last executing test programs: 45m20.096958287s ago: executing program 32 (id=21): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000005180)={0x2020}, 0x2020) 45m17.834333022s ago: executing program 33 (id=22): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x4}}, 0x120) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) memfd_create(0x0, 0x3) socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe78, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x45888, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x221f, 0x0, 0x23, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0x563, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x8001}, 0x8) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r8, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 45m14.719875051s ago: executing program 34 (id=27): syz_open_dev$vbi(0x0, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000022c0), 0x2041, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendfile(r6, r5, 0x0, 0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') write$FUSE_STATX(r5, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x6, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1ff}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0xe0, 0xa}}}, 0x130) 44m58.530871118s ago: executing program 35 (id=37): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$VT_SETMODE(r3, 0x5602, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x1) fchdir(r4) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$char_usb(0xc, 0xb4, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x7, 0x0, 0x1, 0x5, 0x5, 0x63e9}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r7 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000002c0)=@keyring) 43m8.779822407s ago: executing program 36 (id=81): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 42m54.02755505s ago: executing program 37 (id=88): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, 0x0, 0x48010) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x40, 0x8, 0x9, {0x9, 0x7, "ca23dc66d6f1a1"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 42m3.736277075s ago: executing program 38 (id=156): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaef2, 0x400, 0x2, 0xbfcffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 41m25.354138086s ago: executing program 39 (id=197): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 39m52.298920981s ago: executing program 40 (id=249): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x210020, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$SIOCAX25DELUID(r1, 0x89e2, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, 0x0, 0x5f) sendmsg$nl_route_sched_retired(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007480), 0x0, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 35m13.458935879s ago: executing program 41 (id=567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast6-avx\x00'}, 0x58) 33m53.017552242s ago: executing program 42 (id=691): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xd41, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7ffb, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26m57.267570696s ago: executing program 43 (id=1768): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004001000ffff00000b00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r2}, 0x38) 25m9.921512668s ago: executing program 44 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) copy_file_range(r3, 0x0, r3, 0x0, 0x6, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000100)) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 24m45.903749056s ago: executing program 45 (id=1988): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x29, 0x8, 0x55600518, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000004280)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ab725c861b08395c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000226089f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076cf00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd652b75951a20c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000059000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x20000001, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x200, 0x81) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='iso9660\x00', 0x200219, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 21m7.780217952s ago: executing program 46 (id=2328): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004ac79e3d41ec3b9a26b4eba427a199b9982ac9cb65807401db7b23bff646aa418fc81759e301eb990c7001e4c467458ebf50edbf05788f556309e973727aec74329bb03a410e781f51f01021d95b7509994021e336ca3268b41eddf73fa8aafccd7d831bdb3e8244764250d1296a981012", @ANYRES32=0x0, @ANYRES8=r5, @ANYRES32, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) socket$unix(0x1, 0x5, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 19m45.440041673s ago: executing program 47 (id=2501): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) 18m21.276060071s ago: executing program 48 (id=2636): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000280)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000300, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, &(0x7f0000000200)) syz_open_dev$vbi(0x0, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = syz_open_dev$dri(0x0, 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000240)={0x3, 0x2}) syz_open_procfs(0x0, 0x0) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 17m56.482407033s ago: executing program 49 (id=2664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create(0x10001) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x44, {0x5}}, 0x14}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r2, 0x47fb, 0x0, 0x0, 0x0, 0x0) 17m43.315749449s ago: executing program 50 (id=2695): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f00000004c0)="e0"}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17m35.285866719s ago: executing program 51 (id=2703): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0) sendmmsg$alg(r1, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m10.530008995s ago: executing program 52 (id=2710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x121801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)={0x20, 0xf, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x18) 16m39.449222734s ago: executing program 53 (id=2720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="58000000020601080000894b00000000c00000020c0007800500150009000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c706f727400000000129b13f48ae7dc694093bba93ba86e508ba576c5dc7a207e427c4b2e37acb10d0a415d67c5a326ff87a88f1780daee3c9c5aac5a1528cc4f16cdc12b1c9a29acda020e95cc95a9787223e9bdbf74e328b6b92420e2c300d0c728626b5c30d405f4d7320f0c579437aa58496d48c8249e58c46a87082734a8f107bae549492a0d3be385aa6dc14c0cba8d88"], 0x58}}, 0x0) 16m5.889701848s ago: executing program 54 (id=2749): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 14m50.911988191s ago: executing program 55 (id=2810): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r3, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 10m54.583512969s ago: executing program 0 (id=3203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000280000000200008001000000000000070000000002000000f6ffff06000000fb010000000000000e03000000000000000000"], 0x0, 0x42, 0x0, 0x100, 0x0, 0x10000, @value=r1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) socket$kcm(0x11, 0x200000000000003, 0x300) close(0x3) unshare(0x22020600) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 10m50.336467724s ago: executing program 0 (id=3208): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000002540)={0xddcdc000, 0xffff1000, 0x1, 0x358cfa5c6090f344, 0x87f2}) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)=0x5) 10m42.277564738s ago: executing program 56 (id=3197): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) 10m42.247188661s ago: executing program 0 (id=3213): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x69}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0xca800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10m40.729500862s ago: executing program 0 (id=3216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 10m38.989171859s ago: executing program 0 (id=3219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x400, 0x7fff, 0x9, 0x4, 0x2, 0x0, 0x70d0db32, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040010) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10m30.150355573s ago: executing program 0 (id=3225): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req={0x0, 0x6, 0x5, 0x8}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000000280)="0d1c409c14b8ddbbe2423ac75d732f3d0e9cd37b375b9673cb39c6b35cbb85c4ba83de9d23bbcdd53a9f0d7c92b66f6d872096b32f4bdac32a6136c86365cfd42c3b0a25fac76123b6d700d3ba70cc138bc435d3b1fcee2545c3a421119087bddbbfd0418488219343819cf0a6780d54166d2769a719b207136357ff3f505fc1d6144239ba630b15e7f8aeef7be5cb8c9e738faec0d1ab79d34b994e098323b94d32926bc3b0fd88c13cc781a0fc3da7c4d83fbaf3288fabe01685a3422570fa4cba7e840bd0a01e995c91c5aba51ca15461dc1916bde9e70c66f3aae48475e95aea1f8e6c6f10104d64f767b7f9b7909f5caa5fd61ec7bc7392bfb7fe4f1d1d0528601a87f9248693f31a0f2ea07a0f33e670bad3ba0c648266195c6d9a76cd973a9da6016d1f5e0d49122f64da8933cfcf6a970d11767279a9e8e37a30a007e6ea473e146069e72894fcd378e17d4fa761999c128492a0321c3153edf7b28d0cddd78758f5192a924fbe2e8c594cf35aeffc635b14903d134fc5f7857218f99266c64be16e5f4ad76a8b5f6d39ca2451afcdcb0cf42322a5166becc90621f99f28e42bb2cb610039c45e54cc4bb8e8210e612a3f1ac93366b7bd77410af8b4b3eb03085354c9f8d12cc62da82eff96a006dab656c10e1bf210124b0ed6841158ec70981a399ba7c406f3014bf77553be6197d79dc1d31ac4c598bdbd007578d50f00ce85810e0759e91505549c70005a5f923aba20d8e05d0b764680b9ea259c8fa71f1ee36b71da662b825019c07aade7db363662103887079dea43ca30c32e4f0d9ff043720541633157a3ff1dc055ac1db5b25765b7ef2e338c104db28b6be7fdae54f04075e26ce38ec71d35c029df580ee3ef68e46359031aea121d0776398d1f1e28e9cbdc20cb58adf5dfa01a2819f697bb3189ac0d32eec43c0ef75f5bd4c7926d18daf9a6e9265c961aadbed4fb9627a1f0a6c3dde66fe5530993a7f150e5b361ad0db403a864ef4f5e0f21db55aa22055bdc5b282b057d07efd6abe23f941a62d6f613a1ff8d31da632284e89a3069c6b26ef35e55fc846fb1c28651cc5a879a4994568c4639b9fba8395014c9f4f6152cee1ddf8d582bc496bcbad8e39e0a5a3e713deed021eb9d5b3f8679a8bddc08ca77d7cd101006c5021b65cc7648a646735d9d7f6e54e4fb5bcf1fd9aee4beb700e597011a2fa6c01d22e9b6c7a5afd7def8ab0a3e612d8a5ce571dba2d0696155c3dbfcc851293eebccfac6855a7b024d762e768867f57446ecd6e1d09a31959a6374c50445884dfcc68a62662e5701a25a1da8e0abd0428bb558f9f7e74c250d4af62afad71e0f23268a955c548b41cc83f6810c72c832476383a355abfa449fc05c7afa2ed70849f175e826361882503246e688983f472c418578ae4c893d847c0c7f8ec99352d3024a69134dfccbc6ec3351b321483c57d2d1e77c0c7551cdaf4c14038844b1b05c25541d1d48bf0dfd1ae40c35872a5b37c2958e3a60187531814f3adff870aeb42cf611c3f777b08f7dcacf5c087b19c17dfca413097a603823363c2c55597330de20a73465ccbe5acfad066fcb17c177827cf081c588b73c042150bf1a18aff97518fbc1b4d5d22f29077e186ae9b998b4d6fdbcbc8c3bd57dcc61cc322537743ce480c1dea39adcc6a51da745a60e5272a7181986bcb992895035f0f882cdf79c56a84cd88c9bf0b7dab9c1f453cf4c05e2a33f43f4252fdcf99cf785e639bd9d11c374d4e3107ce128d2a823b6a8631a8fdebdf14a0bfc3f79d44cd54d3e8b9c5a3f41b9a1187e23f5a5eb5fadff92d746ff3befec7189ca19c1987551d0fec321cc306d235f82b3f479f3d7a3c1d2377afe3f22a49c682646e9893d7700061a0229a99d360f89d281dc6bb95b92329cc7277b89a9e6a3edd3c753cbb93e9f1249572bae520fb7c46970f527fd93c445a8159d4992badc395c05313462d37c4f651afbdb04f9f42ad4433c5c765735731ed6d8c97e4ca9fd3a1885de6c051e652a1ea40230e9d854ec2145c78ef5574deac83e78df8932dde1d5c46862c9f808394dc7f064b5649cc7b2627a55683ed33f2712ad2d4f77ec7f2be200e01fca138b3d1f42916a54a66561916bcbd3109f6eacf5096e478442e56e5af61f7c32c681bd35bf94a429a52024a48f6002978594418b66c6eb0fa91dccc4fa83d48927349b8a7cbb70670bd78b8acbbcb554a219cdc6740de4bbfcad2250fc219436ba5db017c172d6e24eaedf29d169b8867fc84eb2e721b31b08604a6fbd8d5edd9bb0152346509619f4a0f41090228b10868f56cd7d7c025cccc8f2b4a7d85ab91862c65d5d578fd5c046928c5c8f999611dea07a1451357b4365b33bac0a2a842b84e2cd4f790dca74cc962000f72d821b093e271e63680c0e9019769f3abed377f51f2e0a373958dfe351a1db29da4b74f9ba1250a8a0b985ed86cd7a2a4ede57ce00dbe77f5c797e6b9896ccb978d3a01047f9ac7d66e820073193b6a3400ff41f2f8a98a44a0d2a608db3000571efdade9a44f278272e7ada101d275c589fed2ee0191801b7a2ea62dec117c9cfd96ccb73de7fa2eb4d60a7ce1170047a5266668da1aa8489c6e4ce564607a485afc6991ba262cd6f155c23fbb47610f555e0be090854ffa0d610ae4baa1dbd1f36249beb0510b8d96132b6396a6261214f3153bfc4f0dcfeb55046bcca5868aa913316a2e802f9bfb51caacfd0045d96b3983b883db123da07fc20d06c973e3dc74c53006c77361cfa9d3b2062da3f9740cc7335ec792d1b2c767e86417433fe047c8d9368c0c51373b5e5158503afa52ab08ef49616499ccb8dc829e343d25fc1fc2ea6c95933295ab397f07703d1d8defebeb44a2a9556bbd5414cf921abfa8df9bc5ea76922d728ef0024f516c9fd7a2927a68ba9a7dcc4f52c3d8b72909b2bde14408e476778a3221644dfa13794e365a9ebb670eaf691b3c2393adc441519c1125b960ff109ccab52294c6584d74b3084cfda3707f7153681c88a1578a77be9224a70ce400f4af3dd72452df147476abf2668c1801fe538be40042717b6c468fe1a33d1d597fb637396b8ebed9f64eee42e645bd8dc0e63fbd3a139bce3157ce7ed6f5f643ee26847908efaf61cd977627647bc0e4f119b924bb185664f1dcf2240b2697c89e8f569332d19ceec176642ebf0bf509bd3b9477272159d45b708510908e74cc5e0304104d5ed6e578b46dffcf64367fe9d274ab8f16f3154f3e83ce6d3ae92a2644ceeb8ec33e07f728319eb69dfa37bb70b40a1001ff0157173e33af633496062b17cfab8b5c06ef2fadfef280da4e1f70fbbac10981a0b35f3ada39733d7d31798e455f0dd1c530939f09df43b5aff342c39052a51d773b22acbc8c1525f3572ef469eefe66d1895a9ca3c637286e3f9acd29e890ffccbb313dd9da50aacce808d06d0b109a16a1c2bf69fc4b85b9b7cc9b9ba9e5d709c65fd0a879032caee38315eb049b12f11c4d485ef426fff3a4f91b4f1ad4c192c4074636787ff966f82c8d4fcad13a7b581718ee7318f6731da2eb1338c95c35f1f2e082bedea7f05b87d891876cfab51ddf2908ebb2bc153c20001ae9c142b35a3de474b732c5f629bd948ac9230067120671d296001cabe19e3d2302c1f32e4fcff1681ab2ef216309c21c6a5afc51ac500687a5140d015ee2bda5f3d8a15