ T8126] vivid-000: disconnect [ 525.012056][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 525.157940][ T8123] vivid-000: reconnect [ 525.409299][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.472228][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.707569][ T8069] team0: Port device team_slave_0 added [ 525.806811][ T8069] team0: Port device team_slave_1 added [ 525.898330][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.929662][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.074693][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.772767][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.779743][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.305413][ T4229] Bluetooth: hci4: command 0x0419 tx timeout [ 528.322964][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.679606][ T8069] device hsr_slave_0 entered promiscuous mode [ 528.751248][ T8069] device hsr_slave_1 entered promiscuous mode [ 528.812798][ T8069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.820414][ T8069] Cannot create hsr debugfs directory [ 529.527193][ T8165] ptrace attach of "./syz-executor exec"[4188] was attempted by ""[8165] [ 529.682549][ T8069] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 529.696958][ T8069] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 529.728493][ T8069] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 529.771002][ T8069] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 530.071364][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.206731][ T9] device hsr_slave_0 left promiscuous mode [ 530.249894][ T9] device hsr_slave_1 left promiscuous mode [ 530.280109][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.343327][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.445545][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.467485][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.551360][ T9] device bridge_slave_1 left promiscuous mode [ 530.603141][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.621246][ T9] device bridge_slave_0 left promiscuous mode [ 530.648081][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.839896][ T9] device veth1_macvtap left promiscuous mode [ 530.878589][ T9] device veth0_macvtap left promiscuous mode [ 530.900487][ T9] device veth1_vlan left promiscuous mode [ 530.937456][ T9] device veth0_vlan left promiscuous mode [ 531.638290][ T8184] 9pnet: Insufficient options for proto=fd [ 532.802310][ T9] team0 (unregistering): Port device team_slave_1 removed [ 532.845856][ T9] team0 (unregistering): Port device team_slave_0 removed [ 532.894570][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.050917][ T8188] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 533.058985][ T8188] netlink: 240 bytes leftover after parsing attributes in process `syz.2.894'. [ 533.476123][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.755200][ T9] bond0 (unregistering): Released all slaves [ 533.970897][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.994139][ T8190] nfs: Unknown parameter 'ÿÿÿÿ' [ 534.032496][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.060491][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.119968][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'. [ 534.244564][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.275234][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.303308][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.310453][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.373568][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.409465][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.468176][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.475302][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.545337][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.558531][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.766206][ T8201] vivid-000: disconnect [ 535.050341][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.896'. [ 535.436861][ T8193] vivid-000: reconnect [ 535.519473][ T8069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 535.571515][ T8069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 535.628727][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 535.669297][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 535.687414][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 535.736697][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 535.768337][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 535.780306][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 535.795029][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 535.817565][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 535.864245][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 535.922507][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.948689][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.057094][ T8213] netlink: 'syz.7.899': attribute type 10 has an invalid length. [ 536.216414][ T8213] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 536.452708][ T4196] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 536.737045][ T8224] netlink: 40 bytes leftover after parsing attributes in process `syz.7.900'. [ 538.461253][ T4196] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 538.524242][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 538.531716][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 538.539794][ T4196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.686758][ T4196] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.696504][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.718751][ T4196] usb 3-1: config 0 descriptor?? [ 538.757706][ T8212] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 538.759867][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.824710][ T4196] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 539.080974][ T4196] usb 3-1: USB disconnect, device number 18 [ 539.879930][ T8254] nfs: Unknown parameter 'ÿÿÿÿ' [ 539.900960][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 539.963637][ T741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 540.031686][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 540.073796][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 540.133345][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 540.213926][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 540.244652][ T8069] device veth0_vlan entered promiscuous mode [ 540.302191][ T8069] device veth1_vlan entered promiscuous mode [ 540.459969][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 540.494497][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 540.525492][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 540.552056][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 540.635606][ T8069] device veth0_macvtap entered promiscuous mode [ 540.701793][ T8069] device veth1_macvtap entered promiscuous mode [ 540.788386][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.837870][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.898113][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.964795][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.990231][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.053237][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.102757][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.102780][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.106797][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.181232][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 541.194514][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 541.253018][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 541.300079][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.346491][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.392174][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.432193][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.489675][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.548139][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.634865][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.693650][ T8069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.782762][ T8069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.854986][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.007428][ T8282] vivid-000: disconnect [ 542.790762][ T8278] vivid-000: reconnect [ 542.882787][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 542.893199][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 543.000735][ T8069] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.092803][ T8069] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.101561][ T8069] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.175153][ T8069] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.424187][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.432087][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.491030][ T5345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.633407][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.655977][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.825214][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 543.937974][ T8301] netlink: 40 bytes leftover after parsing attributes in process `syz.7.910'. [ 545.054756][ T8318] binder: 8317:8318 ioctl 4018620d 0 returned -22 [ 546.095048][ T8313] nfs: Unknown parameter 'ÿÿÿÿ' [ 546.724175][ T8340] vivid-004: disconnect [ 547.346501][ T8335] vivid-004: reconnect [ 549.333910][ T8360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.923'. [ 552.097037][ T8391] netlink: 'syz.4.930': attribute type 10 has an invalid length. [ 552.104937][ T8391] netlink: 240 bytes leftover after parsing attributes in process `syz.4.930'. [ 552.962978][ T8378] nfs: Unknown parameter 'ÿÿÿÿ' [ 555.125646][ T8414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.936'. [ 556.201640][ T8421] vivid-002: disconnect [ 556.978322][ T8418] vivid-002: reconnect [ 558.222718][ T8138] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 559.415020][ T8138] usb 9-1: config index 0 descriptor too short (expected 93, got 72) [ 559.593537][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.943'. [ 559.743085][ T8138] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 559.772744][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 559.774590][ T8138] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.502803][ T8138] usb 9-1: Product: syz [ 560.507033][ T8138] usb 9-1: Manufacturer: syz [ 560.512715][ T8138] usb 9-1: SerialNumber: syz [ 560.577734][ T8138] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 560.627934][ T8447] nfs: Unknown parameter 'ÿÿÿÿ' [ 560.913811][ T21] usb 9-1: USB disconnect, device number 2 [ 561.029965][ T4226] usb 9-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 561.053249][ T8459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.947'. [ 561.273866][ T21] usb 9-1: ath9k_htc: USB layer deinitialized [ 562.993136][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.999549][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.271974][ T8483] vivid-000: disconnect [ 563.414167][ T8474] vivid-000: reconnect [ 563.959414][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.8.955'. [ 565.637707][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'. [ 567.157379][ T8512] nfs: Unknown parameter 'ÿÿÿÿ' [ 569.095581][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 573.936342][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.7.978'. [ 575.667248][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 576.402073][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.981'. [ 576.702931][ T8622] nfs: Unknown parameter 'ÿÿÿÿ' [ 579.267165][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 579.860592][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 582.533020][ T8720] nfs: Unknown parameter 'ÿÿÿÿ' [ 583.932866][ T21] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 584.018704][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 584.046508][ T8746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.177848][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1003'. [ 584.442947][ T21] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.842877][ T21] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 584.931683][ T21] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 584.982350][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.032427][ T21] usb 8-1: config 0 descriptor?? [ 585.713702][ T4196] usb 8-1: USB disconnect, device number 5 [ 585.963737][ T8773] vivid-004: disconnect [ 586.707236][ T8767] vivid-004: reconnect [ 587.082048][ T8779] nfs: Unknown parameter 'ÿÿÿÿ' [ 589.892329][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1018'. [ 591.157489][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1022'. [ 591.175835][ T8819] netlink: 'syz.8.1022': attribute type 10 has an invalid length. [ 591.183846][ T8819] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1022'. [ 592.382687][ T4229] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 592.589732][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1024'. [ 593.163061][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.190244][ T4229] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 593.238066][ T4229] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 593.292943][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.532003][ T4229] usb 3-1: config 0 descriptor?? [ 593.742678][ T21] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 