last executing test programs: 25.38804303s ago: executing program 2 (id=2114): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) socket(0x840000000002, 0x3, 0xfa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a010200000000000000000200000009000200"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1\x00', {0x2}, 0x7}) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 22.823842764s ago: executing program 2 (id=2119): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) sched_setattr(0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xab, @empty, 0x1}, 0x1c) setsockopt$inet6_mtu(r5, 0x29, 0x1e, &(0x7f00000000c0), 0x4) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) capget(0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x8044) sendto$inet6(r6, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 20.668698516s ago: executing program 2 (id=2125): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x0, 0x6, 0x2000000, 0x12000, 0x100000001, 0xda, 0x80, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7}) sendmsg$inet(r5, 0x0, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000004c0)) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c400000000002907800000000e000030011009078000000"], 0x0) syz_emit_ethernet(0x86, &(0x7f0000000640)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010182, @multicast1=0xe000c800, {[@rr={0x7, 0x13, 0x20, [@broadcast, @rand_addr=0x64010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @lsrr={0x83, 0xb, 0xe5, [@multicast1, @multicast1]}, @end]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0xffffffff, {{}, 0xfffff788, {0x8}}}}}}}}, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 17.329568333s ago: executing program 2 (id=2135): socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x5, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0xfe, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x7f, '\x00', 0xff}, {0x6, 0x5a, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0x8, '\x00', 0xfa}, {0x1, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x7}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x86, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0xb, 0x7f, 0xe0, '\x00', 0x47}]}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x0, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x6, 0x95, 0x7}}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000380)={0x1, 0x0, [{0x4000000b, 0x101, 0x1, 0x8, 0x8, 0x5, 0x4}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9001) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 15.959817732s ago: executing program 0 (id=2139): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x377, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x100800, 0x0, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000280)={0xfffffffe, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x16a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) rmdir(&(0x7f0000000040)='./control\x00') openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0xfffffffc, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a8) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) getdents64(r6, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='projid_map\x00') socket$key(0xf, 0x3, 0x2) 14.327216381s ago: executing program 1 (id=2142): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x1, 0x800, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0xff, 0x103}, 0x90) dup3(r1, r6, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000007c0)={0x9, 0x3132564e, 0x2, @discrete={0x1, 0x5}}) 13.834725975s ago: executing program 2 (id=2144): openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'wg0\x00', @ifru_mtu=0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbf, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) syz_open_dev$swradio(0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x8000) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001e0001030200a88e0ae37ef22b"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 13.593917993s ago: executing program 0 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000002800)={0x2020}, 0x2020) write$binfmt_elf64(r5, &(0x7f0000004840)=ANY=[@ANYBLOB="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"], 0x1256) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f0000000600)=0x51) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x90) 13.493580041s ago: executing program 2 (id=2146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 13.390839403s ago: executing program 1 (id=2147): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000380)={0x0, 0x10, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x301, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) recvfrom$rxrpc(r1, &(0x7f00000003c0)=""/92, 0x5c, 0x100, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) write$sysctl(r4, &(0x7f0000000180)='4\x00', 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES8, @ANYRESDEC, @ANYBLOB="8a96b5b1cb41cc6cddf50c4be17d728e2cb3436818b951770e0a3d79c92880699e5b2909179886496f13e415cab9d0794d54cf5075903075bdae1e574e0f3dac3688937db0571810ef9590d1d96f7ac3f72953ed90e080d8f34d0d1580a37ead8131174b4b5bb9dcd2be17607e41d1d42048f1504974f9bbdb2bc99676069585e5b7c27e6c5080406e6442926ca111eff156e0", @ANYRES16=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.90717565s ago: executing program 32 (id=2146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 11.896030865s ago: executing program 3 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x5) 11.891242634s ago: executing program 4 (id=2150): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r4, &(0x7f0000000380)=""/52, 0x34) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r5, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) syz_emit_ethernet(0xcd, &(0x7f0000000440)={@random="5aea4f8cf78e", @broadcast, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x2}, {0x101}, {0xfeb42}, {0xfff68}, {0x5}], @llc={@snap={0x1, 0x0, '/', "5048fb", 0x809b, "edea7dd559498ef2558ef7aa23ac7441f48fa7b474f3057c020d3b838559b32296f493ab8f591fb0f80dd590ddfe11a7564f18a1a2592fd06c414e9b3862770b032c214f2ceb67be42d638a4378b89fe89bbeabddd1869c264bb98dd1d591c42d3294f4f59de35d68348d8c4da808f734db878c735f0235b39203c2a52a1d411b714711ec3c50abe9559b22f5d32b02df23c5ab66b40f4988c93dc"}}}}}}, &(0x7f0000000180)={0x0, 0x4, [0x33f, 0x1cd, 0xe09, 0x27f]}) 11.727728153s ago: executing program 0 (id=2151): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x95, 0x102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e", 0xa4, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r6 = socket(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r7, 0x0, 0x1000002, 0x37, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10.71640639s ago: executing program 1 (id=2152): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x2, 0x3, 0x1, 0xab8d, 0x100}, 0x20) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x19) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xc4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc) clock_adjtime(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) 10.11284521s ago: executing program 3 (id=2153): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x1c8}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000300)="7a1cd8b80d9be8a07672d29b23d1bc46f2f027c158de0481cf5deb0c5d15b69e173c5b724cb26702d3d17a6db715986a6cdb80a56ad5daf33212c0cc67c3e3881c02ab6b84ce408dfe66db52d45c474404bdd7c09a8702bd5bf8f63592c9a12722fef5b8", &(0x7f0000000540)="c188d76fd7cbebb9caecb73e13275251345105892ffbef337ad311a174df1977fcfa9f620afd9784d73a59ebdb95edc9fef8799c845267c2e273840ef9fa4f7f0239a80ecbdd05a71e94a017970db149b5dbe7fe6319618aa995bed05a707db8cc72e7525a25b0500b6c69e47fb98d471b3c9bb6c1bad1e1d7c5ffd397379788e712d38b96c43b91a8ae05de97560e0515f7d5b9f5e5254e9270dffc407dc3e32caf686cf624f991278f5c6864570f4d7f4fd2fa2bbcde9de9167bbdf2de8f7a1dc2ae177a7c5aa3bed91151d5a2d6", 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@remote, @rand_addr=0x64010100, @multicast1}, 0xc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24002deb) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 9.812626748s ago: executing program 0 (id=2154): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e24, 0x0, @mcast2, 0x6a3}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1, {[0x5, 0xa526, 0x4, 0x3, 0xfffffff1, 0x98, 0x3b, 0x4]}}, 0x5c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000003600), 0x2, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f041}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020}, 0xcac) 8.337819515s ago: executing program 1 (id=2155): inotify_init() r0 = open(0x0, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x8924, &(0x7f0000000580)="943a") r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x81, 0x0, 0x9, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000002380)={0x48}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023893) flock(r0, 0x5) ftruncate(0xffffffffffffffff, 0x2007ffb) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) r7 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184153, 0x0) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000080)={r10, 0x3ff}, 0x8) 7.896567651s ago: executing program 4 (id=2156): r0 = getpgrp(0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000000c0)=r0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x29a, 0x18802) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="e002000000000000f9ffffffffffffff0500000000000000020000000000000003000000000000000200000000000000050000000800000006000000000000005b950000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f59000000030000002dedc32eff030000", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="010000000400000000000000020000000000000037050000000000002b000000010400003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000010000000000000000000000000000000900000000000000070000000000000006ec00000500000004000000000000002308000000000000060000000000000006000000000000000000010000000000030000000000000007000000020000000b0000000000000005", @ANYRES32=r7, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000010000000000000000400000000000000ff01000000000000050000002f0f", @ANYBLOB="5f385a725e763aa19a4bb463424803616b6ce01e06fc353e38398aa41da70f92a283cc99e03b3b61916aa33c5ca9156af668d9288b899c8273b1a9bef7f431091f29dd9d81", @ANYRESOCT=r5, @ANYBLOB="0600000000000000000100000000000000ffffffffffffff750200000001", @ANYRESOCT=r4, @ANYRES64=r9, @ANYBLOB="6b1b99ed74df2d499a5739fcc9f08b144a4f0713b82dd0b8c10d34117384652224f032aadbc119f54e2c2403e0f6c78cd48837c31e3189ebdb94805c4094ad0282213f5e1489796cf68b593bcf4f890efd415a1bde2dac6782a46d7b9bfdb7cb4abd0d890c5f186599edd1d289ec49d3a42077262de996e6d17a324755e91e7990566508d5274ddef3b56471ba47780a33a43d5e488ca74f99677a83f04d7d3e74ca21a15fbf5b2abe1b95432b092c44c94587702c", @ANYRES16=r2], 0x0, 0x0, 0x0}) getdents64(r8, &(0x7f0000000100)=""/134, 0x86) close_range(r2, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x6749, &(0x7f0000000000)={0x0, 0x6846, 0x80, 0x2, 0x215}) io_uring_register$IORING_REGISTER_FILES(r10, 0x1f, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x2}}, 0x20) rt_sigqueueinfo(0x0, 0x20, &(0x7f0000000000)={0x27, 0x800, 0x7}) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)=ANY=[@ANYRES32=r11], 0x1220}], 0x1, 0x0, 0x0, 0x20048060}, 0x4080) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, 0x0) 7.846161598s ago: executing program 0 (id=2157): socket$kcm(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$igmp6(0xa, 0x3, 0x2) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x8}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000e31000/0x4000)=nil, 0x4000, 0x17) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix={0x10001, 0x2, 0x50565559, 0x7, 0x6, 0x8ea, 0x6, 0x7, 0x1, 0x3, 0x1, 0x4}}) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000000100)={0x100087, 0x0, 0x100000, {r5}}, 0x20) 7.479349422s ago: executing program 4 (id=2158): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x5, 0x3, 0x3d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffa, @rand_addr, 0x5}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000180)=0x1) syz_io_uring_setup(0x4ce4, &(0x7f0000000200)={0x0, 0x3e1e, 0x400, 0x0, 0x182, 0x0, r3}, &(0x7f0000000040), &(0x7f00000002c0)) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xb}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) 7.477148534s ago: executing program 3 (id=2159): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000540)="b4e007f06d056aa0367c73", 0xb}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {0x0}, {&(0x7f0000000ac0)}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000090000000480080002400000000008000140000000000900010000008000000000004c000000060a010400000000000000000100000024000480200001800700010072740000140002"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.454297236s ago: executing program 3 (id=2160): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) socket$inet6_udplite(0xa, 0x2, 0x88) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) 6.122633031s ago: executing program 1 (id=2161): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 5.076746837s ago: executing program 0 (id=2162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}, 0x5) 4.102606707s ago: executing program 3 (id=2163): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x15) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00') r5 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)=0x7fff) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x7, 0xcc, 0x4}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "e82d3a5eb110e2a4850275b6c002899debbeb0c642e1205ef27e80"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084) 3.289542608s ago: executing program 4 (id=2164): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x2, 0x3, 0x1, 0xab8d, 0x100}, 0x20) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x19) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xc4) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201500000000010d90481a000000000000109022400010000000009040100010300000009210000000122080009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffc) clock_adjtime(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) 2.511890509s ago: executing program 1 (id=2165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0xbf, 0x80, 0x20203843, 0x2, [0x2], [0x80ffdc, 0x0, 0x300], [], [0x3ffffffffffffff]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r5, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0x8, '\x00', 0xb4}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7e}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x5, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x12, '\x00', 0x10}, {0x1, 0x3, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 1.218862732s ago: executing program 4 (id=2166): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfffffffb, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x25, &(0x7f00000001c0)={@local, @broadcast, 0x0}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000004", @ANYRES32=r3, @ANYRES32], 0x50) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r4, 0x540b, 0x0) 966.166926ms ago: executing program 3 (id=2167): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d00c}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x4800, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x9, 0xfffffe0000000001, 0x892, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = memfd_create(0x0, 0x7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_ACT={0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0xfffffa3c, 0x3f, 0x4, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000003, 0x11, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x0, 0xc}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x851}, 0x20048000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000004000070127bd7000f6dbdf25037c00000400c2800c00018008000300", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) kernel console output (not intermixed with test programs): unconfined pid=14904 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4331b9c799 code=0x7ffc0000 [ 581.708850][ T29] audit: type=1326 audit(1773430615.430:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4331b9c799 code=0x7ffc0000 [ 581.931104][ T29] audit: type=1326 audit(1773430615.450:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14904 comm="syz.2.