826a21a0a9495b36fe958fff32afe270f809f3a8f8cd2d8992a859e5de779bd8aa4dc6979807171282ef34502f1bf34f529cdad15671692f232a9f2dd2107f8198f7a9ea5883cbeb2a060ff1b13fc1a4df315dff940e8f013e8142c640acf51ebb2b2f878dafb6c12747cef3061f2235bccceacce4bf9829df24b9f9e9c5c259aafbe61ff6be827e492e2c03fa1e9f936196ff9acb28081f7ca74109d823c5c96b1e808bc2b8072763954ec5691f7935284e045c6d86c5c68d69b4502a5132b3c1cdc5e000ed1f6aa4bc0a9090a8923004ac05558e08827c71fd2e24f931f880244143a8d092dc8bb2b48317ff49fa0b494b3fea0741fbcac6cf780f93db42f47d23170a70619d06b0462f2fb04dabe2a0c94a1d97ecb159d426df47f0a1e13764e045d97ba75fd0eede9711d112581b4a2e66b10077aa92c98e30d6504f0c08c0c68015c88abbc991d5a799e588d1ee7492d699126627ace339c1bb024a59ccd9d3df0197c8e56219d76698b61ec94927f41ccc7bc80ab6f65380d31d58f796e7e697b28e371ecd9ccf6b58e9cf32daee54c5228268446677f600ca8d091b6a4774749d40d6d4d6a009ae12bae1c530e6961420507a13a2a32c4f0863c790159a26588bed9f50b4ffbfc8649adc8144779653b4226fed5ab93570fb3edcc1be70780f6ddc8d9ef1ff39d22bd20cd8ae0195d02ada60fa0d65e065b7a3950d5a2b77546ad8f1c1018344589085638793d26fb4a5c59c23f1c9b148ddcbc478e1867e109590c44c14f5ad6e8cda21a75358cbfe6f397c711eead2b1c73df1453d184a44e85c2f6ac0c266b0f67b001426cec02efb66085bd1b8bcaf06d6709d545895337fe36e9d26417238f36be5ba51d5cd7cd7cec452780b72bc441052f67496ed8bb4d393db8da52aa3b0ef10a74a33c2b7ee24f76642f83bfc3e686951cbd1983f1ea54d536f6c86e8b20a4eaefb9ca57308abcfd81357e3d0eebeb0ff805c151ea1d0063c3bea7120562886fc4ce284f33d4a85c830d8b9b9b1295c352c3f5db54973a5ed3788e5396a1add7022546f13db95e4ad1a994142aa4f98d644cd822192e3e1875da3b4a6cfd61cca36a82fd4c1f09db84f6b379483e2b81749609750b493e406c8add341d8855ef47d8e8cd49e9d1340be1223d268bed3a2cc949b74cf01160723d26de9b11138fd8e8957354c2a58fa30903b7544d2bdf49249e5ca9f5d030f0c17e7ec605482523d1da3b3ca6c94c8724c20b929954c1c1f321ba7f77e2e954056a2838e57696e40a2fc9f8c2b7e25a41cd500f4fffb196810b3d77f79dfc1f7179fd4e2c63957c65da8325185cdfa37a82d42ebfc631a87ce7ba60ad09132f1eabe7b870c88fa277578e19a6adabd328e6b453dae201ce4327a378174695264ff4411a3815c362480058038b1b70b652e89b0c7743548b897c80c53b16aba4d244753fd8c14c8bcdbe2a2710df7842a8af2bd0a966632655c01bbc2604151b80e349b2f5f63fc8fdfb34c7223803fc0fd1dcf7fb5471c65f59ef9b02c3c0440f7e44fa4759782a46165c64e2ffc246d0438248c461e932806ddc20d3eeb597d74e9cbfba85951c601fd8b903c80f5d8bd5fc5b824cd63d9bc2d38438eb8a8bd1fbbad944b3ca074eb318ae074ef4d7f12076ac1809ca6868be7e5fcbb953ee70bcccb7cf51422e8293faf3e88d4b179b4c7a6ab53638eb05c902715c023f33ba9e121aed0b7b5f0544b5275cf22093e64a7038cda03fc9014002cb52d4568625d321b344e566b50a7e9695c79daab4aa0fc82790cd32708bdc0242686052677eb163cba152231e45d0ad1b8238a7d1230f43612ae8b9525d1f98372774a326e9baa48e69093b215ea503e054729722a71c7e6c58b958f3cec95fdbf1811b7c8a53787e95d266a70d408798e94d9579e813a8e9e3d4bdb4f2682f7aa30b659c722aa07faa911543c57db9fb3abf73ac5b4096cadb4bfa2b25e51b11e754348a2abff384a16194af26590ccd657cf76bae1f1246b67ee0834105f008cf77b1320ecfcb87bfa7d2b2fdec1330f54b6c6cf2280119e39e9a66ccef3df0c4297e1c861a027fa2ea5a1ab530f5b94a98895405c620bb6faecd7e80bfb42d1a4646360e0e8355af548439f8db48d583352ea84385e271b3067bf7b047e69e23c3bd2c3ea74df48b3649985b0ef12a9f3803ccfa52e01381d30a9005f0415a149557b67d0ac7c439ba8b20a9eb293ee4d357cc1d9e1e7f707ad77e58f22d2b26f9a8e726e826b6722c2b910416dcdaf772476e55256fefb1fa5de0139e15c2bf84e267be5d5381bb30607b731c8f305a1b4e1e4bae0b59e61dc77b13d129dfff4fdaf48f95038cc11b14e8266aac4d59fb40346c07a7fee92327e40905e40f8135b0f6e9e31969902e9926a99d7ae30891be917581189ff998ea5310da0cf72faae333ab8ee7cb9f78bb0a8695a841b8d37709e2826594cc8927f5dd98c53ea4c5246b5fc09f756f29b61c21996dcb6c0f1e476674aa9b6f69ccfcf8672b048ee723af55104da1c2f5250e8bbb3bdf2b7edb4878a902032ab4115f516d804d2cde7bce6b0c6dcd1f0d321fe4bb279e4c45294df0fd33956469839c70bcb68c033b597daf3f515354e72fd1ecff87e4b8d1ae52e6ef0fc773a49ca76d0659454b59e9c62fc8e10131e50893c0c0a997fb5766157701ce8e6a6482bd8b0b53a6b4fd4227d8e02c6453114f161017b18e52867282010df15c361a0ed3b17636adce6567ca97d4864dc15fca353490aecd5d26af991a92dcfd3e4dd38b8ed9181dee7e2e20cc2600c3211eecafd0dac537a693573e843259c30789a3d0ef91b78f95ed5da1c9e61716f651284e4eea663aab9c30d28a620745e44fbcf71221a23d332d411d17220c5a43321cbae90ba8104ffb4415d7563a21406d6be1fdc9abfff8998b51628b28b4ed84ded6804726cae5b62281949bb7cd7bec7bb2dfa8d831d4928b274c7452d2e9f8a37c67c98239b121d3acf381a10469d0dee019d38dbba865fdecfa34e39b0dcd4cf7a66e30f87d4f26d4190fdc62d44c850e94121ace3d531de3204ed5f838f5953c98b44a387a0cc95fc5e76facdf3a9f98183d32d887fb7d997a37b4737861bb12ea8e412e1015d3cceff7b448381f3fedd35a535e524f9e6df67e14882d9ec956a81e1972392c8c79cec77fe6d0f88a00710aaab4878187d6c387cf1ade1c61ca3b9bef117ad621c9a971d4f04a2e45314422f9f7606c932ab593db97747d7666948d04aacee1ceb6ae2fb205f32d953d94e5f2c7cb332eefa4bf11c999fb67e287960b64c36fa37de3c81fe53e057abc6f5575cb900a117242340126f721f8ad4c3d744440f2d9e1abf71fb24ca6f5abd392ce1110d4d138cd312373f99eef5a9b55a2a92a73be76860c380e5f2f1c9e5526ab5dc6f91d81d086dcfb70165c69b9bba0670366910ed053d43a61bc8215e95f304d73d38a689f174ac4940f1c7c87a011fbaa364e54887a0f38281509282943c38c77f9dbf385d0f8f62d30b300ae7ce24eb5b855057fc4fc8efcb05c4451fbc4de6f8b545559fb2bd2f8200eaa2822990d4afa0398e4c4d40534ece023306239bd86e2a0b9ae2fbfa640046379c1e2f0471e0005bdbd929119e54808f53fbc9ae318fd128aecaee2e314efcd76085a1da95b1261a321fe8229434dcc57844f15914221116d53faef06466643b996d5802167c0dcabe44979e576b4290aceee7aa771820fe113b85162e45961dea78ba31e0c54faa89ef75263d15580dd144745ab42b5d510f1beb115832df59ce57be19113f97aa21d984448e7fbc92c1291fd84f98e9ddd832336be330528e9df7b88f17f47708dfa401ba49562ef3650155bca61a81348896c151d05651caf865a3c40dbaecde5036233dd42a23f5712c93b2fa1c3ab754445bd258491fcf508ac344eeb38db1a4cb9980b1d97b826d76b0b10f8b8937dd0a9385c66ffffdab1819049c35aaf90b15267f7c58ff236c425414286bc7dfc3bd22abea8aeaeb113592ed41fa566d1426c85c3db9ef04e70b31ea52ae2f9352ae1195035b517f7e36350906773fabaef38fb29348b9797ec90cce08e0afb923fcfe0fe62ed2abd97d39949993048ae10c5be54808986f6c4aa437e413b449f57b0b0fc6f393808631fac191af623b8e90193ef2b0dda64f26b4771ab256bccd61ebf4b7ad099156986d64e77d37039d4a2e5836528a10c8c9d9ca9c640804dbf2db4154384cd8a8c02ce863e102ea944c17a643c120361d631b7f349f920ae6bd06db3e3af1bf902c3204e8632d27bd928701ee206a7d64448f9a81265a17a31878e3c1a2a044fc6f956b557471d1bf7dfe160716028191e851e18439f4e3561aa589528889090a3b673f70aebc1edb12861277f04f300acd8278e5f640ac0dc7e4f8df3ea39186119b0599f3e7bedfa0ee65e4d25d8586a2d10e773182d98ea9eef3b3d9805697adce7daf083b8a934c0d9c6467be25a6a22b6b246abcb355d03b8c3345dff9f40e253ae80a2de668dd9da044a2b90bc5788b0fe3a2c6387b3c817ea456eb7713a728caf4287d15006500435ff93eb6803e42e57c087c483e23605d9dcd6f758883fbb990eb0f91f351191956ac451e1c1d1ae113c03311057f5e70d8231bef8edb7c2cbecc4ab3e46b02945afbcdb2e8b005819dd141055af1fd6a3240af08751cd3a78ff92e39bba4d3c23aef960646512b3b86d6a8fa6880cfce6d58e1fbe734ac5f9b7018451a7a5879b3767dfb359eee615bab65116237e5de5b96bf9fbacd11702c73a8e478a64895d15ac0110737c3ab91222bc4c87326b5d5e3cf089da0a76d43222a8eeeb5286a4cb2fced98ebc2f6e876e8ff48b6f8f8264e52cf5b38906d657bd8d0d91e2d7846224ac60526f878e8189d80957a73a0fb95223842fb819286234d742c0aee14c75ed069411f7631aaa3e2a011fe75e67131a51733b9d2dc7981935d559a08a965363cdbc02dbadfcc4435040cff61df0cea2dcc5017deab9076fcc1a11ebe5020b6c96a16425397df15881815cf60b942648c234a5614ecffd4d5de50884934bdbd5177d24ee76f0c97fd0a2b97e527fa86c73ec672398f1d88c03d467f2712908d8fff5e02b4e1fe2d7bff02205597b3a5360e2767a3d7c488d222a3ea39d3fec61423e349689297868a4bfcf08a0938729fbc819ca2181f03f4ea42c7892dccd76560f1ef812ba7380681a8943e7bf2d6bb0729002a33a4a595c411cec870e8757e5d9cddb17563a627e598bd170cb6eab4d0d8a02c926bd0d67d2084df5873591ba8da1309f9c309fcdb1e1afea2ed48b467170f9d2539e62e75ed1e9ad94e2f574bba5e25f7473534e82e91263cef442f31e9e568a3eafa2b9de2a99fa681c6f6f245db26c24d56ae77fe239c63a70c2edd113f0d48bf5c2a887e1512bfb2801a0c628d3b91f57b1d1401b0e5e6012d32dafacd08775b1b28f15c44b03cd340a4e45be0534c4f5099c5bda5ef0035ab7d1ddbdb2e73ad49e15f6a04b5b09280581ebe2ce940a8058e2d14a0556c14adce8a40b6f0f78cc6bf46f0d0b2c4f9ce79e60eadd828eec8fd5c6b1196f685add24c959d4f1c9cbf7d21fb010df2f26fd1f1a5186186de0ab6f7fbf7ac2406a815382aad4edde90c8aa08ce053e86777fcbb089b4cbeb596949ff04739b53c4262b84881814c1cee97eb9147854b54ea354d53d906869c21e5772be517c127a0feb3844acb8b721f060e065b096d5f390b3557e25d50bb887ac018564a9b3ca3fe38eec76dace59bcadb81ed3764c177766ffc8770b7eca1fd3c87f3fc84f157974dc6356ab41388d973ae0a5a4a1d3d08f207b4add5bb902034f0be23bd27010cf5fb3a8ce4c34b123be47bf50fb6ff1593602e720d893561f72fcabdf7141ea4a274d319e9157ee4deb55dd412296525a1d82726fc8e8ad1ebddd6f7ac4ac10d3f59473cf5b0ae0644db9224268415ad314e4a7f4e4a17be80425198c097287ef95948ef260eb02d59e235caabeb1bcbf8829240e5637358879016ea8b5b06337d58aab36bc1a981d7667974068ca1a353a8caad2885236f407fcfc277210ff15f4d7d0caa2b31e5f745f455ff36a5fd9a9036c02f319a049ecb1d67c057130ae3d68374c82191059b44f8aebdf4574cd84cf7c031b6e177e8f5808f25ac76df8d7f9aada99e1a16ea5b22cc4bb349a352aceb2cb1ea47710704d446498f4d6ff2d8705797cfe62e03de9064a5831df451d021fcd93a71c3105f81df9d1ce5dc27d26d77326ab4bedf0c428a70772f2b0630b0640f643292e68e9b44d53f5c401f6ee09f8217b77b2d308e13cbedefa56920ad948b464a74c3e9ca9259d10132880d7dbd2c972c772985f7022a41ef473c254289982b9cde41f937a1de59b9a50caf728accac23ba485842dae35ad4ed412a31d2a134bf05ede9fc70fab45fee38f1f7e749e803446b418cc1b5e7f2019777ae03eab5e129e1eef2195ca84cde2848df14a93bbc3a917f1e06ce3753cf127f2241295fb630f6e27eadeaff570f955ace44dd204dcc082f7bcbe310e2c33267852049cb839142d072e3f3ebb1fc289c78769fd0f05578630e42a5829b82c6d535c012204aa74659282ba0498156e2183ecee174054d45fd97e5a0159255d8af432563d367f045d209c67cc70f7cf13b9a6578983ea640f0e8e66113484f48d41cb65b1338eb6cec534b3acdf9e5a1a3ac9157d75986583edfda4958e79593b6808b4762f823a6f442ee1749e592bc103f2b9e16107b939ece49cb447e5a7d34d66f18567d0e981f4fef25a467144689662783503a03e1800d22f40f61903d8270453161a68386bdd94d59dd66eb5ae067d4129be23a0b17b89d0478734460bb88c5771d9444caa769aa62d56bd128bc328e03d2e18d966f5784398ca2aab86007f7ca00908d4bd7f2f3ecf3024110b073304c7bb17bd73725721a99e94c8d5e5da7a839d58f2196cace99b98d7f584a49fee2a426e6ec3f08e520f7965aa2dad97084c2ebed43c58dbc9116f420d4735decc47dea514b689f5479c56b6128dd684c4fbf0945aa15363276af833b27b82cb48541413bc9fc51f9ce57c14bb6c39f86cbc99b69e5d91e7cf72f340f67012eb2f5fb21d830e97eb3664674ecc36c754f90d1a8f6092fe3a48827849ec95ed35887cfd2ab3f26331bdc154ad034f31ef26ecec5feedac1367f4f642e99ebb409ddd5dd8d0087ebf048e4924a2119c69ff00af79233443b897f7bd1d80f4d34555719bd8dd9c0d824d0437c2adfc598fd4c2c2d8cf7693e05238987bdb9bb04751dfcd44fbced899a7dadef499b9bfb45ee52ea59369c950821a667712946c7207e36473660f3f9c9906ed889ffe7a8c735e98d41cc96aecf3e577072cb4711eb690d28ff41dbe9070cd73da26875994a7b8480f2d21bd4b92402bc293fea154071c401581a9b858dcb4113149105d793fd4d0e98894f228f24250ada364f49180fbd116e0677cbfbe928a840dbfab2791865cec67ab39affa7b76c266285ed2ede7ce77e9e6f21545b8d177cc73e5142e6bbfbb3e9793716de8d6faeb74e18475cac7541e3ccd875cc0dc8bd5a01e468700d5817fc44b6dd64d74dbe0b351c80815102a0dc2038c83dc75189bb4ca425eabeeaa70fcebfda8f16c4b083762811325fdc6b94f84b6d4629929b85d0cf678b28651cab8a825f28440ca4e7a2193c6f9c769b0aa226754fa8eabd7cd1d31ea2478a83e0d79eaff6f72bfb05c31098f4640256b8c21ef25808821c08cbc68e8b6205fdbcb10b17d63cfb5ead7fb8ae1", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 10m14.854292309s ago: executing program 57 (id=3224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x7, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@local, 0x2, 0x6c}, 0x2, @in=@empty, 0x2, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 10m14.40091649s ago: executing program 58 (id=3225): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req={0x0, 0x6, 0x5, 0x8}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r2 = dup2(r1, r1) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) 8m28.575404893s ago: executing program 1 (id=3380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48d5}, 0x8010) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x14, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x5014) 8m28.034916811s ago: executing program 1 (id=3383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000), 0x0) 8m26.601564244s ago: executing program 1 (id=3388): r0 = socket$inet(0xa, 0x1, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a84476080ffe00600000004590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 8m25.589728617s ago: executing program 5 (id=3392): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x800) 8m25.386664659s ago: executing program 1 (id=3394): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x4) 8m25.229890403s ago: executing program 5 (id=3396): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet_sctp(0x2, 0x1, 0x84) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) 8m24.972239376s ago: executing program 1 (id=3398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000), 0x0) 8m24.085737359s ago: executing program 5 (id=3400): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc000200a}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x29, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040810) 8m23.529634503s ago: executing program 1 (id=3404): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m23.287621528s ago: executing program 5 (id=3406): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x800) 8m21.741786312s ago: executing program 5 (id=3410): unshare(0x2c020400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 8m21.165798317s ago: executing program 5 (id=3413): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x900}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r4}, 0x38) 8m7.017880394s ago: executing program 59 (id=3404): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m5.045093989s ago: executing program 60 (id=3413): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x6, 0x900}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r4}, 0x38) 7m28.888313377s ago: executing program 4 (id=3492): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) io_setup(0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r5, 0x65, 0x7, 0x0, &(0x7f00000000c0)) 