593.860771][ T4196] usb 3-1: USB disconnect, device number 19 [ 594.422721][ T21] usb 9-1: Using ep0 maxpacket: 16 [ 594.542816][ T21] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.619928][ T21] usb 9-1: config 0 has no interfaces? [ 594.690268][ T21] usb 9-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8 [ 594.873654][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.887794][ T21] usb 9-1: config 0 descriptor?? [ 594.966224][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 596.043156][ T2240] usb 9-1: USB disconnect, device number 3 [ 596.344644][ T8890] sctp: [Deprecated]: syz.2.1034 (pid 8890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 596.344644][ T8890] Use struct sctp_sack_info instead [ 596.798700][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1035'. [ 598.178339][ T21] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 599.005709][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 599.542872][ T21] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.723664][ T21] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 599.876472][ T21] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 600.075576][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 600.079576][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.140626][ T21] usb 8-1: config 0 descriptor?? [ 600.415566][ T4226] usb 8-1: USB disconnect, device number 6 [ 600.737137][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.763090][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.771482][ T8919] device bridge_slave_0 entered promiscuous mode [ 600.789727][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.797469][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.816849][ T8919] device bridge_slave_1 entered promiscuous mode [ 600.969035][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.005457][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.134827][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.221960][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.281247][ T8940] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 601.350001][ T8919] team0: Port device team_slave_0 added [ 601.367240][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.399555][ T8919] team0: Port device team_slave_1 added [ 601.449416][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.050150][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 602.148333][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.309608][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1051'. [ 602.438594][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.561811][ T8919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.753945][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.854668][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.881183][ T8919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.994016][ T8919] device hsr_slave_0 entered promiscuous mode [ 603.027058][ T8919] device hsr_slave_1 entered promiscuous mode [ 603.044866][ T8919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.104177][ T8919] Cannot create hsr debugfs directory [ 604.215674][ T4229] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 605.149276][ T4231] Bluetooth: hci5: command 0x041b tx timeout [ 605.266672][ T8919] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 605.313810][ T8919] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 605.344694][ T8919] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 605.366504][ T8919] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 605.432790][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.584897][ T4229] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 605.616733][ T4229] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 605.628716][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.642687][ T4231] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 606.414724][ T4229] usb 3-1: config 0 descriptor?? [ 606.710991][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1062'. [ 606.973619][ T4231] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.982292][ T4231] usb 8-1: config 0 has no interface number 0 [ 607.042546][ T4231] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 607.063038][ T8919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.101640][ T4231] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 607.132250][ T8919] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.152729][ T4231] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 607.208390][ T4226] usb 3-1: USB disconnect, device number 20 [ 607.209670][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.222760][ T4231] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.243001][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.323509][ T4231] usb 8-1: config 0 descriptor?? [ 607.350789][ T4229] Bluetooth: hci5: command 0x040f tx timeout [ 607.692254][ T8993] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 607.759283][ T4231] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 607.858087][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 607.886377][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.896474][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.903594][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.911968][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 608.073664][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 608.100420][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.107550][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.139033][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 608.205046][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 608.231427][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.273516][ T9022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.418140][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 608.465441][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.530420][ T154] device hsr_slave_0 left promiscuous mode [ 608.570901][ T154] device hsr_slave_1 left promiscuous mode [ 608.599382][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.686727][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.799326][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.832741][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.861737][ T154] device bridge_slave_1 left promiscuous mode [ 608.889718][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.093456][ T154] device bridge_slave_0 left promiscuous mode [ 609.099739][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.708318][ T4231] Bluetooth: hci5: command 0x0419 tx timeout [ 609.893993][ T154] device veth1_macvtap left promiscuous mode [ 610.024817][ T154] device veth0_macvtap left promiscuous mode [ 610.077022][ T154] device veth1_vlan left promiscuous mode [ 610.112710][ T154] device veth0_vlan left promiscuous mode [ 611.229940][ T154] team0 (unregistering): Port device team_slave_1 removed [ 611.270804][ T154] team0 (unregistering): Port device team_slave_0 removed [ 611.298812][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.334345][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.506330][ T154] bond0 (unregistering): Released all slaves [ 611.591669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.678349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.705698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.732017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.887914][ T8919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 611.975784][ T8919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.032893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.051347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.101568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 612.135681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 612.167264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 612.218559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 612.882499][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.892996][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.936557][ T8919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.698760][ T7732] usb 8-1: USB disconnect, device number 7 [ 613.975782][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.015800][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.103756][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.163675][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.213334][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.241648][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.294466][ T8919] device veth0_vlan entered promiscuous mode [ 614.343203][ T8919] device veth1_vlan entered promiscuous mode [ 614.487442][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 614.757831][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.081798][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.107908][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.126267][ T8919] device veth0_macvtap entered promiscuous mode [ 615.154935][ T8919] device veth1_macvtap entered promiscuous mode [ 615.223819][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.263532][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.668248][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.714319][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.927219][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.732977][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.757832][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.857644][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.910762][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.019667][ T9067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.030045][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 617.136622][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 617.213674][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.292781][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.352931][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.415560][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.472705][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.565654][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.100787][ T8919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.187411][ T8919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.198636][ T8919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.265215][ T9129] tc_dump_action: action bad kind [ 618.292728][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.301497][ T6320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.506093][ T8919] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.640683][ T8919] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.680284][ T8919] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.708658][ T2240] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 619.582878][ T8919] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.923431][ T2240] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 619.954433][ T2240] usb 3-1: config 0 has no interface number 0 [ 620.026733][ T2240] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 620.181495][ T2240] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 620.328577][ T2240] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 620.465475][ T2240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.537401][ T2240] usb 3-1: config 0 descriptor?? [ 620.552901][ T9142] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 620.612230][ T2240] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 620.745412][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 620.992467][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.008149][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.071347][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.102300][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.120444][ T9183] tc_dump_action: action bad kind [ 621.146832][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.208294][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.761577][ T9192] nfs: Unknown parameter 'ÿÿÿÿ' [ 622.802711][ T4229] usb 3-1: USB disconnect, device number 21 [ 624.368501][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.375098][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.903404][ T4229] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 625.561799][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1102'. [ 625.973132][ T4229] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.064522][ T4229] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 626.122764][ T4229] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 626.153999][ T4229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.843954][ T9249] nfs: Unknown parameter 'ÿÿÿÿ' [ 626.911852][ T4229] usb 10-1: config 0 descriptor?? [ 627.247765][ T23] usb 10-1: USB disconnect, device number 2 [ 629.503513][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 629.722120][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 630.452725][ T2240] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 630.702675][ T2240] usb 8-1: Using ep0 maxpacket: 16 [ 630.822849][ T2240] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.866619][ T2240] usb 8-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.902855][ T8138] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 630.910781][ T2240] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 630.937208][ T2240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.339918][ T9315] udc-core: couldn't find an available UDC or it's busy [ 631.356693][ T9315] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 631.575845][ T2240] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 631.794316][ T2240] usb 8-1: USB disconnect, device number 8 [ 631.802712][ T8138] usb 3-1: unable to get BOS descriptor or descriptor too short [ 631.882749][ T8138] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 631.904448][ T8138] usb 3-1: can't read configurations, error -71 [ 633.548600][ T9347] nfs: Unknown parameter 'ÿÿÿÿ' [ 633.601964][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1125'. [ 633.616757][ T8138] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 634.142994][ T8138] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.168317][ T8138] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 634.217294][ T8138] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 634.260529][ T8138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.317036][ T8138] usb 3-1: config 0 descriptor?? [ 634.685807][ T4231] usb 3-1: USB disconnect, device number 23 [ 635.541790][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 639.473021][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1138'. [ 639.484556][ T9440] netlink: 'syz.7.1138': attribute type 10 has an invalid length. [ 639.492640][ T9440] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1138'. [ 641.901669][ T23] Bluetooth: hci4: command 0x0406 tx timeout [ 642.232772][ T23] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 642.328344][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1143'. [ 643.407266][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.459670][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 643.508493][ T23] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 643.559431][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.588904][ T23] usb 5-1: config 0 descriptor?? [ 644.786294][ T7] usb 5-1: USB disconnect, device number 19 [ 647.528429][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1155'. [ 651.062757][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1159'. [ 651.158991][ T9561] netlink: 'syz.8.1159': attribute type 10 has an invalid length. [ 651.210011][ T9561] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1159'. [ 651.412655][ T13] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 652.031320][ T13] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.079356][ T13] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 652.256985][ T13] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 652.438748][ T13] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.783821][ T13] usb 10-1: config 0 descriptor?? [ 653.126448][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1166'. [ 653.291761][ T4229] usb 10-1: USB disconnect, device number 3 [ 653.893523][ T7] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 653.962706][ T4272] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 654.067546][ T9609] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 654.204214][ T9591] udc-core: couldn't find an available UDC or it's busy [ 654.229124][ T9591] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 654.672685][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 655.532680][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 655.569439][ T7] usb 5-1: can't read configurations, error -71 [ 655.925153][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 656.005087][ T9638] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 656.054487][ T9638] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1172'. [ 656.082746][ T4272] usb 8-1: unable to get BOS descriptor or descriptor too short [ 656.202768][ T4272] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 656.210398][ T4272] usb 8-1: can't read configurations, error -71 [ 658.010625][ T13] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 658.663710][ T9690] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 659.601435][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1178'. [ 659.612760][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 659.964621][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.985713][ T13] usb 3-1: config 0 has no interfaces? [ 660.001256][ T13] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 660.017635][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.032644][ T4229] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 660.059501][ T13] usb 3-1: config 0 descriptor?? [ 660.237158][ T4272] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 660.482796][ T4229] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.502679][ T4272] usb 5-1: Using ep0 maxpacket: 16 [ 660.507951][ T4229] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 660.538062][ T4229] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 660.556433][ T4229] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.586968][ T4229] usb 9-1: config 0 descriptor?? [ 660.642782][ T4272] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.702655][ T4272] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 660.888988][ T4224] usb 9-1: USB disconnect, device number 4 [ 660.900723][ T4272] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 660.952795][ T13] usb 3-1: can't set config #0, error -71 [ 660.964441][ T13] usb 3-1: USB disconnect, device number 24 [ 660.980622][ T4272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.011778][ T4272] usb 5-1: Product: syz [ 661.042864][ T4272] usb 5-1: Manufacturer: syz [ 661.047516][ T4272] usb 5-1: SerialNumber: syz [ 661.422893][ T4272] usb 5-1: 0:2 : does not exist [ 661.475599][ T4272] usb 5-1: USB disconnect, device number 22 [ 661.559796][ T7676] udevd[7676]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.128016][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 666.322646][ T4272] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 666.734350][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.760415][ T4272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 666.803817][ T4272] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 666.863174][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.905829][ T4272] usb 3-1: config 0 descriptor?? [ 667.413717][ T4272] usb 3-1: USB disconnect, device number 25 [ 667.913180][ T9835] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 670.026761][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1207'. [ 670.829914][ T9864] vivid-004: disconnect [ 672.379325][ T9857] vivid-004: reconnect [ 673.860257][ T4272] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 674.342899][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.382562][ T4272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 674.432226][ T4272] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 674.472679][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.514632][ T4272] usb 3-1: config 0 descriptor?? [ 674.831399][ T4272] usb 3-1: USB disconnect, device number 26 [ 676.748218][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1228'. [ 676.797335][ T9937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 677.107669][ T9944] vivid-000: disconnect [ 677.809877][ T9941] vivid-000: reconnect [ 678.002791][ T13] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 678.253172][ T13] usb 8-1: Using ep0 maxpacket: 8 [ 678.275708][ T4272] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 678.683010][ T13] usb 8-1: unable to get BOS descriptor or descriptor too short [ 678.762930][ T13] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 678.786851][ T13] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 678.799986][ T13] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.862824][ T13] usb 8-1: language id specifier not provided by device, defaulting to English [ 678.922956][ T4272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.953255][ T4272] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 678.972939][ T4272] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 678.982109][ T4272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.999867][ T4272] usb 3-1: config 0 descriptor?? [ 679.632800][ T13] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 679.670075][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.689954][ T4229] usb 3-1: USB disconnect, device number 27 [ 679.725428][ T13] usb 8-1: Product: syz [ 679.760844][ T13] usb 8-1: SerialNumber: syz [ 679.842400][ T13] usb 8-1: can't set config #1, error -71 [ 679.869723][ T13] usb 8-1: USB disconnect, device number 11 [ 680.444995][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1241'. [ 681.847167][ T9985] netlink: 'syz.8.1241': attribute type 10 has an invalid length. [ 681.855753][ T9985] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1241'. [ 685.692629][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.699002][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.128103][ T4229] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 686.186185][T10035] tipc: Started in network mode [ 686.201400][T10035] tipc: Node identity 5e36d1787922, cluster identity 4711 [ 686.233246][T10035] tipc: Enabled bearer , priority 0 [ 686.275182][T10042] device syzkaller0 entered promiscuous mode [ 686.557004][T10035] tipc: Resetting bearer [ 686.587362][T10034] tipc: Resetting bearer [ 686.632618][ T4229] usb 10-1: Using ep0 maxpacket: 8 [ 686.839202][ T4229] usb 10-1: unable to get BOS descriptor or descriptor too short [ 686.939644][ T4229] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.007119][ T4229] usb 10-1: config 0 has no interfaces? [ 687.369580][ T4229] usb 10-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=cd.98 [ 687.389155][ T4229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.417629][ T4229] usb 10-1: Product: syz [ 687.448266][ T4229] usb 10-1: Manufacturer: syz [ 687.464327][ T4229] usb 10-1: SerialNumber: syz [ 687.482344][T10055] xt_hashlimit: size too large, truncated to 1048576 [ 687.503473][T10034] tipc: Disabling bearer [ 687.513534][ T4229] usb 10-1: config 0 descriptor?? [ 687.572266][ T4224] tipc: Node number set to 655675768 [ 687.630697][T10060] device syzkaller1 entered promiscuous mode [ 688.914572][ T8138] usb 10-1: USB disconnect, device number 4 [ 695.989760][T10178] tipc: Enabling of bearer rejected, failed to enable media [ 696.102190][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1279'. [ 696.227269][T10189] bridge1: port 1(veth0_to_bond) entered blocking state [ 696.264217][T10189] bridge1: port 1(veth0_to_bond) entered disabled state [ 696.320832][T10189] device veth0_to_bond entered promiscuous mode [ 696.784648][T10186] bridge1: port 2(veth3) entered blocking state [ 696.833968][T10186] bridge1: port 2(veth3) entered disabled state [ 696.891182][T10186] device veth3 entered promiscuous mode [ 697.251072][T10182] bridge1: port 3(veth5) entered blocking state [ 697.300823][T10182] bridge1: port 3(veth5) entered disabled state [ 697.331848][T10182] device veth5 entered promiscuous mode [ 697.409826][T10209] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1283'. [ 697.746634][T10209] fuse: root generation should be zero [ 701.934495][T10284] sg_write: data in/out 360476/2 bytes for SCSI command 0xc2-- guessing data in; [ 701.934495][T10284] program syz.9.1295 not setting count and/or reply_len properly [ 703.356438][T10298] kAFS: unable to lookup cell '(,c¾Ì' [ 703.562403][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 703.940360][ T4272] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 704.844837][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1305'. [ 704.959860][ T4272] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 704.979884][ T4272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.991354][ T4272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 705.011574][ T4272] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 705.149689][ T4272] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 705.309574][ T4272] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 705.318165][ T4272] usb 5-1: Manufacturer: syz [ 705.334602][ T4272] usb 5-1: config 0 descriptor?? [ 706.718210][ T4272] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 706.727102][ T4272] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 706.753205][ T4272] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 706.931563][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 707.752062][ T4272] usb 5-1: USB disconnect, device number 23 [ 707.759985][ T154] wlan0: Trigger new scan to find an IBSS to join [ 709.270729][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 710.613964][T10373] device syzkaller0 entered promiscuous mode [ 710.675198][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1324'. [ 711.009348][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1330'. [ 711.819433][ T9] wlan0: Trigger new scan to find an IBSS to join [ 712.800547][T10425] netlink: 'syz.7.1339': attribute type 1 has an invalid length. [ 712.883184][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 713.040396][T10425] device bond2 entered promiscuous mode [ 713.122700][T10425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.171641][T10434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 713.180713][T10434] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 713.191820][T10434] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 713.208723][T10434] bond2: (slave wireguard0): making interface the new active one [ 713.216830][T10434] device wireguard0 entered promiscuous mode [ 713.224921][T10434] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 