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4331b9c799 code=0x7ffc0000 [ 582.649182][ T5880] usb 4-1: USB disconnect, device number 30 [ 584.569561][T14951] batman_adv: batadv0: Adding interface: macsec1 [ 584.569576][T14951] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.569594][T14951] batman_adv: batadv0: Interface activated: macsec1 [ 585.875297][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 585.875315][ T29] audit: type=1326 audit(1773430621.000:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14994 comm="syz.4.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8229b96517 code=0x0 [ 588.221427][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 588.564988][T15034] veth0_macvtap: left promiscuous mode [ 589.265390][ T5887] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 589.441863][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.453297][ T5887] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 589.469900][ T5887] usb 3-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 589.488889][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.559938][ T5887] usb 3-1: config 0 descriptor?? [ 589.890852][T15072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.712217][ T5818] usb 3-1: USB disconnect, device number 35 [ 591.813903][T15104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.780706][T15126] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 593.802242][T15126] netlink: 'syz.4.1384': attribute type 2 has an invalid length. [ 594.824171][T15095] syz.0.1379 (15095): drop_caches: 1 [ 595.664064][T15158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.303253][ T29] audit: type=1326 audit(1773430633.430:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15195 comm="syz.2.1396" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4331b9c799 code=0x0 [ 598.525996][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 598.888085][T15214] random: crng reseeded on system resumption [ 599.679115][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 599.745470][T15234] netlink: 'syz.4.1399': attribute type 7 has an invalid length. [ 606.062961][ T29] audit: type=1326 audit(1773430641.060:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.157605][ T29] audit: type=1326 audit(1773430641.060:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.207670][ T29] audit: type=1326 audit(1773430641.060:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.337992][ T29] audit: type=1326 audit(1773430641.060:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.512019][ T29] audit: type=1326 audit(1773430641.060:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.550333][ T29] audit: type=1326 audit(1773430641.080:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.595618][ T29] audit: type=1326 audit(1773430641.080:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 606.683790][ T29] audit: type=1326 audit(1773430641.110:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 607.178947][ T29] audit: type=1326 audit(1773430641.230:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 607.201943][ T29] audit: type=1326 audit(1773430641.230:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15305 comm="syz.1.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 610.417102][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 610.878817][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 610.918355][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 610.948775][ T5901] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 610.965268][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 611.004890][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 611.020453][ T10] usb 5-1: Product: syz [ 611.024847][ T10] usb 5-1: Manufacturer: syz [ 611.029869][ T10] usb 5-1: SerialNumber: syz [ 611.057514][T15424] ptrace attach of "./syz-executor exec"[5836] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ   /sys/kernel/debug/binder/stats 8   € \x09 Û  þÿÿú ÿÿÿÿ cgroup.controllers [ 611.063945][ T10] usb 5-1: config 0 descriptor?? [ 611.437479][ T5901] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 611.447895][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.468316][ T5901] usb 1-1: Product: syz [ 611.473058][T15407] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 611.486639][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 611.497132][ T5901] usb 1-1: Manufacturer: syz [ 611.503299][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 611.511731][ T5901] usb 1-1: SerialNumber: syz [ 611.552930][ T5901] usb 1-1: config 0 descriptor?? [ 611.646775][T15442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1427'. [ 611.794737][ T5818] usb 1-1: USB disconnect, device number 29 [ 611.892983][ T6275] udevd[6275]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.298984][ T5901] usb 5-1: USB disconnect, device number 30 [ 614.394498][T15496] kAFS: unable to lookup cell 'ÿ' [ 618.303650][ T5818] hid_parser_main: 1 callbacks suppressed [ 618.303666][ T5818] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 618.347039][ T5818] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 618.708773][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 618.797840][T15567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1442'. [ 619.071046][ T24] usb 3-1: config 0 has no interfaces? [ 619.130824][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.247467][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 619.306454][ T24] usb 3-1: SerialNumber: syz [ 619.376382][ T24] usb 3-1: config 0 descriptor?? [ 619.501643][ T29] audit: type=1326 audit(1773430654.620:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15604 comm="syz.3.1445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x0 [ 621.838895][ T5901] usb 3-1: USB disconnect, device number 36 [ 624.067646][T15671] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1455'. [ 624.301278][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.307702][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.315428][ T10] IPVS: starting estimator thread 0... [ 625.608772][T15692] IPVS: using max 55 ests per chain, 132000 per kthread [ 626.180426][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 626.221233][T15723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.391246][ T10] usb 5-1: config 6 has an invalid interface number: 20 but max is 0 [ 626.405848][ T10] usb 5-1: config 6 has no interface number 0 [ 626.758548][ T10] usb 5-1: config 6 interface 20 has no altsetting 0 [ 626.785080][T15738] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 626.817876][ T10] usb 5-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 626.827366][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.868082][ T10] usb 5-1: Product: syz [ 626.873974][ T10] usb 5-1: Manufacturer: syz [ 626.879646][T15738] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 626.904984][ T10] usb 5-1: SerialNumber: syz [ 627.556326][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.711969][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.005039][ T10] usb 5-1: Could not find all expected endpoints [ 628.019675][ T10] usb 5-1: USB disconnect, device number 31 [ 630.122776][T15791] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1468'. [ 630.439949][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1469'. [ 630.739743][T15804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'. [ 632.432884][T15834] openvswitch: netlink: Multiple metadata blocks provided [ 632.480693][T15834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 635.556782][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1483'. [ 636.229362][T15886] sctp: [Deprecated]: syz.4.1485 (pid 15886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.229362][T15886] Use struct sctp_sack_info instead [ 636.278519][T15887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1485'. [ 636.318744][T15887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1485'. [ 636.332176][T15887] dummy0: entered promiscuous mode [ 636.472714][T15887] team0: entered promiscuous mode [ 636.477919][T15887] team_slave_0: entered promiscuous mode [ 636.509042][T15887] team_slave_1: entered promiscuous mode [ 637.179060][T15908] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 638.343660][T15910] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1489'. [ 638.642246][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 638.698435][T15923] openvswitch: netlink: Flow actions attr not present in new flow. [ 638.741843][T15927] bridge2: entered promiscuous mode [ 638.759459][T15923] netlink: 'syz.3.1490': attribute type 2 has an invalid length. [ 640.033603][T15939] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 640.544270][T15948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 641.296189][T15959] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 641.739034][ T5818] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 641.918805][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 641.970426][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.987888][ T5818] usb 2-1: config 0 has no interfaces? [ 642.213531][ T5818] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 642.226283][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.246109][ T5818] usb 2-1: Product: syz [ 642.257269][ T5818] usb 2-1: Manufacturer: syz [ 642.262047][ T5818] usb 2-1: SerialNumber: syz [ 642.274134][ T5818] usb 2-1: config 0 descriptor?? [ 643.933747][T16010] bridge0: port 1(hsr0) entered blocking state [ 643.940614][T16010] bridge0: port 1(hsr0) entered disabled state [ 644.046899][T16010] hsr0: entered promiscuous mode [ 644.069513][ T5887] usb 2-1: USB disconnect, device number 32 [ 645.473850][T16032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1506'. [ 645.518302][T16032] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 647.331929][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1511'. [ 648.295195][T16067] batman_adv: batadv0: Adding interface: macsec1 [ 648.323777][T16067] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.548850][T16067] batman_adv: batadv0: Interface activated: macsec1 [ 651.408953][ T5880] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 651.567748][T16170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.596840][ T5880] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 651.606172][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.638562][ T5880] usb 1-1: config 0 descriptor?? [ 651.658563][ T5880] gspca_main: spca508-2.14.0 probing 8086:0110 [ 651.879945][ T5880] gspca_spca508: reg_read err -32 [ 651.918870][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 652.090759][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1526'. [ 652.113997][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 652.130444][ T5880] gspca_spca508: reg_read err -71 [ 652.143814][ T5880] gspca_spca508: reg_read err -71 [ 652.151091][ T5880] gspca_spca508: reg_read err -71 [ 652.190498][ T5880] gspca_spca508: reg write: error -71 [ 652.198910][ T5880] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 652.225047][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 652.332465][ T5880] usb 1-1: USB disconnect, device number 30 [ 652.379938][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 652.416751][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 652.487900][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 652.596765][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 652.653005][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 652.696796][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.995921][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 653.045021][ T10] usbtmc 2-1:16.0: can't read capabilities [ 653.188774][T16207] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 654.924396][ T10] usb 2-1: USB disconnect, device number 33 [ 658.574222][T16310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 658.680437][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1542'. [ 659.649093][ T5880] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 660.287562][ T5880] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 660.323868][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 660.351285][ T5880] usb 3-1: Product: syz [ 660.363422][ T5880] usb 3-1: Manufacturer: syz [ 660.374712][ T5880] usb 3-1: SerialNumber: syz [ 660.393928][ T5880] usb 3-1: config 0 descriptor?? [ 662.486533][ T5880] usb 3-1: USB disconnect, device number 37 [ 667.415815][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 667.493694][T16513] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 669.100931][T16568] dlm: non-version read from control device 0 [ 669.479412][ T5880] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 669.588739][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 669.660170][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 669.678764][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.708360][ T5880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 669.736884][ T5880] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 669.746410][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.756580][ T5880] usb 1-1: Product: syz [ 669.778745][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 669.815351][ T10] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 669.825819][ T5880] usb 1-1: Manufacturer: syz [ 669.834878][ T5880] usb 1-1: SerialNumber: syz [ 669.851401][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.872726][ T5880] usb 1-1: config 0 descriptor?? [ 669.887470][ T10] usb 3-1: Product: syz [ 669.904744][ T10] usb 3-1: Manufacturer: syz [ 670.072770][ T10] usb 3-1: SerialNumber: syz [ 670.185311][ T10] usb 3-1: config 0 descriptor?? [ 670.362947][T16587] syzkaller0: entered promiscuous mode [ 670.376138][T16587] syzkaller0: entered allmulticast mode [ 670.422245][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 038 [ 670.869987][T16587] 0: reclassify loop, rule prio 0, protocol 800 [ 671.118838][ T5887] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 671.268900][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 671.283710][ T5887] usb 2-1: config 51 has an invalid interface number: 208 but max is 0 [ 671.302924][ T5887] usb 2-1: config 51 has no interface number 0 [ 671.314056][ T5887] usb 2-1: config 51 interface 208 has no altsetting 0 [ 671.333902][ T5887] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=8b.70 [ 671.366593][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.379549][ T5887] usb 2-1: Product: syz [ 671.387041][ T5887] usb 2-1: Manufacturer: syz [ 671.396147][ T5887] usb 2-1: SerialNumber: syz [ 671.498159][ T5818] usb 3-1: USB disconnect, device number 38 [ 671.630175][ T5887] f81534a_ctrl 2-1:51.208: probe with driver f81534a_ctrl failed with error -71 [ 671.669928][ T5887] usb 2-1: USB disconnect, device number 34 [ 672.075086][ T5880] usb 1-1: USB disconnect, device number 31 [ 672.758758][ T5880] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 672.949355][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 673.559221][ T5880] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 673.592475][ T5880] usb 3-1: config 0 has no interface number 0 [ 673.669128][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 673.679430][ T5880] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.726118][ T5880] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.767590][ T5880] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 673.792689][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.852015][ T5880] usb 3-1: config 0 descriptor?? [ 673.964815][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.976748][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 674.000177][ T10] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 674.009527][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.017837][ T10] usb 4-1: Product: syz [ 674.022130][ T10] usb 4-1: Manufacturer: syz [ 674.043721][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 674.082323][T16676] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 674.092470][T16676] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1581'. [ 674.104117][ T10] usb 4-1: SerialNumber: syz [ 674.137936][ T10] usb 4-1: config 0 descriptor?? [ 675.634544][T16693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 676.109755][ T5880] usbhid 3-1:0.1: can't add hid device: -71 [ 676.115742][ T5880] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 676.144316][ T24] usb 4-1: USB disconnect, device number 31 [ 676.166947][ T5880] usb 3-1: USB disconnect, device number 39 [ 676.372570][T16742] netlink: 'syz.2.1586': attribute type 2 has an invalid length. [ 676.620738][T16750] netlink: 'syz.2.1586': attribute type 2 has an invalid length. [ 676.949155][T16742] !: entered promiscuous mode [ 676.955436][T16750] !: left promiscuous mode [ 679.443776][T16789] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 679.799506][ T5880] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 679.958872][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 679.968530][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 679.977201][ T5880] usb 2-1: config 0 has no interface number 0 [ 679.998922][ T5880] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.058584][ T5880] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.099113][ T5880] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 680.162905][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.231848][ T5880] usb 2-1: config 0 descriptor?? [ 681.046420][T16823] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 681.648738][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 681.810275][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 681.844645][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.858754][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 681.935491][ T10] usb 5-1: config 0 has no interfaces? [ 682.162307][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 682.191163][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.204832][ T10] usb 5-1: Product: syz [ 682.211892][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 682.321630][ T10] usb 5-1: Manufacturer: syz [ 682.338768][ T10] usb 5-1: SerialNumber: syz [ 682.347766][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.377061][ T24] usb 4-1: Product: syz [ 682.393750][ T24] usb 4-1: Manufacturer: syz [ 682.409210][ T24] usb 4-1: SerialNumber: syz [ 682.436854][ T24] usb 4-1: config 0 descriptor?? [ 682.547969][ T10] usb 5-1: config 0 descriptor?? [ 682.621679][ T24] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 683.083084][ T5880] usbhid 2-1:0.1: can't add hid device: -71 [ 683.108841][ T5880] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 683.147903][ T5880] usb 2-1: USB disconnect, device number 35 [ 683.838875][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 684.061135][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.081663][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 684.116480][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.194902][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.239728][T16873] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 684.398997][ T5880] usb 5-1: USB disconnect, device number 32 [ 684.487041][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.507521][T16872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.577239][T16872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.943125][ T24] usb 4-1: USB disconnect, device number 32 [ 685.022807][T16919] tipc: Enabled bearer , priority 0 [ 685.030973][T16919] syzkaller0: entered promiscuous mode [ 685.037708][T16919] syzkaller0: entered allmulticast mode [ 685.142592][T16919] tipc: Resetting bearer [ 685.157083][T16918] tipc: Resetting bearer [ 685.204645][T16918] tipc: Disabling bearer [ 685.749254][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.755669][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.097953][T16934] netlink: 'syz.2.1610': attribute type 4 has an invalid length. [ 686.388858][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 686.580085][ T10] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 686.598966][ T10] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 686.648805][ T10] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 686.678726][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.735442][ T10] usb 3-1: Product: syz [ 686.756997][ T10] usb 3-1: Manufacturer: syz [ 686.775728][T12028] usb 2-1: USB disconnect, device number 36 [ 686.811858][ T10] usb 3-1: SerialNumber: syz [ 687.057824][T16934] netlink: 'syz.2.1610': attribute type 28 has an invalid length. [ 687.777218][T12028] usb 3-1: USB disconnect, device number 40 [ 688.577952][T12028] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 688.586673][T16997] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1615'. [ 688.788837][T12028] usb 3-1: Using ep0 maxpacket: 16 [ 688.811047][T12028] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 688.819504][T12028] usb 3-1: config 0 has no interface number 0 [ 688.866872][T12028] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.924603][T12028] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.954328][T12028] usb 3-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 688.972369][T12028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.008439][T12028] usb 3-1: config 0 descriptor?? [ 690.945451][T17017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'. [ 691.295274][T12028] usbhid 3-1:0.1: can't add hid device: -71 [ 691.309989][T12028] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 691.375199][T12028] usb 3-1: USB disconnect, device number 41 [ 691.959599][T17036] random: crng reseeded on system resumption [ 692.339065][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 694.047879][ T29] audit: type=1800 audit(1773430729.170:517): pid=17063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1626" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 694.284158][ T5818] IPVS: starting estimator thread 0... [ 694.756128][T17076] IPVS: using max 54 ests per chain, 129600 per kthread [ 697.120727][T17120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1637'. [ 697.129835][T17120] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.524997][T17137] netlink: 'syz.2.1640': attribute type 29 has an invalid length. [ 698.863914][ T5818] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 699.048703][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 699.056366][ T5818] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 699.117319][ T5818] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 699.138716][ T5818] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 699.149256][ T5818] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.163479][ T5818] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 699.174471][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.609098][ T5818] usb 4-1: GET_CAPABILITIES returned 0 [ 699.614795][ T5818] usbtmc 4-1:16.0: can't read capabilities [ 699.816826][ T5818] usb 4-1: USB disconnect, device number 33 [ 700.191802][T17175] ipt_ECN: cannot use operation on non-tcp rule [ 700.517264][T17182] bridge0: entered promiscuous mode [ 700.523547][T17182] macsec2: entered promiscuous mode [ 700.533989][T17182] macsec2: entered allmulticast mode [ 700.539624][T17182] bridge0: entered allmulticast mode [ 700.551171][T17182] bridge0: port 3(macsec2) entered blocking state [ 700.558280][T17182] bridge0: port 3(macsec2) entered disabled state [ 700.738270][T17182] bridge0: left allmulticast mode [ 700.745163][T17182] bridge0: left promiscuous mode [ 703.057307][T17240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1656'. [ 703.573791][T17245] netlink: 'syz.0.1658': attribute type 7 has an invalid length. [ 704.597540][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 704.758812][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 704.993582][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 705.116987][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 705.140973][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.163082][ T10] usb 5-1: config 0 descriptor?? [ 705.203417][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 705.224957][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 705.378822][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 705.602035][T17285] tipc: Enabling of bearer rejected, failed to enable media [ 705.610925][ T29] audit: type=1326 audit(1773430740.720:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 705.729395][T17288] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 705.738802][T17288] tipc: Enabled bearer , priority 10 [ 705.809317][ T29] audit: type=1326 audit(1773430740.720:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 705.918106][ T29] audit: type=1326 audit(1773430740.720:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 706.117259][ T29] audit: type=1326 audit(1773430740.720:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 706.248684][ T29] audit: type=1326 audit(1773430740.730:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 706.351449][ T29] audit: type=1326 audit(1773430740.730:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8229b9e007 code=0x7ffc0000 [ 706.444732][ T29] audit: type=1326 audit(1773430740.730:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 706.696846][ T29] audit: type=1326 audit(1773430740.730:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 706.858945][ T24] tipc: Node number set to 1143164296 [ 706.889283][ T29] audit: type=1326 audit(1773430740.730:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 706.960478][ T29] audit: type=1326 audit(1773430740.730:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.4.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 708.971262][ T24] usb 5-1: USB disconnect, device number 33 [ 709.443608][T17342] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1671'. [ 711.508966][ T5818] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 711.735660][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 711.751821][ T5818] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 711.765045][ T5818] usb 3-1: config 0 has no interface number 0 [ 711.775669][ T5818] usb 3-1: config 0 interface 23 has no altsetting 0 [ 711.795721][ T5818] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 711.806717][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.012940][ T5818] usb 3-1: Product: syz [ 712.096487][ T5818] usb 3-1: Manufacturer: syz [ 712.104574][ T5818] usb 3-1: SerialNumber: syz [ 712.130395][ T5818] usb 3-1: config 0 descriptor?? [ 712.360634][T17362] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1675'. [ 714.109758][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 714.340349][T17428] syzkaller1: entered promiscuous mode [ 714.345991][T17428] syzkaller1: entered allmulticast mode [ 714.370791][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 714.540160][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 714.582281][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 714.611819][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 714.707933][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.750771][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.848041][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 714.877538][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.143568][ T10] usb 1-1: GET_CAPABILITIES returned 0 [ 715.153513][ T10] usbtmc 1-1:16.0: can't read capabilities [ 715.298922][ T5887] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 715.314533][ T5818] usb 3-1: USB disconnect, device number 42 [ 715.551047][ T5887] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 715.572801][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.612481][ T5887] usb 4-1: config 0 has no interfaces? [ 715.628276][ T5887] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 715.670520][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.741738][ T5887] usb 4-1: config 0 descriptor?? [ 716.144825][T17472] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1687'. [ 716.853942][ T5887] usb 1-1: USB disconnect, device number 