7m26.641023752s ago: executing program 4 (id=3494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) shutdown(r0, 0x1) 7m25.866840306s ago: executing program 4 (id=3497): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) 7m23.009418127s ago: executing program 4 (id=3503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0xadc6cfde43449db2, &(0x7f0000000040)={'ip6gre0\x00', @ifru_map={0x8, 0x10, 0x200, 0x80, 0xfa, 0xfb}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) read$FUSE(r1, 0x0, 0x0) 7m18.924859513s ago: executing program 4 (id=3509): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 7m18.129753358s ago: executing program 4 (id=3512): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x1, 0x0, 0x0) r4 = epoll_create1(0x0) close(r4) 7m2.47640166s ago: executing program 61 (id=3512): socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000003c0)=[{0xffffffffffffffff}], 0x1, 0x0, 0x0) r4 = epoll_create1(0x0) close(r4) 6m13.785851434s ago: executing program 6 (id=3612): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10048095, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0xc0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40}, {0x3, 0x24, 0x1a, 0x0, 0x3f}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x40, 0x1d}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x0, 0xa0}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6m10.197546752s ago: executing program 6 (id=3630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001982b00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 6m9.292510082s ago: executing program 6 (id=3635): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000300)={@broadcast, @remote, @void, {@canfd={0xd, {{0x3}, 0x1a, 0x1, 0x0, 0x0, "a9d42be8a1d323f3736f0940283545370b12dac31e1cd94a75028bf2bb6582669ffdfddfcb0caa87e4e654c9489a1e138eb3bb143fd1ebb11c9340032821b6e7"}}}}, 0x0) 6m8.267544476s ago: executing program 6 (id=3640): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_open_procfs(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 6m7.561798494s ago: executing program 6 (id=3644): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x8, 0xfffe, r1, 0x0}]) 6m6.94978116s ago: executing program 6 (id=3647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) close_range(r0, 0xffffffffffffffff, 0x0) 6m4.641091139s ago: executing program 62 (id=3647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000340)={{0x100000, 0xeeef0000, 0x3, 0xad, 0x3, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0x6000, 0x3, 0x0, 0x3c, 0x9, 0x7f, 0x1, 0x5, 0x0, 0x3}, {0x2, 0x1000, 0x8, 0x5, 0x1, 0x2, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xc, 0xe7, 0x3, 0x2, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0xfe, 0x0, 0xf5, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x83, 0xb1, 0x8, 0x4, 0xac, 0x80, 0xc, 0x5}, {0x1000, 0x11d004, 0xc, 0x7, 0x7, 0x5, 0x1, 0x3, 0x1, 0x80, 0x3, 0x4}, {0x100000, 0x3000, 0xb, 0x5, 0x5, 0x7, 0x22, 0x37, 0x2, 0x7, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2004, 0xf, 0x0, 0x3000, [0x3, 0xfffffffffffffffc, 0x3, 0x2]}) close_range(r0, 0xffffffffffffffff, 0x0) 11.757809041s ago: executing program 9 (id=5072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc810) io_uring_setup(0x2202, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000900050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 9.013845722s ago: executing program 9 (id=5084): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1005) socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 7.6774287s ago: executing program 9 (id=5090): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113b69df8bea4cbc913f2c215bc12e941d0a01", 0x18}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5c0e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a4925ddf3dd14992612d22032093742f07fd8d9723bed7707077473de16c3f5820b5dc6f1c37dbaaba20cb5", 0xda}, {&(0x7f0000000300)="47788f64ba10044b682c594fa485c04663ed58f30031ae1cff3613c3178c76ab0613419d80cf2ebb2efedf9237b34b3e925f7695a250556a4ff5e460bfdf593f20253f90740976f323c00df882e4285d5fa368cf147e38ee08ae4aa4fdfe618be117a5e45e516c6259b68e1b9cf170cc831498d2db68532fe3acf3cdef8e18488541cacfa624eecc49d9a853f4a7cc8c3d7d0ac7c271bcfc989591b98b6b1c93d818cf4c0ff77fd8bb4f83102c41ebee199b6877f2477b8c", 0xb8}, {&(0x7f0000000400)="5c9272a54353b9022ec534", 0xb}], 0x4}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)="110986ce344a5f3970d38cb26e214cf6cd7ecb0321807174ea92ee4bf3026a915449f2a163c3bf9b52dc559436f3ca477ff839cb7a24095fe976f4de095c4c0d1c300e3330ac4793a23bc26a2ebb79f51b09ec5c940c50232901db7ad9c54b23dbb37c1f3a6b9a03e9071ac8e8e16916712accdb8f7df7e6f1e6f7e99f4e20d5942a2a82cc20fc1dd194", 0x8a}, {&(0x7f0000000440)="6ee779110906bd4e5e6fe935ae521dac14db3a756ee091c0b31dfb4f665cf2ff1cb534acb181d9f8ba89be0d7e", 0x2d}, {&(0x7f0000000700)="b690d01c0895365a09e62fe9d0341ca93cbd7d608c537961afc98da0f4bc65e66b53f4a2", 0x24}], 0x3}}], 0x2, 0xc0) 7.334503501s ago: executing program 9 (id=5094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc810) io_uring_setup(0x2202, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000900050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 6.107525116s ago: executing program 7 (id=5100): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1005) socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 5.829831015s ago: executing program 8 (id=5101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 4.812736339s ago: executing program 7 (id=5104): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r3 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4.717031291s ago: executing program 2 (id=5105): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 4.649525892s ago: executing program 8 (id=5106): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 4.198313363s ago: executing program 8 (id=5108): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_getevents(0x0, 0x100000001, 0x0, 0x0, 0x0) 4.145525349s ago: executing program 9 (id=5109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 4.069469208s ago: executing program 2 (id=5110): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r1, &(0x7f0000000540)}, 0x20) 3.913604046s ago: executing program 3 (id=5111): unshare(0x400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) 3.677315039s ago: executing program 8 (id=5112): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0xfe37, 0x0) 3.527495935s ago: executing program 2 (id=5113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x7, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) 3.384903137s ago: executing program 7 (id=5114): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1005) socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 3.310193461s ago: executing program 3 (id=5115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 3.008302419s ago: executing program 8 (id=5116): lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0xfe37, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) setns(r5, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d", 0x11) 2.886674316s ago: executing program 2 (id=5117): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_OPEN(r0, 0x0, 0x0) 2.395947323s ago: executing program 3 (id=5118): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000cc0)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 2.302624988s ago: executing program 9 (id=5119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc810) io_uring_setup(0x2202, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000900050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 2.140901083s ago: executing program 7 (id=5120): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 1.100793422s ago: executing program 3 (id=5121): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 981.662167ms ago: executing program 2 (id=5122): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)='\x00!', 0x2}], 0x1, 0x73a, 0x1) 875.999261ms ago: executing program 7 (id=5123): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r1, &(0x7f0000000540)}, 0x20) 617.553343ms ago: executing program 2 (id=5124): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r3 = io_uring_setup(0x1694, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x17b}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 605.252272ms ago: executing program 8 (id=5125): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 601.183911ms ago: executing program 3 (id=5126): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 381.592925ms ago: executing program 7 (id=5127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r2, 0x7, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}}, 0x0) 0s ago: executing program 3 (id=5128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.2.3856'. [ 2644.927302][T15078] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2644.936286][T15078] ath9k_htc: Failed to initialize the device [ 2645.025450][T19647] usb 4-1: ath9k_htc: USB layer deinitialized [ 2645.737149][T21662] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2645.815112][T11773] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2645.823746][T11773] em28xx 10-1:0.0: dvb set to bulk mode. [ 2645.831802][T15078] em28xx 10-1:0.0: Binding DVB extension [ 2646.165742][T21701] fuse: Bad value for 'fd' [ 2646.289064][T11773] usb 10-1: USB disconnect, device number 11 [ 2646.297348][T11773] em28xx 10-1:0.0: Disconnecting em28xx [ 2646.417444][T15078] em28xx 10-1:0.0: Registering input extension [ 2646.498666][T11773] em28xx 10-1:0.0: Closing input extension [ 2646.548018][T11773] em28xx 10-1:0.0: Freeing device [ 2646.818952][T21707] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2646.954639][T11773] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 2646.976925][T21707] kvm: pic: non byte read [ 2647.037084][T21707] kvm: pic: level sensitive irq not supported [ 2647.037602][T21707] kvm: pic: non byte read [ 2647.204560][T11773] usb 10-1: Using ep0 maxpacket: 32 [ 2647.231465][T11773] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 2647.240434][T11773] usb 10-1: config 0 has no interface number 0 [ 2647.320202][T11773] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2647.330380][T11773] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2647.339452][T11773] usb 10-1: Product: syz [ 2647.343981][T11773] usb 10-1: Manufacturer: syz [ 2647.349223][T11773] usb 10-1: SerialNumber: syz [ 2647.387719][T11773] usb 10-1: config 0 descriptor?? [ 2647.408116][T11773] smsc95xx v2.0.0 [ 2647.625922][T15078] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2647.794984][T15078] usb 9-1: Using ep0 maxpacket: 32 [ 2647.846960][T15078] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 2647.857489][T15078] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2647.867073][T15078] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2647.876625][T15078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2647.886911][T15078] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2647.897285][T15078] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2647.917488][T15078] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2647.930218][T15078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2648.085052][T15078] usb 9-1: config 0 descriptor?? [ 2648.316825][T15078] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2648.348325][T15078] usb 9-1: USB disconnect, device number 17 [ 2648.362639][T15078] usblp0: removed [ 2648.457229][T11773] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2648.469447][T11773] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2648.485751][T11773] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2648.498993][T11773] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 2648.551186][T11773] usb 10-1: USB disconnect, device number 12 [ 2648.874725][T15078] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2648.891987][T19647] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2649.055771][T15078] usb 9-1: Using ep0 maxpacket: 32 [ 2649.066997][T19647] usb 4-1: Using ep0 maxpacket: 16 [ 2649.102042][T19647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2649.117038][T15078] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 2649.125919][T15078] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2649.135900][T15078] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2649.152592][T15078] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2649.165173][T15078] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2649.175557][T15078] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2649.189446][T15078] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2649.199251][T15078] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2649.239643][T19647] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2649.256761][T19647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2649.267617][T19647] usb 4-1: Product: syz [ 2649.272122][T19647] usb 4-1: Manufacturer: syz [ 2649.277438][T19647] usb 4-1: SerialNumber: syz [ 2649.294589][T15078] usb 9-1: config 0 descriptor?? [ 2649.304961][T19647] usb 4-1: config 0 descriptor?? [ 2649.328095][T19647] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2649.338170][T19647] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 2649.570846][T15078] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2649.788312][ T24] usb 9-1: USB disconnect, device number 18 [ 2649.822773][ T24] usblp0: removed [ 2649.934839][T19647] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2650.386027][T19647] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2650.395058][T19647] em28xx 4-1:0.0: board has no eeprom [ 2650.909981][T21744] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2651.523211][T21726] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2651.594408][T19647] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2651.612709][T19647] em28xx 4-1:0.0: dvb set to bulk mode. [ 2651.625426][T15078] em28xx 4-1:0.0: Binding DVB