713.237370][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 713.390204][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 713.405461][ T2240] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 713.418836][T10449] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 713.426925][T10449] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1345'. [ 714.954866][ T2240] usb 9-1: Using ep0 maxpacket: 32 [ 714.964766][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.089566][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 715.174891][ T2240] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.218248][ T2240] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.514705][ T2240] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 715.538593][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1353'. [ 715.560031][T10475] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1354'. [ 715.589217][ T2240] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 715.607830][ T2240] usb 9-1: Product: syz [ 715.625567][ T2240] usb 9-1: Manufacturer: syz [ 715.695632][ T2240] hub 9-1:4.0: USB hub found [ 715.975642][ T2240] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 716.054851][ T2240] usb 9-1: USB disconnect, device number 5 [ 716.083191][T10485] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1358'. [ 717.186070][T10492] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1361'. [ 717.482144][T10496] netlink: 'syz.8.1360': attribute type 10 has an invalid length. [ 717.490307][T10496] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1360'. [ 718.243613][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1360'. [ 719.363212][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1374'. [ 719.385187][T10530] netlink: 'syz.7.1374': attribute type 10 has an invalid length. [ 719.393520][T10530] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1374'. [ 720.432918][T10538] tipc: Started in network mode [ 720.437900][T10538] tipc: Node identity a2f6f1c2a208, cluster identity 4711 [ 720.569625][T10538] tipc: Enabled bearer , priority 0 [ 720.602470][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1378'. [ 720.647838][T10543] device syzkaller0 entered promiscuous mode [ 720.703277][T10538] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 721.041741][ T8138] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 721.301559][ T8138] usb 10-1: Using ep0 maxpacket: 16 [ 721.431796][ T8138] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.457851][ T8138] usb 10-1: config 0 has no interfaces? [ 721.651656][ T8138] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 721.680921][ T8138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.722719][ T8138] usb 10-1: Product: syz [ 721.727034][ T8138] usb 10-1: Manufacturer: syz [ 721.856697][ T8138] usb 10-1: SerialNumber: syz [ 721.881849][ T8138] usb 10-1: config 0 descriptor?? [ 721.891529][ T2240] tipc: Node number set to 16708034 [ 722.673237][T10538] tipc: Resetting bearer [ 722.722319][ T4736] usb 10-1: USB disconnect, device number 5 [ 722.758680][T10535] tipc: Resetting bearer [ 722.831568][T10535] tipc: Disabling bearer [ 723.590479][ T4228] Bluetooth: hci5: command 0x0406 tx timeout [ 723.775610][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 723.797344][T10574] netlink: 'syz.4.1388': attribute type 10 has an invalid length. [ 723.805275][T10574] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1388'. [ 724.230153][ T4736] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 724.809764][ T4736] usb 10-1: Using ep0 maxpacket: 32 [ 724.929891][ T4736] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 724.939797][ T4736] usb 10-1: config 0 has no interface number 0 [ 724.946025][ T4736] usb 10-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 725.129851][ T4736] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 725.156482][ T4736] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.189679][ T4736] usb 10-1: Product: syz [ 725.209359][ T4736] usb 10-1: Manufacturer: syz [ 725.231111][ T4736] usb 10-1: SerialNumber: syz [ 725.272455][ T4736] usb 10-1: config 0 descriptor?? [ 725.361226][ T4736] radio-si470x 10-1:0.35: could not find interrupt in endpoint [ 725.390589][ T4736] radio-si470x: probe of 10-1:0.35 failed with error -5 [ 725.589588][ T4736] radio-raremono 10-1:0.35: this is not Thanko's Raremono. [ 725.649706][ T4736] usbhid 10-1:0.35: couldn't find an input interrupt endpoint [ 725.739772][ T4736] usb 10-1: USB disconnect, device number 6 [ 726.735951][T10619] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1399'. [ 728.385280][T10644] nfs: Unknown parameter 'ÿÿÿÿ' [ 728.467937][ T4231] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 728.687956][ T4231] usb 9-1: device descriptor read/64, error -71 [ 728.967724][ T4231] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 729.167668][ T4231] usb 9-1: device descriptor read/64, error -71 [ 729.245912][T10655] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1409'. [ 729.307676][ T4231] usb usb9-port1: attempt power cycle [ 729.717338][ T4231] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 729.817416][ T4231] usb 9-1: device descriptor read/8, error -71 [ 729.917713][ T8138] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 730.097292][ T4231] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 730.207301][ T4231] usb 9-1: device descriptor read/8, error -71 [ 730.328390][ T4231] usb usb9-port1: unable to enumerate USB device [ 730.457112][ T8138] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.577471][ T8138] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 731.466526][ T8138] usb 10-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 731.479053][ T8138] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.493768][ T8138] usb 10-1: Product: syz [ 731.498485][ T8138] usb 10-1: Manufacturer: syz [ 731.503314][ T8138] usb 10-1: SerialNumber: syz [ 731.512423][ T8138] usb 10-1: config 0 descriptor?? [ 733.389714][T10691] nfs: Unknown parameter 'ÿÿÿÿ' [ 735.335198][T10703] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1421'. [ 735.354844][ T4229] usb 10-1: USB disconnect, device number 7 [ 736.034162][ T2240] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 736.244102][ T4229] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 736.254114][ T2240] usb 8-1: device descriptor read/64, error -71 [ 736.523974][ T2240] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 736.534011][ T4229] usb 3-1: Using ep0 maxpacket: 16 [ 736.763233][ T4229] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.781500][ T4229] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.802331][ T2240] usb 8-1: device descriptor read/64, error -71 [ 736.841818][ T4229] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 736.943726][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.647747][ T2240] usb usb8-port1: attempt power cycle [ 737.676528][ T4229] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 737.880565][ T4229] usb 3-1: USB disconnect, device number 28 [ 738.073156][ T2240] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 738.203340][ T2240] usb 8-1: device descriptor read/8, error -71 [ 738.532902][ T2240] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 738.703249][ T2240] usb 8-1: device descriptor read/8, error -71 [ 738.858486][ T2240] usb usb8-port1: unable to enumerate USB device [ 739.724428][T10745] nfs: Unknown parameter 'ÿÿÿÿ' [ 739.915418][T10751] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 740.163827][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880600c3000: rx timeout, send abort [ 740.664778][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ce71400: rx timeout, send abort [ 740.904613][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880600c3000: abort rx timeout. Force session deactivation [ 740.992411][T10761] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1437'. [ 741.173034][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ce71400: abort rx timeout. Force session deactivation [ 741.647071][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'. [ 742.830841][ T4224] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 743.090742][ T4224] usb 9-1: Using ep0 maxpacket: 8 [ 743.220617][ T4224] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 743.301863][ T4224] usb 9-1: config 0 has no interface number 0 [ 743.318065][ T4224] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 743.330835][ T2240] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 744.173332][ T4224] usb 9-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 744.184311][ T4224] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 744.240063][ T4224] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 744.290140][ T4224] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.330068][ T2240] usb 5-1: device descriptor read/64, error -71 [ 744.350516][ T4224] usb 9-1: config 0 descriptor?? [ 744.481833][ T4224] ldusb 9-1:0.55: Interrupt in endpoint not found [ 744.647239][ T2240] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 745.082249][ T4224] usb 9-1: USB disconnect, device number 10 [ 745.289551][ T2240] usb 5-1: device descriptor read/64, error -71 [ 745.409729][ T2240] usb usb5-port1: attempt power cycle [ 745.828825][ T2240] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 746.240669][ T4231] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 746.319233][ T2240] usb 5-1: device descriptor read/8, error -71 [ 746.406109][T10804] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1449'. [ 747.102813][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.109329][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.428749][ T4231] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.452200][ T4231] usb 3-1: config 0 has no interfaces? [ 747.457884][ T4231] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 747.477778][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.514935][ T4231] usb 3-1: config 0 descriptor?? [ 748.358241][ T4231] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 748.859889][T10821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1455'. [ 748.902363][T10820] netlink: 'syz.9.1455': attribute type 10 has an invalid length. [ 748.918015][ T4231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.011563][T10830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 749.020939][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 749.207800][ T4231] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.218051][T10820] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1455'. [ 749.227255][ T4231] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 749.240281][ T4231] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 749.250659][ T4231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.263435][ T4231] usb 9-1: config 0 descriptor?? [ 750.251515][ T21] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 750.489679][ T4231] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 750.580427][ T7732] usb 3-1: USB disconnect, device number 29 [ 750.609357][ T4231] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 750.635239][ T4231] usb 9-1: USB disconnect, device number 11 [ 751.049731][ T21] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 751.155031][ T21] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 751.216717][ T7732] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 751.292983][ T21] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 751.452511][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.476541][ T7732] usb 3-1: device descriptor read/64, error -71 [ 751.615831][T10845] fido_id[10845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 751.641476][T10833] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 751.906267][ T7732] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 752.745355][T10855] vivid-002: disconnect [ 752.825721][ T7732] usb 3-1: device descriptor read/64, error -71 [ 753.106208][ T7732] usb usb3-port1: attempt power cycle [ 753.376645][T10853] vivid-002: reconnect [ 753.809505][ T4224] usb 8-1: USB disconnect, device number 16 [ 755.797175][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 755.826827][T10859] libceph: resolve '0..' (ret=-3): failed [ 755.860750][T10872] netlink: 'syz.2.1469': attribute type 10 has an invalid length. [ 755.997054][T10872] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1469'. [ 757.394817][ T2240] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 758.002852][T10897] device syzkaller0 entered promiscuous mode [ 758.051556][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1474'. [ 758.842756][ T4228] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 758.882821][ T2240] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 758.896367][ T2240] usb 10-1: can't read configurations, error -71 [ 759.067623][ T4228] usb 5-1: device descriptor read/64, error -71 [ 759.352593][ T4228] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 759.562381][ T4228] usb 5-1: device descriptor read/64, error -71 [ 759.682444][ T4228] usb usb5-port1: attempt power cycle [ 760.901699][ T4228] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 761.112316][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1475'. [ 761.178779][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1479'. [ 762.109445][ T4228] usb 5-1: device descriptor read/8, error -71 [ 762.816453][T10935] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1484'. [ 