32 [ 717.546590][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 717.563107][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 717.563403][ T29] audit: type=1800 audit(1773430752.690:532): pid=17490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1688" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 717.945016][T17504] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 718.218695][ T29] audit: type=1800 audit(1773430753.320:533): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1690" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 718.481057][ T5818] usb 4-1: USB disconnect, device number 34 [ 719.339654][T17541] openvswitch: netlink: Flow key attr not present in new flow. [ 719.578551][ T5887] IPVS: starting estimator thread 0... [ 719.718964][T17552] IPVS: using max 55 ests per chain, 132000 per kthread [ 719.743823][T17556] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 720.505779][T17573] xt_hashlimit: size too large, truncated to 1048576 [ 720.514438][T17573] xt_hashlimit: max too large, truncated to 1048576 [ 724.288989][ T5818] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 724.408989][ T5887] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 724.451607][ T5818] usb 4-1: Using ep0 maxpacket: 32 [ 724.461802][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.477528][ T5818] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 724.495900][ T5818] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 724.505731][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.530498][ T5818] usb 4-1: Product: syz [ 724.542244][ T5818] usb 4-1: Manufacturer: syz [ 724.561122][ T5818] usb 4-1: SerialNumber: syz [ 724.602620][ T5887] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 724.611792][ T5818] usb 4-1: config 0 descriptor?? [ 724.618867][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 725.196060][ T5887] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.241725][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 725.268809][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 725.293562][ T5887] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 725.301884][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 725.374233][ T5887] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.433351][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 725.609887][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 725.699807][ T5887] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 725.707829][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 725.718900][ T5887] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.741044][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 725.789007][ T5887] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 725.808586][ T10] usb 4-1: USB disconnect, device number 35 [ 725.833970][ T5887] usb 2-1: string descriptor 0 read error: -22 [ 725.881020][ T5887] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 725.918321][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.961043][ T5887] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 726.215728][ T5887] usb 2-1: USB disconnect, device number 37 [ 726.689474][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 726.980609][T17695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.010160][T17698] adutux: No device or device unplugged -19 [ 730.339905][ T29] audit: type=1326 audit(1773430765.430:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 730.417931][ T29] audit: type=1326 audit(1773430765.430:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 730.468789][ T29] audit: type=1326 audit(1773430765.430:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 730.512444][ T29] audit: type=1326 audit(1773430765.430:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 730.662876][ T29] audit: type=1326 audit(1773430765.430:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 730.696195][ T29] audit: type=1326 audit(1773430765.430:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 730.732789][ T29] audit: type=1326 audit(1773430765.430:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 731.305415][ T29] audit: type=1326 audit(1773430765.430:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 731.364432][ T29] audit: type=1326 audit(1773430765.430:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 731.412444][ T29] audit: type=1326 audit(1773430765.430:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17745 comm="syz.1.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 732.934245][T17781] x_tables: duplicate underflow at hook 3 [ 733.270228][T17790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.849156][T17808] syzkaller0: entered promiscuous mode [ 734.861448][T17808] syzkaller0: entered allmulticast mode [ 735.035396][T17822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.326057][ T10] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 735.759780][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 735.769262][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.791053][ T10] usb 3-1: Product: syz [ 735.795345][ T10] usb 3-1: Manufacturer: syz [ 735.835489][ T10] usb 3-1: SerialNumber: syz [ 735.853086][ T10] usb 3-1: config 0 descriptor?? [ 736.452903][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 736.558915][ T5818] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 736.720721][ T5818] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 736.732004][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 736.751861][ T5818] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.763782][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.782581][ T5818] usb 1-1: Product: syz [ 736.792642][ T5818] usb 1-1: Manufacturer: syz [ 736.806087][ T5818] usb 1-1: SerialNumber: syz [ 736.846604][ T5818] usb 1-1: config 0 descriptor?? [ 737.247627][T17856] bond0: (slave bond_slave_0): Releasing backup interface [ 737.259494][T17856] bond0: (slave bond_slave_1): Releasing backup interface [ 737.291595][T17856] team0: Port device team_slave_0 removed [ 737.305204][ T5818] usb 1-1: selecting invalid altsetting 0 [ 737.309979][T17856] team0: Port device team_slave_1 removed [ 737.329796][T17856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.390666][T17856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.650618][T17856] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 739.004425][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 739.021531][ T10] usb 3-1: USB disconnect, device number 43 [ 739.148924][ T5887] usb 1-1: USB disconnect, device number 33 [ 739.949980][T17925] bond1: option ad_user_port_key: invalid value (29586) [ 739.957057][T17925] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 739.996749][T17925] bond1 (unregistering): Released all slaves [ 740.006756][T17961] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1743'. [ 740.268676][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 740.268695][ T29] audit: type=1326 audit(1773430775.380:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 740.326998][T17959] syzkaller0: entered promiscuous mode [ 740.361940][T17959] syzkaller0: entered allmulticast mode [ 740.371535][ T29] audit: type=1326 audit(1773430775.390:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 740.466903][ T29] audit: type=1326 audit(1773430775.500:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 740.690601][ T29] audit: type=1326 audit(1773430775.500:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 740.809239][ T29] audit: type=1326 audit(1773430775.540:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 740.883353][ T29] audit: type=1326 audit(1773430775.540:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 741.258825][ T29] audit: type=1326 audit(1773430775.540:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 741.368679][ T29] audit: type=1326 audit(1773430775.540:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 741.488784][ T29] audit: type=1326 audit(1773430775.540:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44fd9c799 code=0x7ffc0000 [ 741.603851][ T29] audit: type=1326 audit(1773430775.540:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.0.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd44fd5cfce code=0x7ffc0000 [ 742.107816][T18030] input: syz1 as /devices/virtual/input/input25 [ 742.118785][ T5887] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 742.263984][T18034] netlink: 'syz.0.1751': attribute type 21 has an invalid length. [ 742.276781][T18034] IPv6: NLM_F_CREATE should be specified when creating new route [ 742.295236][T18034] netlink: 'syz.0.1751': attribute type 1 has an invalid length. [ 742.305910][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 742.551911][ T5887] usb 3-1: unable to get BOS descriptor or descriptor too short [ 742.564005][ T5887] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 742.574957][ T5887] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 742.599614][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 742.609351][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.617554][ T5887] usb 3-1: Product: syz [ 742.622218][ T5887] usb 3-1: Manufacturer: syz [ 742.629989][ T5887] usb 3-1: SerialNumber: syz [ 742.856623][T18021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.867782][T18021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.718577][ T5887] usb 3-1: USB disconnect, device number 44 [ 747.423469][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.432793][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.804643][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.813351][T18160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.833090][T18164] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 751.884064][T18160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.966277][T18160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.645226][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1775'. [ 757.800511][ T24] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 758.324738][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.339903][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.407601][ T24] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 758.417188][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.553407][ T24] usb 1-1: Product: syz [ 758.566980][ T24] usb 1-1: Manufacturer: syz [ 758.576446][ T24] usb 1-1: SerialNumber: syz [ 758.592975][ T24] usb 1-1: config 0 descriptor?? [ 759.073673][T18270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 759.080516][T18270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.139047][T18274] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 759.145710][T18274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.154720][T18270] vhci_hcd vhci_hcd.0: Device attached [ 759.248003][T18274] vhci_hcd vhci_hcd.0: Device attached [ 759.293436][T18270] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 759.300086][T18270] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 759.392287][T18270] vhci_hcd vhci_hcd.0: Device attached [ 759.418727][ T24] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 759.467717][T18274] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 759.474379][T18274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.544545][T18281] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 759.551196][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.578867][T18274] vhci_hcd vhci_hcd.0: Device attached [ 759.676110][T18274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 759.760128][T18274] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(26) [ 759.766752][T18274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 760.138913][T18274] vhci_hcd vhci_hcd.0: Device attached [ 760.147947][T18286] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 760.185235][T18281] vhci_hcd vhci_hcd.0: Device attached [ 760.199158][T18270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 760.205830][T18270] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 760.276913][T18295] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 760.432896][T18270] vhci_hcd vhci_hcd.0: Device attached [ 760.503119][T18272] vhci_hcd: connection reset by peer [ 760.510306][T18279] vhci_hcd: connection closed [ 760.512152][T18277] vhci_hcd: connection closed [ 760.516965][T18282] vhci_hcd: connection closed [ 760.528948][T18275] vhci_hcd: connection closed [ 760.533918][T18284] vhci_hcd: connection closed [ 760.535817][ T13] vhci_hcd vhci_hcd.3: stop threads [ 760.539681][T18289] vhci_hcd: connection closed [ 760.554923][ T13] vhci_hcd vhci_hcd.3: release socket [ 760.605867][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 760.630369][ T13] vhci_hcd vhci_hcd.3: stop threads [ 760.639831][ T5818] usb 1-1: USB disconnect, device number 34 [ 760.737596][ T13] vhci_hcd vhci_hcd.3: release socket [ 760.761240][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 760.770709][ T13] vhci_hcd vhci_hcd.3: stop threads [ 760.776016][ T13] vhci_hcd vhci_hcd.3: release socket [ 760.787390][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 760.797683][ T13] vhci_hcd vhci_hcd.3: stop threads [ 760.806871][ T13] vhci_hcd vhci_hcd.3: release socket [ 760.837358][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 760.902862][ T13] vhci_hcd vhci_hcd.3: stop threads [ 760.908412][ T13] vhci_hcd vhci_hcd.3: release socket [ 760.914788][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 760.928774][ T13] vhci_hcd vhci_hcd.3: stop threads [ 760.937937][ T13] vhci_hcd vhci_hcd.3: release socket [ 761.145774][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 761.309290][ T13] vhci_hcd vhci_hcd.3: stop threads [ 761.314525][ T13] vhci_hcd vhci_hcd.3: release socket [ 761.329707][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 762.396053][T18336] fuse: Bad value for 'rootmode' [ 764.520070][ T24] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 766.449746][ T5887] usb usb40-port1: attempt power cycle [ 767.178106][ T5887] usb usb40-port1: unable to enumerate USB device [ 767.799103][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 767.799121][ T29] audit: type=1326 audit(1773430802.910:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.023973][T18415] x_tables: duplicate underflow at hook 3 [ 768.076349][ T29] audit: type=1326 audit(1773430802.910:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.141605][ T29] audit: type=1326 audit(1773430802.910:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.320544][ T29] audit: type=1326 audit(1773430802.910:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.401254][ T29] audit: type=1326 audit(1773430802.910:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.495075][ T29] audit: type=1326 audit(1773430802.910:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.599139][ T29] audit: type=1326 audit(1773430802.910:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 768.776089][ T29] audit: type=1326 audit(1773430802.910:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 769.128155][ T29] audit: type=1326 audit(1773430802.910:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 769.257169][ T29] audit: type=1326 audit(1773430802.910:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18405 comm="syz.4.