extension [ 2651.665703][T19647] usb 4-1: USB disconnect, device number 14 [ 2651.674047][T19647] em28xx 4-1:0.0: Disconnecting em28xx [ 2651.948952][T15078] em28xx 4-1:0.0: Registering input extension [ 2651.970134][T19647] em28xx 4-1:0.0: Closing input extension [ 2651.995510][T19647] em28xx 4-1:0.0: Freeing device [ 2652.681868][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2652.850891][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 2652.865474][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2652.874601][ T24] usb 4-1: config 0 has no interface number 0 [ 2652.895534][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2652.905848][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.914688][ T24] usb 4-1: Product: syz [ 2652.919324][ T24] usb 4-1: Manufacturer: syz [ 2652.924471][ T24] usb 4-1: SerialNumber: syz [ 2652.942925][ T24] usb 4-1: config 0 descriptor?? [ 2652.965119][ T24] smsc95xx v2.0.0 [ 2653.104499][T19647] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 2653.309156][T19647] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2653.321383][T19647] usb 10-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 2653.331158][T19647] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.366805][T19647] usb 10-1: config 0 descriptor?? [ 2653.375108][T21769] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 2654.033406][T19647] usb 10-1: USB disconnect, device number 13 [ 2654.063067][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2654.074929][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2654.111432][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2654.126326][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 2654.148269][ T24] usb 4-1: USB disconnect, device number 15 [ 2654.584775][ T6497] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 2654.792492][ T6497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2654.808354][ T6497] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2654.818266][ T6497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2654.906619][ T6497] usb 3-1: config 0 descriptor?? [ 2654.917667][T21778] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2655.476844][ T6497] hkems 0003:2006:0118.000D: unknown main item tag 0x0 [ 2655.491342][ T6497] hkems 0003:2006:0118.000D: item fetching failed at offset 3/5 [ 2656.191473][ T6497] hkems 0003:2006:0118.000D: parse failed [ 2656.198033][ T6497] hkems 0003:2006:0118.000D: probe with driver hkems failed with error -22 [ 2656.220766][ T6497] usb 3-1: USB disconnect, device number 26 [ 2657.304481][ T6497] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2657.494531][ T6497] usb 4-1: Using ep0 maxpacket: 32 [ 2657.518448][ T6497] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2657.527682][ T6497] usb 4-1: config 0 has no interface number 0 [ 2657.563600][ T6497] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2657.574378][ T6497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2657.583151][ T6497] usb 4-1: Product: syz [ 2657.587882][ T6497] usb 4-1: Manufacturer: syz [ 2657.592883][ T6497] usb 4-1: SerialNumber: syz [ 2657.633082][ T6497] usb 4-1: config 0 descriptor?? [ 2657.711288][ T6497] smsc95xx v2.0.0 [ 2658.752414][ T6497] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2658.764334][ T6497] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2658.824780][ T6497] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2658.837719][ T6497] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 2658.919327][ T6497] usb 4-1: USB disconnect, device number 16 [ 2659.149669][T21828] overlayfs: failed to resolve './file1': -2 [ 2663.819914][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2663.820006][ T30] audit: type=1326 audit(1755190246.112:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21876 comm="syz.3.3930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x0 [ 2669.444519][T19647] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 2669.610569][T19647] usb 10-1: device descriptor read/64, error -71 [ 2669.892967][T21929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2669.914770][T19647] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 2670.104454][T19647] usb 10-1: device descriptor read/64, error -71 [ 2670.219186][T19647] usb usb10-port1: attempt power cycle [ 2670.653156][T19647] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 2670.687635][T19647] usb 10-1: device descriptor read/8, error -71 [ 2670.962018][T19647] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 2671.021565][T19647] usb 10-1: device descriptor read/8, error -71 [ 2671.142113][T19647] usb usb10-port1: unable to enumerate USB device [ 2672.733313][ T30] audit: type=1326 audit(1755190255.032:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21939 comm="syz.7.3950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x0 [ 2678.006924][T19647] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2678.205302][T19647] usb 9-1: device descriptor read/64, error -71 [ 2678.487081][T19647] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2678.704513][T19647] usb 9-1: device descriptor read/64, error -71 [ 2678.832440][T19647] usb usb9-port1: attempt power cycle [ 2679.244730][T19647] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2679.358204][T19647] usb 9-1: device descriptor read/8, error -71 [ 2679.646362][T19647] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2679.731830][T19647] usb 9-1: device descriptor read/8, error -71 [ 2679.855945][T19647] usb usb9-port1: unable to enumerate USB device [ 2684.545150][ T6497] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 2684.999452][ T6497] usb 10-1: device descriptor read/64, error -71 [ 2685.025318][ T4777] syzkaller0: tun_net_xmit 76 [ 2685.030741][ T4777] syzkaller0: tun_net_xmit 48 [ 2685.047965][T17359] syzkaller0: tun_net_xmit 76 [ 2685.245046][ T24] syzkaller0: tun_net_xmit 76 [ 2685.275447][ T6497] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 2685.550148][ T6497] usb 10-1: device descriptor read/64, error -71 [ 2685.667630][ T6497] usb usb10-port1: attempt power cycle [ 2686.125212][ T6497] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 2686.227072][ T6497] usb 10-1: device descriptor read/8, error -71 [ 2686.503369][ T6497] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 2686.614483][ T6497] usb 10-1: device descriptor read/8, error -71 [ 2686.752242][ T6497] usb usb10-port1: unable to enumerate USB device [ 2687.369650][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2687.377629][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2687.423965][T22064] loop7: detected capacity change from 0 to 256 [ 2687.795703][T22067] netlink: 172 bytes leftover after parsing attributes in process `syz.9.4000'. [ 2688.686425][T22077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2689.404896][ T6497] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2689.554518][ T6497] usb 4-1: device descriptor read/64, error -71 [ 2689.798201][ T6497] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2690.004479][ T6497] usb 4-1: device descriptor read/64, error -71 [ 2690.127360][ T6497] usb usb4-port1: attempt power cycle [ 2690.534926][ T6497] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2690.578218][ T6497] usb 4-1: device descriptor read/8, error -71 [ 2690.663622][T19647] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 2690.839507][ T6497] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2690.897165][T19647] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2690.901789][ T6497] usb 4-1: device descriptor read/8, error -71 [ 2690.906674][T19647] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2690.906807][T19647] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2690.906962][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2690.955233][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2691.041425][ T6497] usb usb4-port1: unable to enumerate USB device [ 2691.046020][T19647] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2691.057771][T19647] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2691.066480][T19647] usb 10-1: Product: syz [ 2691.071007][T19647] usb 10-1: Manufacturer: syz [ 2691.200798][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2691.206639][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2691.252282][T19647] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2691.263628][T19647] cdc_wdm 10-1:1.0: Unknown control protocol [ 2693.655211][ T6497] usb 10-1: USB disconnect, device number 22 [ 2694.240854][T22149] random: crng reseeded on system resumption [ 2694.416011][ T6497] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2694.474852][T22152] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4034'. [ 2694.586229][ T6497] usb 9-1: device descriptor read/64, error -71 [ 2694.827866][ T6497] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2694.994566][ T6497] usb 9-1: device descriptor read/64, error -71 [ 2695.114621][ T6497] usb usb9-port1: attempt power cycle [ 2695.524620][ T6497] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2695.653190][ T6497] usb 9-1: device descriptor read/8, error -71 [ 2695.921017][ T6497] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2695.982494][ T6497] usb 9-1: device descriptor read/8, error -71 [ 2696.014458][T17359] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2696.100165][ T6497] usb usb9-port1: unable to enumerate USB device [ 2696.211678][T17359] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2696.220934][T17359] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2696.231719][T17359] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2696.241200][T17359] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2696.256924][T17359] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2696.317301][T17359] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2696.327477][T17359] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2696.336075][T17359] usb 4-1: Product: syz [ 2696.340566][T17359] usb 4-1: Manufacturer: syz [ 2696.409653][T17359] cdc_wdm 4-1:1.0: skipping garbage [ 2696.415532][T17359] cdc_wdm 4-1:1.0: skipping garbage [ 2696.428274][T17359] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2696.434998][T17359] cdc_wdm 4-1:1.0: Unknown control protocol [ 2698.552382][T22185] loop7: detected capacity change from 0 to 512 [ 2698.639451][T22194] 9pnet_fd: Insufficient options for proto=fd [ 2698.668974][T22185] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2698.719037][T19647] usb 4-1: USB disconnect, device number 21 [ 2698.839568][T22185] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2698.839568][T22185] program syz.7.4049 not setting count and/or reply_len properly [ 2700.532765][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2700.563147][T22211] tipc: Started in network mode [ 2700.568687][T22211] tipc: Node identity e613b86cd5fd, cluster identity 4711 [ 2700.589649][T22211] tipc: Enabled bearer , priority 0 [ 2700.770121][T22211] tipc: Disabling bearer [ 2702.117710][T22225] 9pnet_fd: Insufficient options for proto=fd [ 2702.282170][T22228] loop3: detected capacity change from 0 to 256 [ 2703.444076][T22238] mmap: syz.3.4069 (22238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2703.718368][T22244] loop9: detected capacity change from 0 to 512 [ 2703.761073][T22244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2703.845960][T22244] EXT4-fs (loop9): orphan cleanup on readonly fs [ 2703.890877][T22244] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 2703.901252][T22244] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 2703.911803][T22244] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.4071: Failed to acquire dquot type 1 [ 2703.978880][T22244] EXT4-fs (loop9): 1 truncate cleaned up [ 2704.095135][T22244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2705.377850][ T30] audit: type=1326 audit(1755190287.662:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2705.630394][ T30] audit: type=1326 audit(1755190287.722:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.8.