762.919608][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1487'. [ 763.068714][T10941] netlink: 'syz.8.1487': attribute type 10 has an invalid length. [ 763.076622][T10941] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1487'. [ 764.010258][ T21] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 764.150121][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1491'. [ 764.390151][ T21] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.421131][ T21] usb 10-1: config 0 has no interfaces? [ 764.456939][ T21] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 764.470007][ T8138] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 764.504645][ T21] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.548993][ T21] usb 10-1: config 0 descriptor?? [ 765.100383][ T8138] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 765.749277][ T8138] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.763194][ T8138] usb 8-1: Product: syz [ 765.767656][ T8138] usb 8-1: Manufacturer: syz [ 765.772590][ T8138] usb 8-1: SerialNumber: syz [ 765.999611][T10971] kvm [10967]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xcf01 [ 766.012590][T10971] kvm [10967]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 766.044366][T10971] kvm [10967]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x1683 [ 766.058332][T10971] kvm [10967]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x82d4 [ 766.070304][T10971] kvm [10967]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x8465, nop [ 766.249170][ T8138] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 766.748910][ T8138] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 766.766292][ T8138] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 766.793195][ T8138] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 766.842587][ T21] usb 10-1: USB disconnect, device number 10 [ 767.227712][ T8138] lan78xx: probe of 8-1:1.0 failed with error -71 [ 767.240349][ T8138] usb 8-1: USB disconnect, device number 17 [ 768.638379][T10994] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 769.007722][ T21] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 769.164467][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1501'. [ 769.198542][T10999] netlink: 'syz.9.1501': attribute type 10 has an invalid length. [ 769.206399][T10999] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1501'. [ 769.362920][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1495'. [ 769.597620][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.619104][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 769.647369][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.665933][ T21] usb 3-1: config 0 descriptor?? [ 770.237135][ T21] ath6kl: Failed to read usb control message: -71 [ 770.256605][ T21] ath6kl: Unable to read the bmi data from the device: -71 [ 770.286849][ T21] ath6kl: Unable to recv target info: -71 [ 770.338858][ T21] ath6kl: Failed to init ath6kl core: -71 [ 770.366309][ T21] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 770.387176][ T21] usb 3-1: USB disconnect, device number 33 [ 770.587083][ T4228] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 771.867054][ T4228] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 771.916160][ T4228] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.953439][ T4228] usb 10-1: config 0 has no interface number 0 [ 771.977018][ T4228] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 771.988610][ T4228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.286648][ T4228] usb 10-1: config 0 descriptor?? [ 772.384752][ T4228] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 772.779292][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 772.790218][T11044] netlink: 'syz.4.1514': attribute type 10 has an invalid length. [ 772.798177][T11044] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1514'. [ 774.157845][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 774.708807][ T4272] usb 10-1: USB disconnect, device number 11 [ 774.732493][T11068] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 776.014280][ T21] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 777.053616][ T21] usb 9-1: Using ep0 maxpacket: 16 [ 777.115372][T11078] device syzkaller0 entered promiscuous mode [ 777.193673][ T21] usb 9-1: unable to get BOS descriptor or descriptor too short [ 777.283571][ T21] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 777.301166][ T21] usb 9-1: can't read configurations, error -71 [ 780.130691][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1539'. [ 780.141843][T11127] netlink: 'syz.8.1539': attribute type 10 has an invalid length. [ 780.149801][T11127] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1539'. [ 780.295713][T11125] syz.2.1538 (11125) used greatest stack depth: 20856 bytes left [ 782.281758][ T6320] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 783.771944][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1553'. [ 785.046404][T11168] nfs: Unknown parameter 'ÿÿÿÿ' [ 786.896234][T11219] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1560'. [ 787.387339][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 788.225531][T11235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1570'. [ 788.234707][T11235] ksmbd: Unknown IPC event: 0, ignore. [ 788.271158][T11233] binder: 11232:11233 ioctl c018620c 200000000900 returned -1 [ 788.346933][T11233] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.318495][ T4226] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 789.697448][ T4226] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 789.710125][ T4226] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.733233][T11270] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 789.784252][ T4226] usb 10-1: config 0 descriptor?? [ 790.060235][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 790.267200][ T4226] ath6kl: Unsupported hardware version: 0x0 [ 790.488672][ T4226] ath6kl: Failed to init ath6kl core: -22 [ 790.532698][ T4226] ath6kl_usb: probe of 10-1:0.0 failed with error -22 [ 790.581968][ T4226] usb 10-1: USB disconnect, device number 12 [ 790.791150][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1585'. [ 793.300950][T11318] nfs: Unknown parameter 'ÿÿÿÿ' [ 794.138964][T11355] program syz.9.1608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.283516][T11357] vivid-004: disconnect [ 794.347430][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1601'. [ 794.485038][T11356] vivid-004: reconnect [ 795.733469][T11389] kvm: pic: non byte write [ 795.866567][T11379] nfs: Unknown parameter 'ÿÿÿÿ' [ 796.994264][ T4226] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 797.333514][ T4226] usb 8-1: Using ep0 maxpacket: 16 [ 797.483680][ T4226] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.554871][ T4226] usb 8-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 797.703306][ T4226] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.857829][ T4226] usb 8-1: config 0 descriptor?? [ 797.965163][ T4226] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 800.641652][ T4272] usb 8-1: USB disconnect, device number 18 [ 801.098575][ T7732] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 801.791792][ T7732] usb 9-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 801.829793][ T7732] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.856633][ T7732] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.868730][ T7732] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.887584][ T7732] usb 9-1: config 0 descriptor?? [ 801.940572][ T7732] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 802.316461][T11475] loop2: detected capacity change from 0 to 7 [ 802.330025][ T7676] loop2: [ 802.337048][ T7676] loop2: partition table partially beyond EOD, truncated [ 802.359591][T11475] loop2: [ 802.365372][T11475] loop2: partition table partially beyond EOD, truncated [ 804.701227][ T4228] usb 9-1: USB disconnect, device number 14 [ 808.589174][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.604264][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.679793][T11531] syz.8.1661 (11531): drop_caches: 2 [ 810.744585][T11582] loop5: detected capacity change from 0 to 7 [ 810.798475][T11582] Dev loop5: unable to read RDB block 7 [ 810.858374][T11582] loop5: AHDI p1 p2 [ 810.862333][T11582] loop5: partition table partially beyond EOD, truncated [ 810.871296][T11582] loop5: p1 size 150995456 extends beyond EOD, truncated [ 811.253372][ T7676] udevd[7676]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 811.576371][ T4228] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 811.650042][ T8138] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 811.836220][ T4228] usb 3-1: Using ep0 maxpacket: 8 [ 811.976287][ T4228] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 812.013637][ T4228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 812.016898][ T8138] usb 8-1: config 0 has no interfaces? [ 812.066147][ T4228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 812.098807][ T4228] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.151448][ T4228] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 812.181291][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.196256][ T8138] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 812.223650][ T8138] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.269063][ T8138] usb 8-1: Product: syz [ 812.296119][ T8138] usb 8-1: Manufacturer: syz [ 812.300786][ T8138] usb 8-1: SerialNumber: syz [ 812.338492][ T8138] usb 8-1: config 0 descriptor?? [ 812.513468][ T4228] usb 3-1: GET_CAPABILITIES returned 0 [ 812.519210][ T4228] usbtmc 3-1:16.0: can't read capabilities [ 812.607410][T11606] vivid-004: disconnect [ 812.726178][T11602] vivid-004: reconnect [ 812.735796][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.745138][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.754222][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.763284][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.772331][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.781383][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.790660][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.799829][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.808899][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.817963][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.827021][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.836073][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.845238][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.854592][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.863673][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.872767][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 812.945630][ T4228] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 813.211245][ T4226] usb 8-1: USB disconnect, device number 19 [ 813.217610][ T4224] usb 3-1: USB disconnect, device number 34 [ 815.097704][ T4317] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 815.175680][ T4228] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 815.264272][ T4228] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.321832][ T4228] usb 9-1: Product: syz [ 815.341954][ T4228] usb 9-1: Manufacturer: syz [ 815.342234][ T4228] usb 9-1: SerialNumber: syz [ 815.360897][ T4228] usb 9-1: config 0 descriptor?? [ 815.754411][ T4228] usb 9-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 815.776166][ T4228] usb 9-1: Firmware version (0.0) predates our first public release. [ 815.814213][ T4228] usb 9-1: Please update to version 0.2 or newer [ 816.033821][ T4228] usb 9-1: atusb_probe: initialization failed, error = -71 [ 816.051781][ T4228] atusb: probe of 9-1:0.0 failed with error -71 [ 816.126541][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1693'. [ 816.485730][T11643] vivid-000: disconnect [ 816.524100][ T4228] usb 9-1: USB disconnect, device number 15 [ 816.649759][T11637] vivid-000: reconnect [ 817.263535][ T4226] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 817.326736][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1701'. [ 818.458066][ T4226] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 818.478116][ T4226] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.530029][ T4226] usb 8-1: config 0 descriptor?? [ 818.598987][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 819.033109][ T4226] ath6kl: Unsupported hardware version: 0x0 [ 819.671607][ T4226] ath6kl: Failed to init ath6kl core: -22 [ 819.692116][T11675] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1705'. [ 819.708880][T11675] netlink: 'syz.8.1705': attribute type 10 has an invalid length. [ 819.716757][T11675] netlink: 240 bytes leftover after parsing attributes in process `syz.8.1705'. [ 819.752808][ T4226] ath6kl_usb: probe of 8-1:0.0 failed with error -22 [ 819.783605][ T4226] usb 8-1: USB disconnect, device number 20 [ 820.249477][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1708'. [ 820.594538][T11684] vivid-004: disconnect [ 820.782142][T11681] vivid-004: reconnect [ 821.877745][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1714'. [ 823.316523][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 823.347166][T11719] netlink: 'syz.4.1718': attribute type 10 has an invalid length. [ 823.355497][T11719] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1718'. [ 824.989661][ T4231] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 825.289482][ T4231] usb 9-1: Using ep0 maxpacket: 32 [ 825.649400][ T4231] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 825.657795][ T4231] usb 