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 770.225425][T18437] bridge0: port 3(hsr0) entered blocking state [ 770.232018][T18437] bridge0: port 3(hsr0) entered disabled state [ 771.185686][T18454] overlayfs: missing 'lowerdir' [ 772.766233][T18473] bridge0: port 3(hsr0) entered blocking state [ 772.772998][T18473] bridge0: port 3(hsr0) entered disabled state [ 772.897156][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 772.897173][ T29] audit: type=1326 audit(1773430808.000:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 773.017792][T18477] IPv6: NLM_F_CREATE should be specified when creating new route [ 773.029109][T18477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 773.036813][T18477] IPv6: NLM_F_CREATE should be set when creating new route [ 773.558756][ T29] audit: type=1326 audit(1773430808.000:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 773.638507][ T29] audit: type=1326 audit(1773430808.000:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 773.798184][ T29] audit: type=1326 audit(1773430808.000:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.008191][ T29] audit: type=1326 audit(1773430808.000:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.084015][ T29] audit: type=1326 audit(1773430808.000:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.318711][ T29] audit: type=1326 audit(1773430808.000:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.369198][ T29] audit: type=1326 audit(1773430808.000:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.501968][ T29] audit: type=1326 audit(1773430808.010:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.544962][ T29] audit: type=1326 audit(1773430808.010:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18465 comm="syz.1.1821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bfdf9c799 code=0x7ffc0000 [ 774.982290][T18498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.209572][T18496] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.217077][T18496] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.701300][T18496] hsr0: left allmulticast mode [ 775.729178][T18496] hsr_slave_0: left allmulticast mode [ 775.825635][T18512] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1828'. [ 775.899987][T18496] hsr_slave_1: left allmulticast mode [ 776.221059][T18520] loop6: detected capacity change from 0 to 524288000 [ 776.247656][T18520] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1829'. [ 776.307245][ T6461] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 776.317469][ T6461] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.351396][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 776.388374][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.534354][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 776.563425][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.630217][ T35] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 776.734886][ T35] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.129124][T18546] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 778.981222][T18568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1837'. [ 783.190123][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 783.462382][ T24] usb 4-1: too many configurations: 36, using maximum allowed: 8 [ 783.488492][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 783.499914][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.508125][ T24] usb 4-1: Product: syz [ 783.543547][ T24] usb 4-1: Manufacturer: syz [ 783.548179][ T24] usb 4-1: SerialNumber: syz [ 783.715515][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 783.917709][ T5818] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 784.379611][T18628] random: crng reseeded on system resumption [ 784.579472][ T5880] usb 4-1: USB disconnect, device number 36 [ 784.734871][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1852'. [ 785.041328][ T5818] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 785.161414][ T5818] ath9k_htc: Failed to initialize the device [ 785.216192][ T5880] usb 4-1: ath9k_htc: USB layer deinitialized [ 786.535522][T18689] batman_adv: batadv0: Adding interface: macsec1 [ 786.549855][T18689] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.808136][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'. [ 786.818494][T18689] batman_adv: batadv0: Interface activated: macsec1 [ 787.740232][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 787.749609][T18716] hsr0: left promiscuous mode [ 787.754537][T18716] bridge0: port 1(hsr0) entered disabled state [ 791.450743][T18759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.381083][T18770] binder: BINDER_SET_CONTEXT_MGR already set [ 792.387407][T18770] binder: 18768:18770 ioctl 4018620d 200000000040 returned -16 [ 792.410380][T18770] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1870'. [ 793.389528][T18788] xt_NFQUEUE: number of total queues is 0 [ 794.055599][T18796] could not allocate digest TFM handle md5 [ 794.294661][ T5818] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 794.605951][T18812] @ÿ: renamed from bond_slave_0 [ 794.708417][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 794.765298][ T5818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 794.795840][ T5818] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 794.808639][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.859579][ T5818] usb 2-1: Product: syz [ 794.863785][ T5818] usb 2-1: Manufacturer: syz [ 794.899855][ T5818] usb 2-1: SerialNumber: syz [ 794.916359][ T5818] usb 2-1: config 0 descriptor?? [ 795.036437][ T5818] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 796.058668][ T546] usb 2-1: Failed to submit usb control message: -110 [ 796.076219][ T546] usb 2-1: unable to send the bmi data to the device: -110 [ 796.095854][ T546] usb 2-1: unable to get target info from device [ 796.112756][ T546] usb 2-1: could not get target info (-110) [ 796.124203][ T546] usb 2-1: could not probe fw (-110) [ 796.480341][T18841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1881'. [ 797.030312][ T1010] bond1: (slave ip6gretap1): link status up again after 0 ms [ 797.038185][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.064065][ T10] usb 2-1: USB disconnect, device number 38 [ 797.312925][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.466746][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.578872][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.698782][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.724953][T18870] IPVS: set_ctl: invalid protocol: 255 172.20.20.45:286 [ 797.848738][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 797.976848][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.103208][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.248706][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 798.322145][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 798.322164][ T29] audit: type=1400 audit(1773430833.410:688): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=18877 comm="syz.0.1886" [ 798.443067][T18875] kvm: kvm [18874]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x7ff [ 800.105972][T18894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.117762][T18894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.130705][T18894] batman_adv: batadv0: Interface deactivated: macsec1 [ 800.148786][T18894] batman_adv: batadv0: Removing interface: macsec1 [ 802.208721][ T5880] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 802.216667][ T6459] net_ratelimit: 21 callbacks suppressed [ 802.216680][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.400061][ T546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.426420][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.438665][ T5880] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 802.497089][ T5880] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 802.522935][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.534049][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.587351][ T5880] usb 5-1: Product: syz [ 802.608976][ T5880] usb 5-1: Manufacturer: syz [ 802.656813][ T5880] usb 5-1: SerialNumber: syz [ 802.661744][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.710572][ T5880] usb 5-1: config 0 descriptor?? [ 802.778833][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 802.888852][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 803.025280][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 803.220993][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 803.358751][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 803.508708][ T546] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 805.374025][ T24] usb 5-1: USB disconnect, device number 34 [ 805.514554][T19005] macvlan2: left allmulticast mode [ 806.469798][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 806.678672][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 806.715506][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 806.723783][ T24] usb 3-1: config 0 has no interface number 0 [ 806.730361][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 806.762692][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 806.795792][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.856217][ T24] usb 3-1: Product: syz [ 806.867008][ T24] usb 3-1: Manufacturer: syz [ 806.876457][ T24] usb 3-1: SerialNumber: syz [ 807.095480][T19030] fuse: Bad value for 'fd' [ 807.176206][ T24] usb 3-1: config 0 descriptor?? [ 807.248698][ T6461] net_ratelimit: 29 callbacks suppressed [ 807.248715][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.448698][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.656332][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.798755][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.918874][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 807.928865][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 807.945012][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 808.038772][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.223641][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.280666][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 808.298831][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 808.319587][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 808.479179][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 808.499030][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.610050][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.618753][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.625059][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.738755][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 808.888338][T19079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1908'. [ 809.345191][ T24] usb 3-1: USB disconnect, device number 45 [ 810.772031][T19100] batman_adv: batadv0: Interface deactivated: macsec1 [ 810.780617][T19100] batman_adv: batadv0: Removing interface: macsec1 [ 812.289916][ T6461] net_ratelimit: 25 callbacks suppressed [ 812.289938][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 812.411022][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 812.559806][ T35] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 812.728707][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.339048][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.449456][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.738760][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 813.888767][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 814.435343][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 814.701340][ T6461] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.303540][ T6468] net_ratelimit: 17 callbacks suppressed [ 817.303561][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.460768][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.624941][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.741177][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 817.969767][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.118754][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.238839][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.348841][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.478706][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 818.588716][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 819.039350][T19266] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1931'. [ 821.515287][T19299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1936'. [ 821.898760][ T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 822.099809][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 822.117359][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 822.128928][ T10] usb 4-1: config 0 has no interface number 0 [ 822.252377][T19313] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 822.292101][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.386442][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.410527][ T13] net_ratelimit: 25 callbacks suppressed [ 822.410542][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 822.468896][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 822.478242][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.489193][ T10] usb 4-1: config 0 descriptor?? [ 822.568831][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 822.702822][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 822.828882][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.052828][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.280585][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.413792][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.528729][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.638711][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.648917][ T5880] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 823.759247][T19325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 823.798482][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 823.872523][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 823.904962][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.928652][ T5880] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 823.958118][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.978042][T19332] input: syz0 as /devices/virtual/input/input26 [ 824.019678][ T5880] usb 3-1: Product: syz [ 824.030139][ T5880] usb 3-1: Manufacturer: syz [ 824.058802][ T5880] usb 3-1: SerialNumber: syz [ 824.075025][ T5880] usb 3-1: config 0 descriptor?? [ 824.204209][ T5880] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 824.565894][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 824.580302][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 824.630331][ T10] usb 4-1: USB disconnect, device number 37 [ 824.637487][ T6459] usb 3-1: Failed to submit usb control message: -71 [ 824.649808][ T6459] usb 3-1: unable to send the bmi data to the device: -71 [ 824.719110][ T5880] usb 3-1: USB disconnect, device number 46 [ 824.731986][ T6459] usb 3-1: unable to get target info from device [ 824.742302][ T6459] usb 3-1: could not get target info (-71) [ 824.757740][ T6459] usb 3-1: could not probe fw (-71) [ 825.164075][T19370] program syz.3.1944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 827.398706][ T5880] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 827.448945][ T60] net_ratelimit: 27 callbacks suppressed [ 827.448960][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.570028][ T5880] usb 4-1: config 0 has no interfaces? [ 827.575934][ T5880] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 827.588758][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.608721][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.639659][ T5880] usb 4-1: config 0 descriptor?? [ 827.681880][T19416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.718701][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.916819][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 827.969170][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1952'. [ 828.040969][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.158708][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.269003][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.398884][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.516342][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 828.601490][T19442] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 828.643387][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 829.119939][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 829.133216][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 829.159664][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 829.172039][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 829.181885][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 829.615691][ T5880] usb 4-1: USB disconnect, device number 38 [ 830.030108][T19486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1959'. [ 830.370121][ T5880] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 830.661729][ T5880] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 830.689262][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 830.737914][ T5880] usb 4-1: config 0 has no interfaces? [ 830.766264][ T5880] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 830.811476][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.889031][ T5880] usb 4-1: config 0 descriptor?? [ 832.592972][ T1010] net_ratelimit: 22 callbacks suppressed [ 832.592992][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 832.740905][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 832.920012][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 833.069773][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 833.089760][ T5887] usb 4-1: USB disconnect, device number 39 [ 833.198969][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 833.318838][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 833.597196][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 833.752121][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 833.988481][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 834.139127][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 835.710307][T19578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1974'. [ 837.598800][ T6468] net_ratelimit: 23 callbacks suppressed [ 837.598821][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 837.738731][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 837.926475][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.607759][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.753062][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 838.908769][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.023700][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.140496][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.249282][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 839.639483][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 840.854984][T19666] netdevsim netdevsim4: Direct firmware load for . [ 840.854984][T19666] failed with error -2 [ 840.898873][T19666] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 840.898873][T19666] [ 842.659663][ T13] net_ratelimit: 19 callbacks suppressed [ 842.659677][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 842.791833][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 842.929676][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.018770][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 843.038838][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.138659][ T5887] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 843.159086][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.256103][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 843.266579][ T10] usb 3-1: config 64 has an invalid interface number: 19 but max is 0 [ 843.275145][ T10] usb 3-1: config 64 has no interface number 0 [ 843.281579][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.292099][ T10] usb 3-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 843.352021][ T10] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 843.362540][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.370587][ T5887] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 843.379978][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.397578][ T5887] usb 2-1: Product: syz [ 843.402287][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.406111][ T10] usb 3-1: probing VID:PID(2201:012C) [ 843.476372][ T5887] usb 2-1: Manufacturer: syz [ 843.504822][ T5887] usb 2-1: SerialNumber: syz [ 843.519520][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.564348][ T5887] usb 2-1: config 0 descriptor?? [ 843.584082][ T10] usb 3-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 843.597786][ T10] usb 3-1: vub300 ignoring EndPoint(0) 02 [ 843.635005][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 843.671883][ T10] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 843.682400][ T10] vub300 3-1:64.19: probe with driver vub300 failed with error -22 [ 843.774107][ T5887] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 843.788753][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 844.159858][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 845.359494][ T10] usb 3-1: USB disconnect, device number 47 [ 846.989869][ T5887] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 847.007975][ T5887] usb 2-1: USB disconnect, device number 39 [ 847.064154][T19762] syzkaller0: entered promiscuous mode [ 847.070125][T19762] syzkaller0: entered allmulticast mode [ 847.735631][ T6468] net_ratelimit: 24 callbacks suppressed [ 847.735647][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.079620][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.198774][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.331664][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.464043][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.616773][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.728797][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.838801][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 848.958472][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 849.098778][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 849.692672][T19824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2006'. [ 849.889928][T19831] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 850.903998][T19843] random: crng reseeded on system resumption [ 851.781373][ T5880] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 851.998648][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 852.038282][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.524630][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 852.578416][ T5880] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 852.588857][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.597861][ T5880] usb 4-1: Product: syz [ 852.603014][ T5880] usb 4-1: Manufacturer: syz [ 852.656576][ T5880] usb 4-1: SerialNumber: syz [ 852.700847][ T5880] usb 4-1: config 0 descriptor?? [ 852.737726][ T5880] powermate 4-1:0.0: probe with driver powermate failed with error -22 [ 852.769761][ T6459] net_ratelimit: 22 callbacks suppressed [ 852.769775][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 852.888705][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 852.980270][T19851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.989299][T19851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.998736][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.119815][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.238687][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.369342][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.480447][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.620052][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.738879][ T6464] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 853.848683][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 855.033241][ T5880] usb 4-1: USB disconnect, device number 40 [ 855.499036][ T5880] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 855.908658][ T5880] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 855.926760][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.080765][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.108773][ T5880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 856.194138][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 856.217387][ T5880] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 856.240441][ T5880] usb 4-1: Manufacturer: syz [ 856.307876][ T5880] usb 4-1: config 0 descriptor?? [ 856.893562][ T5880] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 856.931731][ T5880] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 857.790306][ T6459] net_ratelimit: 28 callbacks suppressed [ 857.790327][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 857.948765][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.066185][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.199335][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.361244][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.367655][ T5887] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 858.498714][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.784888][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 858.785019][ T5887] usb 4-1: device descriptor read/64, error -32 [ 858.908687][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 859.089432][ T5887] usb 4-1: reset high-speed USB device number 41 using dummy_hcd [ 859.290644][ T5887] usb 4-1: device descriptor read/64, error -32 [ 859.319801][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 859.457589][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 859.593174][T19983] netlink: 2908 bytes leftover after parsing attributes in process `syz.0.2027'. [ 859.612862][T19983] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 860.175970][ T24] usb 4-1: USB disconnect, device number 41 [ 861.596524][ T5880] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 861.828680][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 861.860832][ T5880] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 861.882956][ T5880] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.087398][ T5880] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 862.099906][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.148326][ T5880] usbtmc 5-1:16.0: bulk endpoints not found [ 862.442056][T20016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.545909][T20016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.849961][ T60] net_ratelimit: 23 callbacks suppressed [ 862.849975][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.079523][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.339331][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.470269][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.578767][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.688796][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.813473][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 863.938856][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 864.055713][ T24] usb 5-1: USB disconnect, device number 35 [ 864.066005][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 864.228720][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 865.305824][T20091] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2043'. [ 865.481914][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2044'. [ 867.886592][ T60] net_ratelimit: 28 callbacks suppressed [ 867.886613][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.008710][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.242785][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.369931][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.478887][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.601360][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.728939][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.845377][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 868.968918][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.516345][ T29] audit: type=1326 audit(1773430904.640:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 869.598274][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 869.634859][ T29] audit: type=1326 audit(1773430904.640:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 869.718214][ T29] audit: type=1326 audit(1773430904.640:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 869.810518][ T29] audit: type=1326 audit(1773430904.640:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 869.962757][ T29] audit: type=1326 audit(1773430904.640:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 870.069455][ T29] audit: type=1326 audit(1773430904.640:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 870.069831][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.138671][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.369145][T20161] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2054'. [ 870.513904][ T29] audit: type=1326 audit(1773430904.640:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229b9c799 code=0x7ffc0000 [ 870.574787][ T29] audit: type=1326 audit(1773430904.640:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 870.717644][ T29] audit: type=1326 audit(1773430904.660:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 871.033573][ T29] audit: type=1326 audit(1773430904.670:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20143 comm="syz.4.