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2708.093785][T22257] loop8: detected capacity change from 0 to 8192 [ 2708.260308][T22267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4081'. [ 2713.471485][T20348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2714.694486][T15078] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 2714.915757][T15078] usb 10-1: Using ep0 maxpacket: 16 [ 2714.930466][T15078] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2714.995586][T15078] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2715.006270][T15078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2715.014939][T15078] usb 10-1: Product: syz [ 2715.019663][T15078] usb 10-1: Manufacturer: syz [ 2715.024831][T15078] usb 10-1: SerialNumber: syz [ 2715.058372][T22294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4089'. [ 2715.115523][T15078] usb 10-1: config 0 descriptor?? [ 2715.161254][T15078] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2715.171442][T15078] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 2715.426502][ T30] audit: type=1326 audit(1755190297.722:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.450518][ T30] audit: type=1326 audit(1755190297.722:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.618298][ T30] audit: type=1326 audit(1755190297.832:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.641707][ T30] audit: type=1326 audit(1755190297.832:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.665451][ T30] audit: type=1326 audit(1755190297.842:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.688761][ T30] audit: type=1326 audit(1755190297.842:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.718067][ T30] audit: type=1326 audit(1755190297.862:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.743623][ T30] audit: type=1326 audit(1755190297.872:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.766842][ T30] audit: type=1326 audit(1755190297.882:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.790571][ T30] audit: type=1326 audit(1755190297.882:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22295 comm="syz.2.4090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2715.838779][T15078] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2715.955993][T22302] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4093'. [ 2716.473978][T15078] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2716.484807][T15078] em28xx 10-1:0.0: board has no eeprom [ 2716.596847][T15078] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2716.607408][T15078] em28xx 10-1:0.0: dvb set to bulk mode. [ 2716.616964][T19647] em28xx 10-1:0.0: Binding DVB extension [ 2716.682271][T15078] usb 10-1: USB disconnect, device number 23 [ 2716.691621][T15078] em28xx 10-1:0.0: Disconnecting em28xx [ 2716.999323][T19647] em28xx 10-1:0.0: Registering input extension [ 2717.092318][T15078] em28xx 10-1:0.0: Closing input extension [ 2717.193922][T15078] em28xx 10-1:0.0: Freeing device [ 2718.527741][T22334] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4106'. [ 2719.912830][T17359] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 2720.086589][T17359] usb 10-1: Using ep0 maxpacket: 16 [ 2720.125568][T17359] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2720.154015][T17359] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2720.163996][T17359] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2720.175206][T17359] usb 10-1: Product: syz [ 2720.179768][T17359] usb 10-1: Manufacturer: syz [ 2720.184775][T17359] usb 10-1: SerialNumber: syz [ 2720.239674][T17359] usb 10-1: config 0 descriptor?? [ 2720.277824][T17359] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2720.287658][T17359] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 2720.994992][T17359] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 2721.625895][T17359] em28xx 10-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2721.636118][T17359] em28xx 10-1:0.0: board has no eeprom [ 2721.745622][T17359] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2721.754790][T17359] em28xx 10-1:0.0: dvb set to bulk mode. [ 2721.762274][ T6497] em28xx 10-1:0.0: Binding DVB extension [ 2721.783553][T17359] usb 10-1: USB disconnect, device number 24 [ 2721.792089][T17359] em28xx 10-1:0.0: Disconnecting em28xx [ 2721.840325][T22356] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4116'. [ 2722.136393][ T6497] em28xx 10-1:0.0: Registering input extension [ 2722.185645][T17359] em28xx 10-1:0.0: Closing input extension [ 2722.266778][T17359] em28xx 10-1:0.0: Freeing device [ 2724.456940][T22389] tipc: Enabling of bearer rejected, failed to enable media [ 2727.359287][T22421] syz.7.4140 (22421) used greatest stack depth: 2440 bytes left [ 2729.569010][T22431] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4146'. [ 2730.086175][T22438] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4150'. [ 2733.576269][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2733.576349][ T30] audit: type=1326 audit(1755190315.882:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.734453][ T30] audit: type=1326 audit(1755190315.922:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.757985][ T30] audit: type=1326 audit(1755190315.922:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.781669][ T30] audit: type=1326 audit(1755190315.922:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.807845][ T30] audit: type=1326 audit(1755190315.922:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.837646][ T30] audit: type=1326 audit(1755190315.922:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.861888][ T30] audit: type=1326 audit(1755190315.922:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.885697][ T30] audit: type=1326 audit(1755190315.922:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.908929][ T30] audit: type=1326 audit(1755190315.932:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2733.935740][ T30] audit: type=1326 audit(1755190315.932:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22482 comm="syz.2.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2735.682645][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013e5e000: rx timeout, send abort [ 2736.097819][T15078] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 2736.193476][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013e5e000: abort rx timeout. Force session deactivation [ 2736.326714][T15078] usb 10-1: device descriptor read/64, error -71 [ 2736.607746][T15078] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 2736.726528][T22507] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2736.915720][T15078] usb 10-1: device descriptor read/64, error -71 [ 2737.060277][T15078] usb usb10-port1: attempt power cycle [ 2737.653989][T15078] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 2737.712730][T15078] usb 10-1: device descriptor read/8, error -71 [ 2738.005174][T15078] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2738.078091][T15078] usb 10-1: device descriptor read/8, error -71 [ 2738.185606][T22513] loop3: detected capacity change from 0 to 512 [ 2738.206310][T15078] usb usb10-port1: unable to enumerate USB device [ 2738.353607][T22513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.4172: missing EA_INODE flag [ 2738.393704][T22513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.4172: error while reading EA inode 11 err=-117 [ 2738.419594][T22513] EXT4-fs (loop3): 1 orphan inode deleted [ 2738.429675][T22513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2739.448667][T19707] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2740.035818][T22527] syzkaller0: entered promiscuous mode [ 2740.041943][T22527] syzkaller0: entered allmulticast mode [ 2740.089664][T15078] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 2740.300839][T15078] usb 3-1: Using ep0 maxpacket: 32 [ 2740.336136][T15078] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 2740.344917][T15078] usb 3-1: config 0 has no interface number 0 [ 2740.441840][T15078] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2740.455056][T15078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2740.463707][T15078] usb 3-1: Product: syz [ 2740.468537][T15078] usb 3-1: Manufacturer: syz [ 2740.473345][T15078] usb 3-1: SerialNumber: syz [ 2740.613037][T15078] usb 3-1: config 0 descriptor?? [ 2740.648523][T15078] smsc95xx v2.0.0 [ 2741.094400][T15078] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2741.115594][T15078] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2741.361340][T15078] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2741.375669][T15078] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 2741.435948][T15078] usb 3-1: USB disconnect, device number 27 [ 2742.328042][T17359] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2742.506837][T17359] usb 4-1: device descriptor read/64, error -71 [ 2742.944791][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2742.944881][ T30] audit: type=1326 audit(1755190325.182:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22554 comm="syz.2.4188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x0 [ 2743.374480][T17359] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2743.647631][T17359] usb 4-1: device descriptor read/64, error -71 [ 2743.768884][T17359] usb usb4-port1: attempt power cycle [ 2744.175390][T17359] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2744.298234][T17359] usb 4-1: device descriptor read/8, error -71 [ 2744.564533][T17359] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2745.029291][T17359] usb 4-1: device descriptor read/8, error -71 [ 2745.182391][T17359] usb usb4-port1: unable to enumerate USB device [ 2746.827731][T22569] syzkaller0: entered promiscuous mode [ 2746.853728][T22569] syzkaller0: entered allmulticast mode [ 2748.311887][T22584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2748.405654][T22591] No control pipe specified [ 2748.791665][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2748.798855][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2749.396484][ T6497] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2749.683479][ T6497] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2749.683832][T22608] syzkaller0: entered promiscuous mode [ 2749.692811][ T6497] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2749.692952][ T6497] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2749.708233][T22608] syzkaller0: entered allmulticast mode [ 2749.716941][ T6497] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2749.743445][ T6497] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2749.867897][ T6497] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2749.877761][ T6497] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2749.886596][ T6497] usb 10-1: Product: syz [ 2749.891156][ T6497] usb 10-1: Manufacturer: syz [ 2749.971831][ T6497] cdc_wdm 10-1:1.0: skipping garbage [ 2749.977818][ T6497] cdc_wdm 10-1:1.0: skipping garbage [ 2749.997586][ T6497] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2750.010143][ T6497] cdc_wdm 10-1:1.0: Unknown control protocol [ 2750.338759][ T30] audit: type=1326 audit(1755190332.462:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22607 comm="syz.3.4206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x0 [ 2751.165989][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030a85e00: rx timeout, send abort [ 2751.674733][ C1] vcan0: j1939_tp_rxtimer: 0xffff888030a85e00: abort rx timeout. Force session deactivation [ 2751.718449][T22620] No control pipe specified [ 2752.422478][ T3840] syzkaller0: tun_net_xmit 76 [ 2752.430712][ T3840] syzkaller0: tun_net_xmit 48 [ 2752.445789][T19647] syzkaller0: tun_net_xmit 76 [ 2752.507556][T19647] syzkaller0: tun_net_xmit 76 [ 2752.806578][T19647] usb 10-1: USB disconnect, device number 29 [ 2754.499827][T22632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2756.197751][T22645] syzkaller0: entered promiscuous mode [ 2756.203631][T22645] syzkaller0: entered allmulticast mode [ 2757.077875][ T6497] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2757.310641][ T6497] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2757.320053][ T6497] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2757.331695][ T6497] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2757.341559][ T6497] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2757.352894][ T6497] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2757.468214][ T6497] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2757.479029][ T6497] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2757.492034][ T6497] usb 9-1: Product: syz [ 2757.498218][ T6497] usb 9-1: Manufacturer: syz [ 2757.692470][ T6497] cdc_wdm 9-1:1.0: skipping garbage [ 2757.698485][ T6497] cdc_wdm 9-1:1.0: skipping garbage [ 2757.734906][ T6497] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 2757.741873][ T6497] cdc_wdm 9-1:1.0: Unknown control protocol [ 2757.770724][ T30] audit: type=1326 audit(1755190340.062:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22663 comm="syz.2.4229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x0 [ 2758.316961][T22681] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2759.065827][T22688] syzkaller0: entered promiscuous mode [ 2759.071800][T22688] syzkaller0: entered allmulticast mode [ 2759.993227][T22699] loop9: detected capacity change from 0 to 512 [ 2760.015755][T19647] usb 9-1: USB disconnect, device number 27 [ 2760.084901][T22699] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.4242: missing EA_INODE flag [ 2760.119901][T22699] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.4242: error while reading EA inode 11 err=-117 [ 2760.205310][T22699] EXT4-fs (loop9): 1 orphan inode deleted [ 2760.220030][T22699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2760.528946][T20348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2761.314914][ T30] audit: type=1326 audit(1755190343.612:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22707 comm="syz.7.4244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x0 [ 2761.999989][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013e51a00: rx timeout, send abort [ 2762.020881][T22719] fuse: Bad value for 'fd' [ 2762.509310][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013e51a00: abort rx timeout. Force session deactivation [ 2762.569803][T22722] syzkaller0: entered promiscuous mode [ 2762.576139][T22722] syzkaller0: entered allmulticast mode [ 2765.037628][T19647] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2765.708124][T19647] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2765.717764][T19647] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2765.729388][T19647] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2765.739091][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2765.750824][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2765.949214][T19647] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2765.959295][T19647] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2765.969316][T19647] usb 10-1: Product: syz [ 2765.974245][T19647] usb 10-1: Manufacturer: syz [ 2766.128080][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2766.133717][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2766.243693][T19647] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 2766.250048][T19647] cdc_wdm 10-1:1.0: Unknown control protocol [ 2767.294676][T14534] syzkaller0: tun_net_xmit 76 [ 2767.300755][T14534] syzkaller0: tun_net_xmit 48 [ 2767.347781][T15078] syzkaller0: tun_net_xmit 76 [ 2767.438489][ T6497] syzkaller0: tun_net_xmit 76 [ 2767.866023][T22750] fuse: Bad value for 'fd' [ 2767.916176][ T30] audit: type=1326 audit(1755190350.202:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2767.942892][ T30] audit: type=1326 audit(1755190350.202:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2767.968655][ T30] audit: type=1326 audit(1755190350.212:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2767.992911][ T30] audit: type=1326 audit(1755190350.222:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2767.993144][ T30] audit: type=1326 audit(1755190350.242:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2767.993369][ T30] audit: type=1326 audit(1755190350.242:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2767.993598][ T30] audit: type=1326 audit(1755190350.242:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2768.091839][ T30] audit: type=1326 audit(1755190350.242:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2768.116019][ T30] audit: type=1326 audit(1755190350.242:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2768.116254][ T30] audit: type=1326 audit(1755190350.242:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22751 comm="syz.7.4263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2768.297609][ T6497] usb 10-1: USB disconnect, device number 30 [ 2768.468010][T22754] syzkaller0: entered promiscuous mode [ 2768.473782][T22754] syzkaller0: entered allmulticast mode [ 2770.138423][T22779] fuse: Bad value for 'fd' [ 2774.046009][T22798] syzkaller0: entered promiscuous mode [ 2774.051944][T22798] syzkaller0: entered allmulticast mode [ 2774.956524][T22803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2775.065047][T22806] loop7: detected capacity change from 0 to 128 [ 2775.227209][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2775.227291][ T30] audit: type=1800 audit(1755190357.532:189): pid=22806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4284" name="bus" dev="loop7" ino=1048862 res=0 errno=0 [ 2775.256620][ T30] audit: type=1804 audit(1755190357.542:190): pid=22806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4284" name="/newroot/340/file0/bus" dev="loop7" ino=1048862 res=1 errno=0 [ 2776.510604][ T30] audit: type=1326 audit(1755190358.802:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.541882][ T30] audit: type=1326 audit(1755190358.802:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.567915][ T30] audit: type=1326 audit(1755190358.812:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.592745][ T30] audit: type=1326 audit(1755190358.812:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.616455][ T30] audit: type=1326 audit(1755190358.842:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.646440][ T30] audit: type=1326 audit(1755190358.842:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.646694][ T30] audit: type=1326 audit(1755190358.842:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.646940][ T30] audit: type=1326 audit(1755190358.842:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22818 comm="syz.3.4290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2776.682683][ C1] vkms_vblank_simulate: vblank timer overrun [ 2777.204856][T22832] syzkaller0: entered promiscuous mode [ 2777.210640][T22832] syzkaller0: entered allmulticast mode [ 2777.355113][T19647] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 2777.570087][T19647] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2777.579528][T19647] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2777.590427][T19647] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2777.600152][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2777.611965][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2777.846341][T19647] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2777.856812][T19647] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2777.872232][T19647] usb 10-1: Product: syz [ 2777.878954][T19647] usb 10-1: Manufacturer: syz [ 2778.031640][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2778.037640][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2778.043424][T19647] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2780.045049][T22861] syzkaller0: entered promiscuous mode [ 2780.050870][T22861] syzkaller0: entered allmulticast mode [ 2780.234549][T22868] loop7: detected capacity change from 0 to 128 [ 2780.275866][T19647] usb 10-1: USB disconnect, device number 31 [ 2780.304904][ T6497] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2780.430600][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 2780.430685][ T30] audit: type=1800 audit(1755190362.722:248): pid=22868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4312" name="bus" dev="loop7" ino=1048863 res=0 errno=0 [ 2780.494604][ T30] audit: type=1804 audit(1755190362.762:249): pid=22868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.4312" name="/newroot/343/file0/bus" dev="loop7" ino=1048863 res=1 errno=0 [ 2780.564602][ T6497] usb 9-1: Using ep0 maxpacket: 16 [ 2780.604667][ T6497] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2780.699849][ T6497] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2780.709602][ T6497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.718501][ T6497] usb 9-1: Product: syz [ 2780.723107][ T6497] usb 9-1: Manufacturer: syz [ 2780.732490][ T6497] usb 9-1: SerialNumber: syz [ 2780.800091][ T6497] usb 9-1: config 0 descriptor?? [ 2780.824896][ T6497] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2780.840355][ T6497] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 2781.233258][ T30] audit: type=1326 audit(1755190363.532:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.262738][ T30] audit: type=1326 audit(1755190363.532:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.288445][ T30] audit: type=1326 audit(1755190363.532:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.288688][ T30] audit: type=1326 audit(1755190363.532:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.288912][ T30] audit: type=1326 audit(1755190363.532:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.312142][ C1] vkms_vblank_simulate: vblank timer overrun [ 2781.372189][ T30] audit: type=1326 audit(1755190363.562:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.397154][ T30] audit: type=1326 audit(1755190363.562:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.421587][ T30] audit: type=1326 audit(1755190363.562:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2781.448583][ T6497] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 2783.055055][T22896] syzkaller0: entered promiscuous mode [ 2783.060866][T22896] syzkaller0: entered allmulticast mode [ 2783.085456][ T6497] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 2783.094451][T19647] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2783.095724][ T6497] em28xx 9-1:0.0: board has no eeprom [ 2783.116630][T22865] em28xx 9-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 2783.224702][ T6497] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2783.233450][ T6497] em28xx 9-1:0.0: dvb set to bulk mode. [ 2783.244899][ T24] em28xx 9-1:0.0: Binding DVB extension [ 2783.291108][ T6497] usb 9-1: USB disconnect, device number 28 [ 2783.299465][ T6497] em28xx 9-1:0.0: Disconnecting em28xx [ 2783.316253][T19647] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2783.325810][T19647] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2783.336745][T19647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2783.346652][T19647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2783.358356][T19647] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2783.419941][T19647] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2783.430096][T19647] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2783.439041][T19647] usb 3-1: Product: syz [ 2783.443834][T19647] usb 3-1: Manufacturer: syz [ 2783.535370][T19647] cdc_wdm 3-1:1.0: skipping garbage [ 2783.540900][T19647] cdc_wdm 3-1:1.0: skipping garbage [ 2783.546945][T19647] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2783.625284][ T24] em28xx 9-1:0.0: Registering input extension [ 2783.644533][ T6497] em28xx 9-1:0.0: Closing input extension [ 2783.675868][ T6497] em28xx 9-1:0.0: Freeing device [ 2785.193586][T22925] syzkaller0: entered promiscuous mode [ 2785.200035][T22925] syzkaller0: entered allmulticast mode [ 2785.989139][ T6497] usb 3-1: USB disconnect, device number 28 [ 2786.141654][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 2786.141737][ T30] audit: type=1326 audit(1755190368.442:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22933 comm="syz.8.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2786.175669][ T30] audit: type=1326 audit(1755190368.442:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22933 comm="syz.8.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2786.198566][ C1] vkms_vblank_simulate: vblank timer overrun [ 2786.206621][ T30] audit: type=1326 audit(1755190368.452:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22933 comm="syz.8.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2786.237846][ C1] vkms_vblank_simulate: vblank timer overrun [ 2786.244779][ T30] audit: type=1326 audit(1755190368.452:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22933 comm="syz.8.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2787.604407][T22955] syzkaller0: entered promiscuous mode [ 2787.610378][T22955] syzkaller0: entered allmulticast mode [ 2787.628253][T19647] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2787.812885][T19647] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2787.822586][T19647] usb 10-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2787.833970][T19647] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2787.843697][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2787.855941][T19647] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2787.879762][T19647] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2787.890018][T19647] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2787.905542][T19647] usb 10-1: Product: syz [ 2787.910281][T19647] usb 10-1: Manufacturer: syz [ 2787.982469][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2787.994544][T19647] cdc_wdm 10-1:1.0: skipping garbage [ 2788.000825][T19647] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2788.166273][ T30] audit: type=1326 audit(1755190370.472:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22961 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2788.189851][ T30] audit: type=1326 audit(1755190370.472:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22961 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2788.213131][ C1] vkms_vblank_simulate: vblank timer overrun [ 2788.223477][ T30] audit: type=1326 audit(1755190370.472:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22961 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2788.246688][ C1] vkms_vblank_simulate: vblank timer overrun [ 2788.256639][ T30] audit: type=1326 audit(1755190370.472:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22961 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2788.280264][ C1] vkms_vblank_simulate: vblank timer overrun [ 2788.415126][ T6497] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2788.593643][ T6497] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2788.603260][ T6497] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2788.618933][ T6497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2788.629999][ T6497] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2788.642422][ T6497] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2788.727882][ T6497] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2788.737887][ T6497] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2788.746419][ T6497] usb 4-1: Product: syz [ 2788.750876][ T6497] usb 4-1: Manufacturer: syz [ 2788.836463][ T6497] cdc_wdm 4-1:1.0: skipping garbage [ 2788.842532][ T6497] cdc_wdm 4-1:1.0: skipping garbage [ 2788.848529][ T6497] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2789.909368][T22984] loop7: detected capacity change from 0 to 512 [ 2789.976310][T22984] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.4362: missing EA_INODE flag [ 2789.993293][T22984] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.4362: error while reading EA inode 11 err=-117 [ 2790.027603][T22984] EXT4-fs (loop7): 1 orphan inode deleted [ 2790.036460][T22984] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2790.378034][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2790.693784][ T6497] usb 10-1: USB disconnect, device number 32 [ 2791.036791][T22993] syzkaller0: entered promiscuous mode [ 2791.042716][T22993] syzkaller0: entered allmulticast mode [ 2791.161075][T19647] usb 4-1: USB disconnect, device number 26 [ 2791.241822][ T30] audit: type=1326 audit(1755190373.542:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2791.385441][ T30] audit: type=1326 audit(1755190373.582:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2791.409615][ T30] audit: type=1326 audit(1755190373.582:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23000 comm="syz.2.4368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2792.407728][ T6497] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 2792.584481][ T6497] usb 10-1: device descriptor read/64, error -71 [ 2792.843562][ T6497] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2792.936763][T23029] syzkaller0: entered promiscuous mode [ 2792.943110][T23029] syzkaller0: entered allmulticast mode [ 2793.029967][ T6497] usb 10-1: device descriptor read/64, error -71 [ 2793.084748][ T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2793.150528][ T6497] usb usb10-port1: attempt power cycle [ 2793.283901][ T24] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2793.294499][ T24] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2793.305689][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2793.315161][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2793.331072][ T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2793.518138][ T24] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2793.532196][ T24] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2793.541885][ T24] usb 9-1: Product: syz [ 2793.546730][ T24] usb 9-1: Manufacturer: syz [ 2793.580047][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 2793.586466][ T24] cdc_wdm 9-1:1.0: skipping garbage [ 2793.592180][ T24] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2793.620709][ T6497] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 2793.673520][ T6497] usb 10-1: device descriptor read/8, error -71 [ 2793.925425][ T6497] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2793.968383][ T6497] usb 10-1: device descriptor read/8, error -71 [ 2794.102375][ T6497] usb usb10-port1: unable to enumerate USB device [ 2796.047658][T19647] usb 9-1: USB disconnect, device number 29 [ 2796.178712][T23067] tipc: Enabling of bearer rejected, failed to enable media [ 2796.212255][T23067] syzkaller0: entered promiscuous mode [ 2796.218537][T23067] syzkaller0: entered allmulticast mode [ 2797.002065][T23082] loop8: detected capacity change from 0 to 512 [ 2797.100195][T23082] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.4401: missing EA_INODE flag [ 2797.150443][T23082] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.4401: error while reading EA inode 11 err=-117 [ 2797.170026][T23082] EXT4-fs (loop8): 1 orphan inode deleted [ 2797.178703][T23082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2797.364863][T11773] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2797.450388][T21098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2797.545349][T11773] usb 3-1: device descriptor read/64, error -71 [ 2797.805941][T11773] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2797.816977][T23094] loop8: detected capacity change from 0 to 1024 [ 2797.850566][T23094] EXT4-fs: Ignoring removed orlov option [ 2797.904609][T23094] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2797.933963][T23094] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2798.006396][T11773] usb 3-1: device descriptor read/64, error -71 [ 2798.084950][ T6497] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2798.095713][T23094] loop8: detected capacity change from 0 to 512 [ 2798.116960][T11773] usb usb3-port1: attempt power cycle [ 2798.147997][T23094] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2798.352577][ T6497] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2798.361753][ T6497] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2798.372874][ T6497] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2798.382662][ T6497] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 2798.394371][ T6497] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 2798.514534][T11773] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2798.530978][ T6497] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2798.541375][ T6497] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2798.558020][ T6497] usb 4-1: Product: syz [ 2798.562896][ T6497] usb 4-1: Manufacturer: syz [ 2798.592220][T11773] usb 3-1: device descriptor read/8, error -71 [ 2798.626693][ T6497] cdc_wdm 4-1:1.0: skipping garbage [ 2798.632345][ T6497] cdc_wdm 4-1:1.0: skipping garbage [ 2798.638818][ T6497] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2798.806832][T23106] tipc: Enabling of bearer rejected, failed to enable media [ 2798.824697][T23108] tipc: Enabled bearer , priority 0 [ 2798.832483][T23106] syzkaller0: entered promiscuous mode [ 2798.839186][T23106] syzkaller0: entered allmulticast mode [ 2798.863758][T23108] syzkaller0: entered promiscuous mode [ 2798.870009][T23108] syzkaller0: entered allmulticast mode [ 2798.874839][T11773] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2798.906925][T11773] usb 3-1: device descriptor read/8, error -71 [ 2798.906987][T23110] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4411'. [ 2799.015326][T23108] tipc: Resetting bearer [ 2799.027201][T11773] usb usb3-port1: unable to enumerate USB device [ 2799.038560][T23107] tipc: Resetting bearer [ 2799.071977][T23107] tipc: Disabling bearer [ 2800.832161][T23138] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4419'. [ 2800.852148][ T6497] usb 4-1: USB disconnect, device number 27 [ 2801.676215][T23151] tipc: Enabling of bearer rejected, failed to enable media [ 2801.699952][T23151] syzkaller0: entered promiscuous mode [ 2801.706152][T23151] syzkaller0: entered allmulticast mode [ 2802.064368][ T6497] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2802.289134][ T6497] usb 9-1: device descriptor read/64, error -71 [ 2802.544576][ T6497] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2802.579143][T23172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4433'. [ 2802.589936][T11773] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2802.696161][ T6497] usb 9-1: device descriptor read/64, error -71 [ 2802.754712][T11773] usb 3-1: device descriptor read/64, error -71 [ 2802.824580][ T6497] usb usb9-port1: attempt power cycle [ 2803.015270][T11773] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2803.175017][T11773] usb 3-1: device descriptor read/64, error -71 [ 2803.188243][ T6497] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2803.234637][ T6497] usb 9-1: device descriptor read/8, error -71 [ 2803.288174][T11773] usb usb3-port1: attempt power cycle [ 2803.504676][ T6497] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2803.538190][ T6497] usb 9-1: device descriptor read/8, error -71 [ 2803.645510][T11773] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2803.672211][ T6497] usb usb9-port1: unable to enumerate USB device [ 2803.688829][T11773] usb 3-1: device descriptor read/8, error -71 [ 2803.954997][T11773] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2804.009110][T11773] usb 3-1: device descriptor read/8, error -71 [ 2804.068402][T23191] tipc: Enabling of bearer rejected, failed to enable media [ 2804.088247][T23191] syzkaller0: entered promiscuous mode [ 2804.094618][T23191] syzkaller0: entered allmulticast mode [ 2804.142966][T11773] usb usb3-port1: unable to enumerate USB device [ 2804.682081][T23199] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4444'. [ 2806.247240][T23224] tipc: Enabling of bearer rejected, failed to enable media [ 2806.259844][T23224] syzkaller0: entered promiscuous mode [ 2806.265942][T23224] syzkaller0: entered allmulticast mode [ 2806.474621][ T6497] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2806.619410][T23230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4459'. [ 2806.653046][ T6497] usb 9-1: device descriptor read/64, error -71 [ 2806.916040][ T6497] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2807.075117][ T6497] usb 9-1: device descriptor read/64, error -71 [ 2807.187865][ T6497] usb usb9-port1: attempt power cycle [ 2807.275187][T11773] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2807.434589][T11773] usb 3-1: device descriptor read/64, error -71 [ 2807.566227][ T6497] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2807.636694][ T6497] usb 9-1: device descriptor read/8, error -71 [ 2807.675768][T11773] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2807.834495][T11773] usb 3-1: device descriptor read/64, error -71 [ 2807.878973][ T6497] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2807.917453][ T6497] usb 9-1: device descriptor read/8, error -71 [ 2807.970934][T11773] usb usb3-port1: attempt power cycle [ 2808.037559][ T6497] usb usb9-port1: unable to enumerate USB device [ 2808.355727][T11773] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2808.456879][T11773] usb 3-1: device descriptor read/8, error -71 [ 2808.715238][T11773] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2808.767412][T11773] usb 3-1: device descriptor read/8, error -71 [ 2808.850806][T23258] tipc: Enabling of bearer rejected, failed to enable media [ 2808.863776][T23258] syzkaller0: entered promiscuous mode [ 2808.871870][T23258] syzkaller0: entered allmulticast mode [ 2808.902180][T11773] usb usb3-port1: unable to enumerate USB device [ 2810.235527][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2810.242251][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2810.671600][T23286] tipc: Enabling of bearer rejected, failed to enable media [ 2810.702972][T23286] syzkaller0: entered promiscuous mode [ 2810.709253][T23286] syzkaller0: entered allmulticast mode [ 2811.626588][ T6497] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 2811.865039][ T6497] usb 10-1: device descriptor read/64, error -71 [ 2811.976243][T11773] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2812.114934][ T6497] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 2812.125795][T11773] usb 3-1: device descriptor read/64, error -71 [ 2812.269293][ T6497] usb 10-1: device descriptor read/64, error -71 [ 2812.384822][T11773] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2812.387654][ T6497] usb usb10-port1: attempt power cycle [ 2812.546904][T11773] usb 3-1: device descriptor read/64, error -71 [ 2812.683584][T11773] usb usb3-port1: attempt power cycle [ 2812.795725][ T6497] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 2812.838341][ T6497] usb 10-1: device descriptor read/8, error -71 [ 2812.956630][T23321] tipc: Enabling of bearer rejected, failed to enable media [ 2812.993486][T23321] syzkaller0: entered promiscuous mode [ 2813.000416][T23321] syzkaller0: entered allmulticast mode [ 2813.034591][T11773] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2813.109609][ T6497] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 2813.126368][T11773] usb 3-1: device descriptor read/8, error -71 [ 2813.167977][ T6497] usb 10-1: device descriptor read/8, error -71 [ 2813.305224][ T6497] usb usb10-port1: unable to enumerate USB device [ 2813.990063][T23337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4506'. [ 2814.498705][ T30] audit: type=1326 audit(1755190396.792:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.7.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2814.527262][ T30] audit: type=1326 audit(1755190396.802:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.7.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2814.555455][ T30] audit: type=1326 audit(1755190396.802:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.7.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2814.579045][ T30] audit: type=1326 audit(1755190396.802:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.7.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2814.603627][ T30] audit: type=1326 audit(1755190396.802:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.7.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2814.779433][T23353] fuse: Bad value for 'user_id' [ 2814.784963][T23353] fuse: Bad value for 'user_id' [ 2814.965738][ T30] audit: type=1326 audit(1755190396.962:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23346 comm="syz.7.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2814.989358][ T30] audit: type=1326 audit(1755190397.052:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23351 comm="syz.9.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2815.013857][ T30] audit: type=1326 audit(1755190397.052:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23351 comm="syz.9.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2815.041901][ T30] audit: type=1326 audit(1755190397.062:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23351 comm="syz.9.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2815.066429][ T30] audit: type=1326 audit(1755190397.062:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23351 comm="syz.9.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2815.375386][T23355] tipc: Enabling of bearer rejected, failed to enable media [ 2815.436078][T23358] syzkaller0: entered promiscuous mode [ 2815.451337][T23358] syzkaller0: entered allmulticast mode [ 2815.614527][ T6497] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2815.764532][ T6497] usb 4-1: device descriptor read/64, error -71 [ 2815.997705][ T24] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 2816.016829][ T6497] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2816.042010][ T24] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2816.167657][ T6497] usb 4-1: device descriptor read/64, error -71 [ 2816.288569][ T6497] usb usb4-port1: attempt power cycle [ 2816.633374][T23382] netlink: 'syz.7.4525': attribute type 21 has an invalid length. [ 2816.642684][T23382] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4525'. [ 2816.652523][T23382] netlink: 'syz.7.4525': attribute type 1 has an invalid length. [ 2816.695394][ T6497] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2816.736007][ T6497] usb 4-1: device descriptor read/8, error -71 [ 2816.888849][T23385] fuse: Bad value for 'fd' [ 2816.988594][ T6497] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2817.029129][ T6497] usb 4-1: device descriptor read/8, error -71 [ 2817.155551][ T6497] usb usb4-port1: unable to enumerate USB device [ 2817.483605][T23393] syzkaller0: entered promiscuous mode [ 2817.500400][T23393] syzkaller0: entered allmulticast mode [ 2818.598919][T23416] fuse: Bad value for 'fd' [ 2819.864779][T23431] syzkaller0: entered promiscuous mode [ 2819.870647][T23431] syzkaller0: entered allmulticast mode [ 2819.970217][T23439] loop7: detected capacity change from 0 to 512 [ 2820.095302][T23439] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.4547: missing EA_INODE flag [ 2820.124683][T23439] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.4547: error while reading EA inode 11 err=-117 [ 2820.161330][T23439] EXT4-fs (loop7): 1 orphan inode deleted [ 2820.170031][T23439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2820.371151][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2820.546968][T23445] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2820.547595][T23447] fuse: Bad value for 'fd' [ 2820.683409][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 2820.683491][ T30] audit: type=1326 audit(1755190402.982:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2820.715652][ T30] audit: type=1326 audit(1755190402.982:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2820.872679][ T30] audit: type=1326 audit(1755190403.052:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2820.896754][ T30] audit: type=1326 audit(1755190403.062:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2820.902881][T23445] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2820.920915][ T30] audit: type=1326 audit(1755190403.152:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2820.955942][ T30] audit: type=1326 audit(1755190403.152:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2820.983614][ T30] audit: type=1326 audit(1755190403.162:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2821.009026][ T30] audit: type=1326 audit(1755190403.162:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23449 comm="syz.7.4553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2821.229048][T23445] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.330355][ T30] audit: type=1326 audit(1755190403.632:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23457 comm="syz.7.