9-1: config 0 has no interface number 0 [ 825.695657][ T4231] usb 9-1: config 0 interface 184 has no altsetting 0 [ 826.069278][ T4231] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 826.093739][ T4231] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.130163][ T4231] usb 9-1: Product: syz [ 826.175165][ T4231] usb 9-1: Manufacturer: syz [ 826.192669][ T4231] usb 9-1: SerialNumber: syz [ 826.320216][ T4231] usb 9-1: config 0 descriptor?? [ 826.360368][ T4231] smsc75xx v1.0.0 [ 826.456445][T11744] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1724'. [ 827.292847][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1725'. [ 828.258269][ T8138] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 828.937841][ T8138] usb 3-1: Using ep0 maxpacket: 16 [ 829.057839][ T8138] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.093952][ T8138] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.117672][ T8138] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 829.127894][ T8138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.650013][ T8138] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 829.851710][ T8138] usb 3-1: USB disconnect, device number 35 [ 830.097178][ T4231] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 830.156766][ T4231] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 830.209392][ T4231] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 830.420376][ T4231] smsc75xx: probe of 9-1:0.184 failed with error -71 [ 830.444591][ T4231] usb 9-1: USB disconnect, device number 16 [ 830.566803][T11783] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1735'. [ 831.338076][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 835.984158][ T2240] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 836.278837][T11827] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1746'. [ 837.023839][ T2240] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 837.036447][ T2240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.060444][ T2240] usb 3-1: config 0 descriptor?? [ 837.563803][ T2240] ath6kl: Unsupported hardware version: 0x0 [ 838.014297][ T2240] ath6kl: Failed to init ath6kl core: -22 [ 838.042804][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1748'. [ 838.084102][ T2240] ath6kl_usb: probe of 3-1:0.0 failed with error -22 [ 838.099082][T11832] netlink: 'syz.9.1748': attribute type 10 has an invalid length. [ 838.107784][T11832] netlink: 240 bytes leftover after parsing attributes in process `syz.9.1748'. [ 838.131587][ T2240] usb 3-1: USB disconnect, device number 36 [ 843.637160][T11874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1758'. [ 844.487007][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 844.595417][T11876] device hsr_slave_0 left promiscuous mode [ 844.689604][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1760'. [ 844.707635][T11878] netlink: 'syz.7.1760': attribute type 10 has an invalid length. [ 844.715563][T11878] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1760'. [ 845.609374][ T4228] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 846.890185][ T6320] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 847.413865][ T4228] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 847.456756][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.510155][ T4228] usb 5-1: config 0 descriptor?? [ 848.697990][ T4228] ath6kl: Unsupported hardware version: 0x0 [ 848.940452][ T4228] ath6kl: Failed to init ath6kl core: -22 [ 849.048802][T11915] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1770'. [ 849.827747][ T4228] ath6kl_usb: probe of 5-1:0.0 failed with error -22 [ 849.863386][ T4228] usb 5-1: USB disconnect, device number 32 [ 850.027839][T11922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1773'. [ 850.038953][T11922] netlink: 'syz.2.1773': attribute type 10 has an invalid length. [ 850.046799][T11922] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1773'. [ 850.546889][ T4228] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 851.066671][ T4228] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 851.077107][ T4228] usb 5-1: config 0 has no interface number 0 [ 851.090862][ T4228] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 851.106626][ T4228] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 851.115866][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.148733][ T4228] usb 5-1: config 0 descriptor?? [ 851.298303][ T4228] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 853.815511][ T23] usb 5-1: USB disconnect, device number 33 [ 854.201641][T11952] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 856.044556][T11970] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1782'. [ 857.283488][ T4224] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 857.543406][ T4224] usb 5-1: Using ep0 maxpacket: 8 [ 857.714142][ T4224] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 857.747403][ T4224] usb 5-1: config 0 has no interface number 0 [ 857.792564][ T4224] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 857.913484][ T4224] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 857.942681][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 858.141074][ T4224] usb 5-1: Product: syz [ 858.163479][ T4224] usb 5-1: config 0 descriptor?? [ 858.207186][ T4224] iowarrior 5-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 858.333015][ T4272] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 858.812834][ T4272] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 858.824303][ T4272] usb 9-1: config 0 has no interface number 0 [ 858.833211][ T4272] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.843184][ T4272] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 858.852344][ T4272] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.867717][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 858.908033][ T4272] usb 9-1: config 0 descriptor?? [ 859.333490][ T4272] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 860.582476][ T2240] usb 5-1: USB disconnect, device number 34 [ 861.083231][T12012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1795'. [ 862.564545][ T23] usb 9-1: USB disconnect, device number 17 [ 862.903523][T12030] device syzkaller0 entered promiscuous mode [ 864.066028][ T4224] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 864.322828][T12048] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 864.366987][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1805'. [ 864.650691][ T4224] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 864.720219][ T4224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.181469][ T4224] usb 10-1: config 0 descriptor?? [ 866.079308][ T4224] ath6kl: Unsupported hardware version: 0x0 [ 866.094791][T12066] device ip6gre1 entered promiscuous mode [ 866.277774][T12061] vivid-002: disconnect [ 866.301051][ T4224] ath6kl: Failed to init ath6kl core: -22 [ 866.695053][ T4224] ath6kl_usb: probe of 10-1:0.0 failed with error -22 [ 866.780311][ T4224] usb 10-1: USB disconnect, device number 13 [ 867.238990][T12057] vivid-002: reconnect [ 869.048403][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1817'. [ 869.378432][T12100] nfs: Unknown parameter 'ÿÿÿÿ' [ 869.923815][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.933151][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.371416][T12097] kvm [12094]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xc7000000f5 [ 870.566466][T12097] kvm [12094]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 870.584360][T12097] kvm [12094]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x900000007 [ 870.594435][T12097] kvm [12094]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 871.847595][T12125] vivid-000: disconnect [ 872.003005][T12120] vivid-000: reconnect [ 872.392669][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 873.054737][ T8138] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 873.455570][ T8138] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 873.478506][ T8138] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.531036][ T8138] usb 9-1: config 0 descriptor?? [ 874.624816][ T8138] ath6kl: Failed to submit usb control message: -71 [ 874.631528][ T8138] ath6kl: unable to send the bmi data to the device: -71 [ 874.683962][ T8138] ath6kl: Unable to send get target info: -71 [ 874.744421][ T8138] ath6kl: Failed to init ath6kl core: -71 [ 874.814898][ T8138] ath6kl_usb: probe of 9-1:0.0 failed with error -71 [ 874.839640][ T8138] usb 9-1: USB disconnect, device number 18 [ 875.216744][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1835'. [ 875.804401][T12170] nfs: Unknown parameter 'ÿÿÿÿ' [ 876.159679][T12184] vivid-004: disconnect [ 877.046514][T12182] vivid-004: reconnect [ 878.595846][T12203] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1843'. [ 879.383352][ T741] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 879.826550][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1847'. [ 880.022190][ T2240] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 881.018997][T12224] vivid-000: disconnect [ 881.102184][ T2240] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.648523][T12219] vivid-000: reconnect [ 881.741291][ T2240] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 881.789167][ T2240] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.924733][ T2240] usb 10-1: config 0 descriptor?? [ 882.264951][ T2240] keyspan 10-1:0.0: Keyspan 2 port adapter converter detected [ 882.857511][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 87 [ 882.889114][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 7 [ 883.785991][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 81 [ 883.850160][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 82 [ 883.880464][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 1 [ 883.888150][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 2 [ 884.101007][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 85 [ 884.108844][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 5 [ 884.121647][T12231] nfs: Unknown parameter 'ÿÿÿÿ' [ 884.184117][ T2240] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 884.241817][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 83 [ 884.264980][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 84 [ 884.286810][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 3 [ 884.346234][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 4 [ 884.384194][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 86 [ 884.399889][ T2240] keyspan 10-1:0.0: found no endpoint descriptor for endpoint 6 [ 884.429486][ T2240] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 884.520036][ T2240] usb 10-1: USB disconnect, device number 14 [ 884.552443][ T2240] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 884.696150][ T2240] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 884.706764][ T2240] keyspan 10-1:0.0: device disconnected [ 884.821279][T12242] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1857'. [ 886.029218][ T2240] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 886.488940][ T2240] usb 5-1: Using ep0 maxpacket: 16 [ 886.608963][ T2240] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.626896][ T2240] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.638051][ T2240] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 886.647557][ T2240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.251751][ T2240] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 889.181012][ T2240] usb 5-1: USB disconnect, device number 35 [ 891.165572][T12293] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1871'. [ 891.186571][ T2240] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 892.306013][ T2240] usb 5-1: config 6 has an invalid interface number: 20 but max is 0 [ 892.324631][ T2240] usb 5-1: config 6 has no interface number 0 [ 892.344934][ T2240] usb 5-1: config 6 interface 20 has no altsetting 0 [ 892.626022][ T2240] usb 5-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 892.645793][ T2240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.675133][ T2240] usb 5-1: Product: syz [ 892.681614][ T2240] usb 5-1: Manufacturer: syz [ 892.695771][ T2240] usb 5-1: SerialNumber: syz [ 893.064586][T12313] udc-core: couldn't find an available UDC or it's busy [ 893.088517][T12313] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 893.406816][ T2240] usb 5-1: Could not find all expected endpoints [ 893.457456][ T2240] usb 5-1: USB disconnect, device number 36 [ 894.878502][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 903.242412][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1884'. [ 904.278046][T12391] device bond1 entered promiscuous mode [ 904.782658][T12391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 907.678970][T12425] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 907.687325][T12425] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1909'. [ 909.763754][T12436] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1910'. [ 910.836819][ T4231] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 910.906766][ T4228] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 911.076780][ T4231] usb 9-1: Using ep0 maxpacket: 16 [ 911.200184][ T4231] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.211655][ T4228] usb 10-1: no configurations [ 911.219981][ T4228] usb 10-1: can't read configurations, error -22 [ 911.235930][ T4231] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.256439][ T4231] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 911.298352][ T4231] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.399617][ T4228] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 911.686616][ T4228] usb 10-1: no configurations [ 911.691364][ T4228] usb 10-1: can't read configurations, error -22 [ 911.711174][ T4228] usb usb10-port1: attempt power cycle [ 911.803463][ T4231] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 912.347861][ T4224] usb 9-1: USB disconnect, device number 19 [ 912.395949][ T4228] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 912.696088][ T4228] usb 10-1: no configurations [ 912.700834][ T4228] usb 10-1: can't read configurations, error -22 [ 912.893412][ T4317] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.083499][ T4228] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 914.185163][ T4228] usb 10-1: device descriptor read/8, error -71 [ 914.326963][ T4228] usb usb10-port1: unable to enumerate USB device [ 918.020847][ T7732] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 918.793131][ T4231] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 919.102915][ T4231] usb 5-1: no configurations [ 919.107575][ T4231] usb 5-1: can't read configurations, error -22 [ 919.202811][ T7732] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 919.227464][ T7732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.288964][ T7732] usb 3-1: config 0 descriptor?? [ 919.294114][ T4231] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 919.572527][ T4231] usb 5-1: no configurations [ 919.577174][ T4231] usb 5-1: can't read configurations, error -22 [ 919.615304][ T4231] usb usb5-port1: attempt power cycle [ 919.782358][ T7732] ath6kl: Unsupported hardware version: 0x0 [ 920.003278][ T7732] ath6kl: Failed to init ath6kl core: -22 [ 920.032235][ T4231] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 920.051016][ T7732] ath6kl_usb: probe of 3-1:0.0 failed with error -22 [ 920.091363][ T7732] usb 3-1: USB disconnect, device number 37 [ 920.172294][ T4231] usb 5-1: no configurations [ 920.176936][ T4231] usb 5-1: can't read configurations, error -22 [ 920.331983][ T4231] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 920.472103][ T4231] usb 5-1: no configurations [ 920.476760][ T4231] usb 5-1: can't read configurations, error -22 [ 920.513542][ T4231] usb usb5-port1: unable to enumerate USB device [ 922.245923][ T4226] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 922.730781][ T4226] usb 3-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 922.850337][ T4226] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 923.149370][ T4226] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 923.350613][ T4226] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 923.360233][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.406952][ T4226] usb 3-1: Product: syz [ 923.840318][ T4226] usb 3-1: Manufacturer: syz [ 923.845043][ T4226] usb 3-1: SerialNumber: syz [ 924.080108][ T4226] usb 3-1: can't set config #255, error -71 [ 924.090380][ T4226] usb 3-1: USB disconnect, device number 38 [ 926.149140][ T4226] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 926.529633][ T4226] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 926.578848][ T4226] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.632461][ T4226] usb 9-1: config 0 descriptor?? [ 926.986116][ T7732] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 927.438760][ T4226] ath6kl: Unsupported hardware version: 0x0 [ 927.659425][ T4226] ath6kl: Failed to init ath6kl core: -22 [ 927.732740][ T4226] ath6kl_usb: probe of 9-1:0.0 failed with error -22 [ 927.739711][ T7732] usb 3-1: no configurations [ 927.739730][ T7732] usb 3-1: can't read configurations, error -22 [ 927.810406][ T4226] usb 9-1: USB disconnect, device number 20 [ 927.898264][ T7732] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 928.201906][ T7732] usb 3-1: no configurations [ 928.223302][ T7732] usb 3-1: can't read configurations, error -22 [ 928.281517][ T7732] usb usb3-port1: attempt power cycle [ 928.400050][T12590] netlink: 'syz.8.1958': attribute type 10 has an invalid length. [ 928.410477][T12590] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1958'. [ 929.157500][ T7732] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 929.457585][ T7732] usb 3-1: no configurations [ 929.466010][ T7732] usb 3-1: can't read configurations, error -22 [ 929.637276][ T7732] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 929.906504][ T21] usb 9-1: new low-speed USB device number 21 using dummy_hcd [ 929.914106][ T7732] usb 3-1: device not accepting address 42, error -71 [ 929.921128][ T7732] usb usb3-port1: unable to enumerate USB device [ 930.946767][ T21] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 931.006735][ T21] usb 9-1: config 0 has no interface number 0 [ 931.060864][ T21] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 931.199270][ T21] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 931.211303][ T21] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 931.220749][ T21] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.235221][ T21] usb 9-1: config 0 descriptor?? [ 931.269802][T12616] binder: 12615:12616 ioctl c018620c 200000000900 returned -1 [ 931.306800][T12598] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 931.329451][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.335871][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.348479][T12616] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.378608][ T21] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 931.402863][T12622] program syz.4.1967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 931.474381][T12622] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 932.655925][ T2240] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 932.945933][ T2240] usb 5-1: Using ep0 maxpacket: 8 [ 933.096353][ T2240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 933.111906][ T2240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 933.125009][ T2240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 933.135192][ T2240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 933.148518][ T2240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 933.157745][ T2240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.425626][ T2240] usb 5-1: GET_CAPABILITIES returned 0 [ 933.431536][ T2240] usbtmc 5-1:16.0: can't read capabilities [ 933.587784][ T2240] usb 9-1: USB disconnect, device number 21 [ 933.633585][T12622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1967'. [ 933.685690][ T4226] usb 5-1: USB disconnect, device number 41 [ 933.844116][T12645] netlink: 'syz.8.1971': attribute type 10 has an invalid length. [ 933.852188][T12645] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1971'. [ 939.258175][ T4226] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 940.182160][ T4226] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 940.268036][T12697] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1984'. [ 941.023726][ T4226] usb 3-1: config 0 has no interface number 0 [ 941.029887][ T4226] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 941.097090][ T4226] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 941.139857][ T4226] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 941.191479][ T4226] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.217668][ T4226] usb 3-1: config 0 descriptor?? [ 941.261796][ T4226] usb 3-1: can't set config #0, error -71 [ 941.277512][ T4226] usb 3-1: USB disconnect, device number 43 [ 945.762002][T12739] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1997'. [ 946.549730][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 947.678347][ T4226] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 948.748013][ T4226] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 948.772839][ T4226] usb 9-1: config 0 has no interface number 0 [ 948.799436][ T4226] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 948.842903][ T4226] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 948.886815][ T4226] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 948.947612][ T4226] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.024066][ T4226] usb 9-1: config 0 descriptor?? [ 949.057963][T12748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 949.199842][ T4226] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 951.217367][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2005'. [ 952.169611][ T4226] usb 9-1: USB disconnect, device number 22 [ 952.187405][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 953.429982][T12802] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2010'. [ 955.339432][T12816] netlink: 'syz.8.2015': attribute type 10 has an invalid length. [ 955.347371][T12816] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2015'. [ 957.043905][ T2240] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 957.143560][ T4224] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 957.463709][ T2240] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 957.473380][ T4224] usb 9-1: Using ep0 maxpacket: 16 [ 957.525156][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2019'. [ 958.534068][ T2240] usb 3-1: config 0 has no interface number 0 [ 958.540206][ T2240] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 958.573005][ T4224] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.601136][ T4224] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.632761][ T2240] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 958.904375][ T4224] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 958.913831][ T2240] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 958.923128][ T4224] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.931980][ T2240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.964095][ T2240] usb 3-1: config 0 descriptor?? [ 958.983638][T12819] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 959.554114][ T2240] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 959.604907][ T4224] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 959.677492][ T2240] usb 3-1: USB disconnect, device number 44 [ 959.810539][ T4224] usb 9-1: USB disconnect, device number 23 [ 960.257857][T12847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2023'. [ 961.090301][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2024'. [ 962.102110][T12865] netlink: 'syz.4.2027': attribute type 10 has an invalid length. [ 962.110140][T12865] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2027'. [ 965.909134][ T4736] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 966.176741][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2035'. [ 966.219028][ T4224] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 967.208512][ T4224] usb 10-1: Using ep0 maxpacket: 16 [ 967.208629][ T4736] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 967.278484][ T4736] usb 3-1: config 0 has no interface number 0 [ 967.315297][ T4736] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 967.364270][ T4224] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.410598][ T4736] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 967.518797][ T4736] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 967.538253][ T4736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.664970][ T4736] usb 3-1: config 0 descriptor?? [ 967.793740][T12887] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 967.975229][ T4224] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.996435][ T4736] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 968.158616][ T4224] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 968.248010][ T4224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.649853][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2038'. [ 968.805652][ T4224] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 969.003076][ T4224] usb 10-1: USB disconnect, device number 19 [ 969.544047][ T4224] usb 3-1: USB disconnect, device number 45 [ 970.251475][T12931] netlink: 'syz.9.2046': attribute type 10 has an invalid length. [ 970.259620][T12931] netlink: 256 bytes leftover after parsing attributes in process `syz.9.2046'. [ 971.680306][ T26] audit: type=1326 audit(1772695580.984:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.9.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837e494799 code=0x7ffc0000 [ 971.810969][ T26] audit: type=1326 audit(1772695581.004:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.9.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f837e494799 code=0x7ffc0000 [ 971.995276][ T26] audit: type=1326 audit(1772695581.004:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.9.