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8229b5cfce code=0x7ffc0000 [ 871.548733][ T5887] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 871.723729][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 871.732042][ T5887] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 871.753163][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.770025][ T5887] usb 2-1: config 0 descriptor?? [ 871.886993][ T5887] as10x_usb: device has been detected [ 871.895412][ T5887] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 871.934820][ T5887] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 872.092340][ T5887] as10x_usb: error during firmware upload part1 [ 872.099425][ T5887] Registered device nBox DVB-T Dongle [ 872.940097][ T1010] net_ratelimit: 26 callbacks suppressed [ 872.940127][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.068676][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.182004][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.407406][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.578705][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 873.806054][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 874.156055][T20229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2063'. [ 874.486158][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 874.629615][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 874.869402][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 874.980061][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 876.077976][T20237] netlink: 179596 bytes leftover after parsing attributes in process `syz.4.2065'. [ 876.239937][ T5887] usb 2-1: USB disconnect, device number 40 [ 876.394037][ T5887] Unregistered device nBox DVB-T Dongle [ 876.396639][ T5887] as10x_usb: device has been disconnected [ 877.535470][T20269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2069'. [ 877.548808][T20269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2069'. [ 877.590916][T20269] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2069'. [ 877.594039][T20272] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 878.058813][ T6468] net_ratelimit: 20 callbacks suppressed [ 878.058833][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 878.471208][T20282] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 878.492633][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 878.628707][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 878.742106][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 878.873450][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.070429][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.218677][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.348657][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.459192][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 879.550064][T20302] kAFS: unable to lookup cell 'ÿ' [ 879.564155][T20302] kAFS: unable to lookup cell '(,c¾Ì' [ 879.569949][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 881.041154][T20316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2076'. [ 881.986724][T20334] loop5: detected capacity change from 0 to 7 [ 882.003267][T20334] Dev loop5: unable to read RDB block 7 [ 882.009251][T20334] loop5: AHDI p1 p2 p3 [ 882.013712][T20334] loop5: partition table partially beyond EOD, truncated [ 882.047858][T20334] loop5: p1 start 1818582900 is beyond EOD, truncated [ 882.113585][T20334] loop5: p3 start 335544320 is beyond EOD, truncated [ 882.343059][T20341] netlink: 'syz.4.2081': attribute type 1 has an invalid length. [ 882.952625][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2081'. [ 883.003400][T20343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 883.078761][ T13] net_ratelimit: 23 callbacks suppressed [ 883.078782][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 883.121980][T20341] bond1: (slave gretap1): making interface the new active one [ 883.138695][ T5880] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 883.167660][T20341] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 883.214825][T20343] macvlan3: entered promiscuous mode [ 883.237581][T20343] macvlan3: entered allmulticast mode [ 883.271785][T20343] bond1: entered promiscuous mode [ 883.287520][T20343] gretap1: entered promiscuous mode [ 883.299951][ T5880] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 883.322908][ T5880] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 883.337096][T20343] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 883.353963][ T5880] usb 3-1: config 2 interface 0 has no altsetting 0 [ 883.362611][T20343] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 883.387818][ T5880] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 883.429039][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.445674][T20343] bond1: left promiscuous mode [ 883.454033][ T5880] usb 3-1: Product: syz [ 883.458285][ T5880] usb 3-1: Manufacturer: syz [ 883.548097][T20343] gretap1: left promiscuous mode [ 883.549908][ T5880] usb 3-1: SerialNumber: syz [ 883.628749][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 883.663003][T20418] netlink: 'syz.3.2083': attribute type 4 has an invalid length. [ 883.724429][T12028] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 883.800416][T20354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2082'. [ 883.938952][T12028] usb 2-1: device descriptor read/64, error -71 [ 884.122551][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.239205][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.248721][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 884.259124][T12028] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 884.378958][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.403308][T12028] usb 2-1: device descriptor read/64, error -71 [ 884.490628][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.498170][ T5880] usb 3-1: USB disconnect, device number 48 [ 884.521264][T12028] usb usb2-port1: attempt power cycle [ 884.599078][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.678668][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 884.707636][ T10] usb 4-1: config 0 has no interfaces? [ 884.713273][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.753187][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 884.775711][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 884.791013][ T10] usb 4-1: Manufacturer: syz [ 884.819922][ T10] usb 4-1: config 0 descriptor?? [ 884.828767][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 884.858761][T12028] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 884.882505][T12028] usb 2-1: device descriptor read/8, error -71 [ 884.948680][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 885.445333][T12028] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 885.584165][T12028] usb 2-1: device descriptor read/8, error -71 [ 885.742150][T12028] usb usb2-port1: unable to enumerate USB device [ 885.919868][T20504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 886.933445][T12028] usb 4-1: USB disconnect, device number 42 [ 887.367381][T20533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2091'. [ 887.998813][T12028] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 888.179095][ T6454] net_ratelimit: 20 callbacks suppressed [ 888.179111][ T6454] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.197223][T12028] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 888.220332][T12028] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.264328][T12028] usb 3-1: config 0 has no interfaces? [ 888.276472][T12028] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 888.317903][T12028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.338713][ T6454] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.370535][T12028] usb 3-1: config 0 descriptor?? [ 888.514481][ T6454] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.667227][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.800291][ T6454] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 888.815230][T20552] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 889.009267][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 889.031312][T20555] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2094'. [ 889.118709][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 889.228824][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 889.409615][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 890.251122][T20569] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[20569] [ 890.497076][T12028] usb 3-1: USB disconnect, device number 49 [ 890.590386][T20584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2098'. [ 890.629461][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2099'. [ 890.694211][T20566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 890.711435][T20566] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.015225][T20587] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 891.046739][T20587] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 893.259180][ T1010] net_ratelimit: 27 callbacks suppressed [ 893.259201][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 893.388777][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 893.510610][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 893.656357][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 893.858667][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.013304][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.100486][T20633] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 894.168661][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.299969][T20644] trusted_key: encrypted_key: insufficient parameters specified [ 894.318668][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.499230][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 894.620332][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 895.010858][T20653] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2108'. [ 895.021094][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2108'. [ 895.541031][T20657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.369384][T20681] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2111'. [ 897.431187][T20679] bond2: option ad_user_port_key: invalid value (34448) [ 897.438307][T20679] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 897.621632][T20679] bond2 (unregistering): Released all slaves [ 898.041881][T20757] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2113'. [ 898.217446][T20757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 898.438832][ T6454] net_ratelimit: 16 callbacks suppressed [ 898.438848][ T6454] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.487732][T20765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2114'. [ 898.581472][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.843390][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 898.968842][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.078704][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.188670][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.328640][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.449151][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.558740][ T6454] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 899.698720][ T13] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 901.353301][T20799] program syz.3.2121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 902.187589][T20805] syzkaller0: entered promiscuous mode [ 902.206081][T20805] syzkaller0: entered allmulticast mode [ 902.723641][T20823] syzkaller0: entered promiscuous mode [ 902.738237][T20823] syzkaller0: entered allmulticast mode [ 902.888647][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 903.159355][T20834] sctp: [Deprecated]: syz.1.2127 (pid 20834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.159355][T20834] Use struct sctp_sack_info instead [ 903.337616][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 903.402819][ T24] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 903.420797][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.461034][ T24] usb 3-1: Product: syz [ 903.578110][ T24] usb 3-1: Manufacturer: syz [ 903.668222][ T24] usb 3-1: SerialNumber: syz [ 903.698304][ T24] usb 3-1: config 0 descriptor?? [ 903.840807][T20847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2129'. [ 903.900382][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 904.158844][ T6468] net_ratelimit: 26 callbacks suppressed [ 904.158860][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.280728][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.400271][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.464953][T20856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 904.688857][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.751505][T20856] libceph: resolve '4' (ret=-3): failed [ 904.759705][T20859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.808730][T20859] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 904.817345][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 904.918917][ T24] gspca_ov534_9: reg_w failed -110 [ 904.960044][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 905.089113][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 905.198870][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 905.218598][ T24] gspca_ov534_9: Unknown sensor 0000 [ 905.218686][ T24] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 905.319069][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 905.462417][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 905.884446][ T24] usb 3-1: USB disconnect, device number 50 [ 905.919309][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 906.102909][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 906.421761][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 906.479203][ T10] usb 2-1: config 0 has no interface number 0 [ 906.486019][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.518698][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.551380][ T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 906.654756][ T5818] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 906.662595][ T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 906.837315][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.880652][ T10] usb 2-1: config 0 descriptor?? [ 906.898648][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 906.911232][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.930126][ T5818] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 906.952410][ T5818] usb 5-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 906.961872][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 906.967101][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.978867][ T5818] usb 5-1: Product: syz [ 906.983074][ T5818] usb 5-1: Manufacturer: syz [ 906.988123][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.008677][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.048658][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 907.057955][ T5818] usb 5-1: SerialNumber: syz [ 907.100251][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.110495][ T5818] usb 5-1: config 0 descriptor?? [ 907.112639][T20909] netlink: 616 bytes leftover after parsing attributes in process `syz.3.2137'. [ 907.149994][T20912] syzkaller0: entered promiscuous mode [ 907.155766][T20912] syzkaller0: entered allmulticast mode [ 907.166589][ T24] usb 3-1: config 0 descriptor?? [ 907.176837][ T24] hub 3-1:0.0: USB hub found [ 907.464328][ T24] hub 3-1:0.0: 1 port detected [ 908.413975][ T24] hub 3-1:0.0: activate --> -90 [ 908.800418][ T24] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 908.800773][T12028] usb 3-1: USB disconnect, device number 51 [ 908.916638][ T10] usbhid 2-1:0.1: can't add hid device: -71 [ 908.929929][ T10] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 908.966105][ T10] usb 2-1: USB disconnect, device number 45 [ 909.049132][ T5818] usb 5-1: USB disconnect, device number 36 [ 909.277291][ T60] net_ratelimit: 28 callbacks suppressed [ 909.277311][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.399379][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.520328][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 909.806241][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 910.376409][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 910.689120][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 910.798676][ T60] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 910.928346][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 911.228772][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 911.236412][ T6454] bridge_slave_1: left promiscuous mode [ 911.297011][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.328802][ T6454] bridge_slave_0: left promiscuous mode [ 911.334524][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.038713][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 912.106134][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.117448][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.127007][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.136517][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.144290][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.208656][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 912.219464][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 912.235755][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 912.244982][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.253068][ T24] usb 5-1: Product: syz [ 912.257711][ T24] usb 5-1: Manufacturer: syz [ 912.262583][ T24] usb 5-1: SerialNumber: syz [ 912.279343][ T24] usb 5-1: config 0 descriptor?? [ 912.325523][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 912.630933][ T6454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.673108][ T6454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.686677][ T6454] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 912.718183][ T6454] bond0 (unregistering): Released all slaves [ 912.991553][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 913.034079][ T6454] tipc: Left network mode [ 913.048672][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 913.248710][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 913.268852][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 913.277180][ T24] usb 2-1: config 0 has no interface number 0 [ 913.408820][ T1010] usb 5-1: Failed to submit usb control message: -110 [ 913.469741][ T1010] usb 5-1: unable to send the bmi data to the device: -110 [ 913.477086][ T1010] usb 5-1: unable to get target info from device [ 913.493486][ T1010] usb 5-1: could not get target info (-110) [ 913.518761][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.607901][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.618113][ T1010] usb 5-1: could not probe fw (-110) [ 913.649089][ T24] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 913.684042][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.763270][ T24] usb 2-1: config 0 descriptor?? [ 913.811130][T21100] vivid-007: disconnect [ 914.255711][ T5820] Bluetooth: hci0: command tx timeout [ 914.418303][ T24] usbhid 2-1:0.1: can't add hid device: -71 [ 914.424352][ T24] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 914.446029][ T24] usb 2-1: USB disconnect, device number 46 [ 914.551780][ T5818] usb 5-1: USB disconnect, device number 37 [ 914.739238][T21082] vivid-007: reconnect [ 914.899756][ T6454] team0 (unregistering): Port device team_slave_1 removed [ 914.959807][ T6454] team0 (unregistering): Port device team_slave_0 removed [ 915.501537][ T6459] net_ratelimit: 2 callbacks suppressed [ 915.501552][ T6459] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 915.587719][T21031] chnl_net:caif_netlink_parms(): no params data found [ 916.263373][ T1010] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 916.288734][ T5820] Bluetooth: hci0: command tx timeout [ 916.521818][T21031] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.545521][T21031] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.572460][T21031] bridge_slave_0: entered allmulticast mode [ 916.596086][T21031] bridge_slave_0: entered promiscuous mode [ 916.700418][ T6454] IPVS: stop unused estimator thread 0... [ 916.707113][T21031] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.740373][T21031] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.754298][T21031] bridge_slave_1: entered allmulticast mode [ 916.781802][T21031] bridge_slave_1: entered promiscuous mode [ 916.909293][ T5818] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 916.963304][T21031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.265698][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 917.300680][ T5818] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 917.324099][T21031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.362943][T21276] netlink: 'syz.1.2161': attribute type 4 has an invalid length. [ 917.410952][ T5818] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 917.441174][ T5818] usb 5-1: config 0 interface 0 has no altsetting 0 [ 917.473774][ T5818] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 917.484604][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.493160][ T5818] usb 5-1: Product: syz [ 917.498691][ T5818] usb 5-1: Manufacturer: syz [ 917.503309][ T5818] usb 5-1: SerialNumber: syz [ 917.532362][ T5818] usb 5-1: config 0 descriptor?? [ 917.607428][T21031] team0: Port device team_slave_0 added [ 917.834576][T21031] team0: Port device team_slave_1 added [ 917.978003][ T6468] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 918.228930][ T5880] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 918.344072][T21031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.374843][T21031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.374962][ T5820] Bluetooth: hci0: command tx timeout [ 918.491756][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 918.515032][ T5880] usb 2-1: config 0 has no interfaces? [ 918.533641][ T5880] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 918.550743][T21031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.550817][ T5880] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 918.617643][ T5880] usb 2-1: Manufacturer: syz [ 918.643652][ T5880] usb 2-1: config 0 descriptor?? [ 918.688862][ T5818] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 918.738641][ T5818] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 918.749004][T21031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.755972][T21031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.995201][T21031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.175660][T21346] syzkaller0: entered promiscuous mode [ 919.187232][T21346] syzkaller0: entered allmulticast mode [ 919.582294][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 919.582311][ T29] audit: type=1326 audit(1773430954.710:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 919.612064][ T29] audit: type=1326 audit(1773430954.740:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b4835cfce code=0x7ffc0000 [ 919.635327][ T29] audit: type=1326 audit(1773430954.770:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b4835cfce code=0x7ffc0000 [ 919.673886][ T29] audit: type=1326 audit(1773430954.800:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 919.721526][ T29] audit: type=1326 audit(1773430954.800:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 919.796590][ T29] audit: type=1326 audit(1773430954.800:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 919.847421][ T29] audit: type=1326 audit(1773430954.800:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 919.891423][ T29] audit: type=1326 audit(1773430954.830:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 919.947113][ T5818] usb 5-1: USB disconnect, device number 38 [ 919.990033][ T29] audit: type=1326 audit(1773430954.830:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 920.023284][ T29] audit: type=1326 audit(1773430954.830:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21363 comm="syz.3.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4839c799 code=0x7ffc0000 [ 920.448642][ T5820] Bluetooth: hci0: command tx timeout [ 920.518646][ T5818] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 920.678710][ T5818] usb 5-1: Using ep0 maxpacket: 16 [ 920.697160][ T5818] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 920.750738][ T5880] usb 2-1: USB disconnect, device number 47 [ 920.766953][ T5818] usb 5-1: config 0 has no interface number 0 [ 920.791778][ T5818] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.836404][ T5818] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.867340][ T5818] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 920.898710][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.921784][ T5818] usb 5-1: config 0 descriptor?? [ 921.355165][ T5818] usbhid 5-1:0.1: can't add hid device: -71 [ 921.403514][ T5818] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 921.536259][ T5818] usb 5-1: USB disconnect, device number 39 [ 923.399764][T21445] Oops: general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] SMP KASAN PTI [ 923.411698][T21445] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 923.420119][T21445] CPU: 0 UID: 0 PID: 21445 Comm: syz.3.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.431059][T21445] Tainted: [L]=SOFTLOCKUP [ 923.435379][T21445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.445439][T21445] RIP: 0010:task_work_cancel+0x8a/0x220 [ 923.451061][T21445] Code: b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 44 25 00 e8 1d bb 35 00 43 c6 44 25 04 00 49 89 de 48 81 c3 e0 09 00 00 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 e7 f7 9f 00 48 83 3b 00 75 51 e8 [ 923.470683][T21445] RSP: 0018:ffffc9000c7b7b20 EFLAGS: 00010206 [ 923.476750][T21445] RAX: ffffffff818fe363 RBX: 00000000000009e0 RCX: 0000000000080000 [ 923.484735][T21445] RDX: ffffc9000f258000 RSI: 0000000000010427 RDI: 0000000000010428 [ 923.492708][T21445] RBP: ffffc9000c7b7bd0 R08: ffffc9000c7b7c97 R09: 1ffff920018f6f92 [ 923.500674][T21445] R10: dffffc0000000000 R11: fffff520018f6f93 R12: dffffc0000000000 [ 923.508640][T21445] R13: 1ffff920018f6f68 R14: 0000000000000000 R15: 000000000000013c [ 923.516610][T21445] FS: 00007f0b492236c0(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 923.525528][T21445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 923.532101][T21445] CR2: 0000001b30a14ff8 CR3: 0000000056218000 CR4: 00000000003526f0 [ 923.540253][T21445] Call Trace: [ 923.543553][T21445] [ 923.546474][T21445] ? __pfx___wait_for_common+0x10/0x10 [ 923.552031][T21445] ? __pfx_task_work_cancel+0x10/0x10 [ 923.557395][T21445] landlock_restrict_sibling_threads+0xdc4/0x11f0 [ 923.563912][T21445] ? landlock_restrict_sibling_threads+0x25c/0x11f0 [ 923.570500][T21445] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 923.577354][T21445] ? landlock_put_ruleset+0x10/0xb0 [ 923.582544][T21445] __se_sys_landlock_restrict_self+0x540/0x810 [ 923.588693][T21445] do_syscall_64+0x14d/0xf80 [ 923.593345][T21445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.599435][T21445] ? clear_bhb_loop+0x40/0x90 [ 923.604100][T21445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.609979][T21445] RIP: 0033:0x7f0b4839c799 [ 923.614385][T21445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.634020][T21445] RSP: 002b:00007f0b49223028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 923.642439][T21445] RAX: ffffffffffffffda RBX: 00007f0b48616180 RCX: 00007f0b4839c799 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 923.650424][T21445] RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000007 [ 923.658397][T21445] RBP: 00007f0b48432c99 R08: 0000000000000000 R09: 0000000000000000 [ 923.666376][T21445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.674351][T21445] R13: 00007f0b48616218 R14: 00007f0b48616180 R15: 00007f0b4873fa48 [ 923.682326][T21445] [ 923.685344][T21445] Modules linked in: [ 923.690257][T21445] ---[ end trace 0000000000000000 ]--- [ 923.736444][T21445] RIP: 0010:task_work_cancel+0x8a/0x220 [ 923.747798][T21445] Code: b8 f1 f1 f1 f1 f8 f3 f3 f3 4b 89 44 25 00 e8 1d bb 35 00 43 c6 44 25 04 00 49 89 de 48 81 c3 e0 09 00 00 49 89 df 49 c1 ef 03 <43> 80 3c 27 00 74 08 48 89 df e8 e7 f7 9f 00 48 83 3b 00 75 51 e8 [ 923.970087][T21445] RSP: 0018:ffffc9000c7b7b20 EFLAGS: 00010206 [ 923.976184][T21445] RAX: ffffffff818fe363 RBX: 00000000000009e0 RCX: 0000000000080000 [ 924.056997][T21445] RDX: ffffc9000f258000 RSI: 0000000000010427 RDI: 0000000000010428 [ 924.097725][T21445] RBP: ffffc9000c7b7bd0 R08: ffffc9000c7b7c97 R09: 1ffff920018f6f92 [ 924.115093][T21445] R10: dffffc0000000000 R11: fffff520018f6f93 R12: dffffc0000000000 [ 924.158864][T21445] R13: 1ffff920018f6f68 R14: 0000000000000000 R15: 000000000000013c [ 924.166907][T21445] FS: 00007f0b492236c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 924.185861][T21445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 924.203020][T21445] CR2: 0000200000343030 CR3: 0000000056218000 CR4: 00000000003526f0 [ 924.247715][T21445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 924.266723][T21445] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 924.307764][T21445] Kernel panic - not syncing: Fatal exception [ 924.314124][T21445] Kernel Offset: disabled [ 924.318437][T21445] Rebooting in 86400 seconds..