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f837e494799 code=0x7ffc0000 [ 973.415731][ T2240] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 973.746717][ T2240] usb 10-1: Using ep0 maxpacket: 16 [ 974.169235][ T2240] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.424934][ T2240] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.494940][ T2240] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 974.510142][ T2240] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.524810][ T7732] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 975.204689][ T7732] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 975.212765][ T7732] usb 5-1: config 0 has no interface number 0 [ 975.290325][ T7732] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 975.348299][ T7732] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 975.383454][ T7732] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 975.400185][ T2240] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 975.447171][ T7732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.527317][ T7732] usb 5-1: config 0 descriptor?? [ 975.584544][T12961] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 975.608914][ T7732] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 975.623188][ T13] usb 10-1: USB disconnect, device number 20 [ 976.099932][T12983] netlink: 'syz.8.2059': attribute type 10 has an invalid length. [ 976.108038][T12983] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2059'. [ 979.778545][T13002] 9pnet: Insufficient options for proto=fd [ 980.650361][ T741] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 983.270429][ T4736] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 983.365082][T13040] netlink: 'syz.8.2073': attribute type 10 has an invalid length. [ 983.373110][T13040] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2073'. [ 983.520356][ T4736] usb 10-1: Using ep0 maxpacket: 16 [ 984.177754][ T4736] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.221363][ T4736] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.301556][ T4736] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 984.342637][ T4736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.885602][T13055] 9pnet: Insufficient options for proto=fd [ 985.653861][ T4736] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 986.262001][ T4736] usb 10-1: USB disconnect, device number 21 [ 986.525482][ T4228] usb 5-1: USB disconnect, device number 42 [ 987.992205][T13090] 9pnet: Insufficient options for proto=fd [ 990.146978][ T4224] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 990.417033][ T4224] usb 10-1: Using ep0 maxpacket: 16 [ 990.566953][ T4224] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.616775][ T4224] usb 10-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.663185][ T4224] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 990.826629][ T4224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.969497][T13121] device syzkaller0 entered promiscuous mode [ 991.988476][ T4224] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 992.739602][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.746115][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.102833][ T4224] usb 10-1: USB disconnect, device number 22 [ 993.345545][ T4228] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 993.594024][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2101'. [ 993.648678][ T4224] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 993.715406][ T4228] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 993.723471][ T4228] usb 3-1: config 0 has no interface number 0 [ 993.750097][ T4228] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 993.785391][ T4228] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 993.846212][ T4228] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 993.892510][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.945129][ T4228] usb 3-1: config 0 descriptor?? [ 993.985380][T13128] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 994.020350][ T4228] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 994.035089][ T4224] usb 10-1: config 6 has an invalid interface number: 20 but max is 0 [ 994.043318][ T4224] usb 10-1: config 6 has no interface number 0 [ 994.299822][ T4224] usb 10-1: config 6 interface 20 has no altsetting 0 [ 995.184566][ T4224] usb 10-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 995.203439][ T4224] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.235392][ T4224] usb 10-1: Product: syz [ 995.251036][ T4224] usb 10-1: Manufacturer: syz [ 995.264558][ T4224] usb 10-1: SerialNumber: syz [ 995.682172][T13149] udc-core: couldn't find an available UDC or it's busy [ 995.721943][T13149] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 996.422056][T13151] overlayfs: missing 'lowerdir' [ 998.363013][ T4226] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 998.393569][ T4224] usb 10-1: Could not find all expected endpoints [ 998.412524][ T4224] usb 10-1: USB disconnect, device number 23 [ 998.764017][T13169] device syzkaller0 entered promiscuous mode [ 998.942926][ T4228] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 998.972626][ T4226] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 999.002220][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.057465][ T4226] usb 5-1: Product: syz [ 999.072665][ T4226] usb 5-1: Manufacturer: syz [ 999.102619][ T4226] usb 5-1: SerialNumber: syz [ 999.183136][ T4228] usb 9-1: Using ep0 maxpacket: 16 [ 999.322627][ T4228] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.375994][ T4228] usb 9-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.432452][ T4228] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 999.492366][ T4228] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.948617][ T13] usb 3-1: USB disconnect, device number 46 [ 1000.064795][ T4228] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1000.270441][ T4272] usb 9-1: USB disconnect, device number 24 [ 1001.404373][T13162] netlink: 'syz.4.2106': attribute type 10 has an invalid length. [ 1002.058464][T13199] overlayfs: missing 'lowerdir' [ 1003.050721][ T21] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1003.332754][T13162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.343218][T13162] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1003.380488][ T21] usb 9-1: Using ep0 maxpacket: 32 [ 1003.560390][ T21] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.840424][ T21] usb 9-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1003.849507][ T21] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.934835][ T21] usb 9-1: Product: syz [ 1003.939222][ T21] usb 9-1: Manufacturer: syz [ 1003.969648][ T21] usb 9-1: SerialNumber: syz [ 1004.003896][T13207] device syzkaller0 entered promiscuous mode [ 1004.104983][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1004.121326][T13162] syz.4.2106 (13162) used greatest stack depth: 20656 bytes left [ 1004.210107][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1004.279981][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1004.328575][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1004.391400][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1004.419986][ T4226] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1004.467148][T13194] netlink: 'syz.8.2116': attribute type 4 has an invalid length. [ 1004.495869][ T4226] usb 5-1: USB disconnect, device number 43 [ 1004.591697][ T21] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 1004.611561][ T21] usb 9-1: USB disconnect, device number 25 [ 1005.938093][T13225] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2127'. [ 1005.949106][ T4736] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 1006.109059][ T7732] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1006.309137][ T4736] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1006.339028][ T4736] usb 10-1: config 0 has no interface number 0 [ 1006.368913][ T7732] usb 5-1: Using ep0 maxpacket: 16 [ 1006.399664][ T4736] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1006.449484][ T4736] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1006.489053][ T7732] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.504526][ T4736] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1006.524161][ T7732] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.542162][ T4736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.766638][ T7732] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1006.807675][ T4736] usb 10-1: config 0 descriptor?? [ 1006.817381][ T7732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.019547][T13234] overlayfs: missing 'lowerdir' [ 1007.058585][ T13] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1007.251087][T13221] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1007.327783][ T4736] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1007.388938][ T7732] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1007.579029][T13223] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 1007.590903][T13223] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1007.599355][T13223] CPU: 0 PID: 13223 Comm: syz.4.2126 Not tainted syzkaller #0 [ 1007.606848][T13223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1007.616937][T13223] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 1007.622424][T13223] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 16 a0 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 f8 9f 55 fa 4c 8b 3b 4d 8d a7 70 [ 1007.642059][T13223] RSP: 0018:ffffc900032cf9a0 EFLAGS: 00010246 [ 1007.648151][T13223] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 1007.656145][T13223] RDX: ffffc9000e7c9000 RSI: 00000000000003e9 RDI: 00000000000003ea [ 1007.664245][T13223] RBP: 0000000000000006 R08: 0000000000000006 R09: 0000000000000005 [ 1007.672246][T13223] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: dffffc0000000000 [ 1007.680274][T13223] R13: 0000000000000000 R14: 0000000000000005 R15: dffffc0000000000 [ 1007.688390][T13223] FS: 00007f750dcf16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1007.697342][T13223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1007.703951][T13223] CR2: 000055557e49c4e8 CR3: 00000000300db000 CR4: 00000000003506f0 [ 1007.711944][T13223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1007.719911][T13223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1007.727881][T13223] Call Trace: [ 1007.731155][T13223] [ 1007.734086][T13223] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 1007.739049][T13223] ? mcp_i2c_xfer+0x420/0x420 [ 1007.743754][T13223] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 1007.750034][T13223] ? rt_mutex_lock_nested+0x1a4/0x210 [ 1007.755495][T13223] ? i2c_smbus_xfer+0x120/0x3b0 [ 1007.760346][T13223] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 1007.766071][T13223] ? __might_fault+0xb7/0x110 [ 1007.770762][T13223] i2c_smbus_xfer+0x272/0x3b0 [ 1007.775433][T13223] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 1007.780715][T13223] ? __might_fault+0xb3/0x110 [ 1007.785410][T13223] i2cdev_ioctl_smbus+0x432/0x680 [ 1007.790455][T13223] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 1007.795575][T13223] ? __might_fault+0xb3/0x110 [ 1007.800285][T13223] ? _copy_from_user+0x111/0x170 [ 1007.805223][T13223] i2cdev_ioctl+0x583/0x7b0 [ 1007.809729][T13223] ? i2cdev_write+0x120/0x120 [ 1007.814454][T13223] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1007.819425][T13223] ? security_file_ioctl+0x7c/0xa0 [ 1007.824546][T13223] ? i2cdev_write+0x120/0x120 [ 1007.829236][T13223] __se_sys_ioctl+0xfa/0x170 [ 1007.833832][T13223] do_syscall_64+0x4c/0xa0 [ 1007.838311][T13223] ? clear_bhb_loop+0x30/0x80 [ 1007.843018][T13223] ? clear_bhb_loop+0x30/0x80 [ 1007.847781][T13223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1007.853674][T13223] RIP: 0033:0x7f750fa97799 [ 1007.858094][T13223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.877699][T13223] RSP: 002b:00007f750dcf1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.886270][T13223] RAX: ffffffffffffffda RBX: 00007f750fd10fa0 RCX: 00007f750fa97799 [ 1007.894370][T13223] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 000000000000000a [ 1007.902466][T13223] RBP: 00007f750fb2dbd9 R08: 0000000000000000 R09: 0000000000000000 [ 1007.910553][T13223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.918529][T13223] R13: 00007f750fd11038 R14: 00007f750fd10fa0 R15: 00007ffe616130d8 [ 1007.926520][T13223] [ 1007.929554][T13223] Modules linked in: [ 1008.178108][T13223] ---[ end trace be16ea5647b80139 ]--- [ 1008.196125][T13223] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 1008.224328][T13223] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 16 a0 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 f8 9f 55 fa 4c 8b 3b 4d 8d a7 70 [ 1008.265652][T13223] RSP: 0018:ffffc900032cf9a0 EFLAGS: 00010246 [ 1008.282009][T13223] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 1008.308049][ T13] usb 9-1: config 6 has an invalid interface number: 20 but max is 0 [ 1008.315431][T13223] RDX: ffffc9000e7c9000 RSI: 00000000000003e9 RDI: 00000000000003ea [ 1008.327703][ T13] usb 9-1: config 6 has no interface number 0 [ 1008.352524][ T13] usb 9-1: config 6 interface 20 has no altsetting 0 [ 1008.359562][T13223] RBP: 0000000000000006 R08: 0000000000000006 R09: 0000000000000005 [ 1008.404793][T13223] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: dffffc0000000000 [ 1008.458005][T13223] R13: 0000000000000000 R14: 0000000000000005 R15: dffffc0000000000 [ 1008.508794][T13223] FS: 00007f750dcf16c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1008.538608][ T13] usb 9-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 1008.559040][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.581588][T13223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1008.593902][ T13] usb 9-1: Product: syz [ 1008.607750][ T7732] usb 5-1: reset high-speed USB device number 44 using dummy_hcd [ 1008.623649][ T13] usb 9-1: Manufacturer: syz [ 1008.635206][T13223] CR2: 00007f6779157158 CR3: 00000000300db000 CR4: 00000000003506e0 [ 1008.645928][ T13] usb 9-1: SerialNumber: syz [ 1008.948027][T13223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1008.956727][T13223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1008.983658][T13223] Kernel panic - not syncing: Fatal exception [ 1008.990084][T13223] Kernel Offset: disabled [ 1008.994423][T13223] Rebooting in 86400 seconds..