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2821.450500][T23445] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2821.497906][ T30] audit: type=1326 audit(1755190403.672:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23457 comm="syz.7.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2821.836399][ T3840] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.866004][ T3840] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.902366][ T3840] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2821.925069][ T3840] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2822.296038][T23471] ALSA: seq fatal error: cannot create timer (-22) [ 2822.560922][T23475] syzkaller0: entered promiscuous mode [ 2822.568886][T23475] syzkaller0: entered allmulticast mode [ 2822.647400][T23476] loop7: detected capacity change from 0 to 512 [ 2822.748906][T23476] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.4563: missing EA_INODE flag [ 2822.781341][T23476] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.4563: error while reading EA inode 11 err=-117 [ 2822.796388][T23476] EXT4-fs (loop7): 1 orphan inode deleted [ 2822.804757][T23476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2822.971098][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2823.089815][T23484] fuse: Bad value for 'fd' [ 2823.367944][T23490] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4569'. [ 2823.588418][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4567'. [ 2826.836590][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 2826.836677][ T30] audit: type=1326 audit(1755190409.122:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23511 comm="syz.8.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2826.867109][ T30] audit: type=1326 audit(1755190409.122:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23511 comm="syz.8.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2826.890633][ T30] audit: type=1326 audit(1755190409.122:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23511 comm="syz.8.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2829.820463][T23518] fuse: Bad value for 'fd' [ 2830.774844][T15078] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2830.983221][T15078] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2830.993703][T15078] usb 10-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2831.011697][T15078] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2831.024281][T15078] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2831.137727][T15078] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2831.147777][T15078] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2831.156320][T15078] usb 10-1: Product: syz [ 2831.160874][T15078] usb 10-1: Manufacturer: syz [ 2831.232420][T15078] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2831.461032][T23538] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4588'. [ 2831.752773][ T30] audit: type=1326 audit(1755190414.052:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2831.776567][ T30] audit: type=1326 audit(1755190414.052:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2831.800423][ T30] audit: type=1326 audit(1755190414.052:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.7.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2831.993965][T23544] veth0_to_team: entered promiscuous mode [ 2832.114779][ T30] audit: type=1326 audit(1755190414.352:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.145914][ T30] audit: type=1326 audit(1755190414.352:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.172931][ T30] audit: type=1326 audit(1755190414.352:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.196461][ T30] audit: type=1326 audit(1755190414.352:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.219835][ T30] audit: type=1326 audit(1755190414.352:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.249448][ T30] audit: type=1326 audit(1755190414.352:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.275913][ T30] audit: type=1326 audit(1755190414.352:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.299321][ T30] audit: type=1326 audit(1755190414.352:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.322712][ T30] audit: type=1326 audit(1755190414.362:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.352085][ T30] audit: type=1326 audit(1755190414.362:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.3.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2832.835766][T23555] fuse: Bad value for 'fd' [ 2833.922493][T15078] usb 10-1: USB disconnect, device number 41 [ 2834.861224][T23580] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4605'. [ 2834.914952][T23582] loop8: detected capacity change from 0 to 512 [ 2835.060556][T23582] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.4606: missing EA_INODE flag [ 2835.076047][T23582] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.4606: error while reading EA inode 11 err=-117 [ 2835.105630][T23582] EXT4-fs (loop8): 1 orphan inode deleted [ 2835.113986][T23582] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2838.369280][T21098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2838.773540][T23601] fuse: Unknown parameter 'group_id00000000000000000000' [ 2839.004770][T15078] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2839.623149][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 2839.623237][ T30] audit: type=1326 audit(1755190421.912:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23600 comm="syz.9.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7fc00000 [ 2839.826234][T15078] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2839.835632][T15078] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2839.847238][T15078] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2839.856702][T15078] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2839.878586][T15078] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2839.888229][T15078] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2839.896874][T15078] usb 3-1: Product: syz [ 2839.901336][T15078] usb 3-1: Manufacturer: syz [ 2839.999725][T15078] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2840.260327][ T30] audit: type=1326 audit(1755190422.492:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23616 comm="syz.7.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2840.284329][ T30] audit: type=1326 audit(1755190422.502:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23616 comm="syz.7.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2840.308374][ T30] audit: type=1326 audit(1755190422.502:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23616 comm="syz.7.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x7ffc0000 [ 2840.503502][T23619] loop9: detected capacity change from 0 to 512 [ 2840.654904][T23619] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.4620: missing EA_INODE flag [ 2840.696827][T23623] syzkaller0: entered promiscuous mode [ 2840.702701][T23623] syzkaller0: entered allmulticast mode [ 2840.717049][T23619] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.4620: error while reading EA inode 11 err=-117 [ 2840.850316][ T30] audit: type=1326 audit(1755190423.132:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23620 comm="syz.8.4622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x0 [ 2840.855275][T23619] EXT4-fs (loop9): 1 orphan inode deleted [ 2840.881741][T23619] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2842.193563][T20348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2842.605277][T15078] usb 3-1: USB disconnect, device number 45 [ 2844.331641][T23639] fuse: Bad value for 'user_id' [ 2844.337083][T23639] fuse: Bad value for 'user_id' [ 2846.096143][T23645] infiniband syz!: set active [ 2846.101099][T23645] infiniband syz!: added team_slave_0 [ 2846.315116][ T30] audit: type=1326 audit(1755190428.502:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.8.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2846.338640][ T30] audit: type=1326 audit(1755190428.522:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.8.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2846.368385][ T30] audit: type=1326 audit(1755190428.522:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.8.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2846.911405][T23645] RDS/IB: syz!: added [ 2846.916234][T23645] smc: adding ib device syz! with port count 1 [ 2846.922665][T23645] smc: ib device syz! port 1 has pnetid [ 2850.789909][ T30] audit: type=1326 audit(1755190433.012:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23669 comm="syz.7.4638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x0 [ 2851.203745][T23681] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4641'. [ 2851.213639][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2851.221436][T23681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2851.259488][T23681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2851.267781][T23681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2856.583263][T23721] netlink: 192 bytes leftover after parsing attributes in process `syz.9.4659'. [ 2859.255929][T23761] loop9: detected capacity change from 0 to 512 [ 2859.313437][T23762] loop7: detected capacity change from 0 to 1024 [ 2859.357799][T23761] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.4674: missing EA_INODE flag [ 2859.381541][T23761] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.4674: error while reading EA inode 11 err=-117 [ 2859.399012][T23761] EXT4-fs (loop9): 1 orphan inode deleted [ 2859.408168][T23761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2859.452166][T23762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2859.518878][T20348] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2859.546866][T23762] netlink: 628 bytes leftover after parsing attributes in process `syz.7.4675'. [ 2860.030998][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2860.070018][T23775] fuse: Bad value for 'fd' [ 2860.561189][T23783] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4676'. [ 2860.572082][T23783] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4676'. [ 2860.581887][T23783] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4676'. [ 2862.995376][T23807] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 2863.164997][ T6497] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 2863.206435][ T6497] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2863.386895][ T3586] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 2863.680748][T23811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2865.750183][T23850] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4703'. [ 2865.759974][T23850] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4703'. [ 2865.771217][T23850] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4703'. [ 2866.431644][T23856] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2869.272747][T23879] loop8: detected capacity change from 0 to 164 [ 2869.791781][T23889] fuse: Unknown parameter 'grou00000000000000000000' [ 2870.476651][T23897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4724'. [ 2870.486579][T23897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4724'. [ 2870.496952][T23897] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4724'. [ 2871.680177][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2871.687203][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2872.005957][T23923] 9pnet_fd: Insufficient options for proto=fd [ 2873.445785][T23939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4742'. [ 2873.496705][T23942] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4740'. [ 2873.511126][T23942] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4740'. [ 2873.521851][T23942] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4740'. [ 2873.814423][T23947] loop7: detected capacity change from 0 to 1024 [ 2873.863456][T23947] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2873.875397][T23947] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2873.942784][T23947] JBD2: no valid journal superblock found [ 2873.949247][T23947] EXT4-fs (loop7): Could not load journal inode [ 2874.379601][T23953] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 2874.659088][T23958] 9pnet_fd: Insufficient options for proto=fd [ 2874.976265][T23961] tipc: Enabling of bearer rejected, failed to enable media [ 2875.063528][T23961] loop8: detected capacity change from 0 to 128 [ 2875.114296][T23961] FAT-fs (loop8): Directory bread(block 162) failed [ 2875.121361][T23961] FAT-fs (loop8): Directory bread(block 163) failed [ 2875.128461][T23961] FAT-fs (loop8): Directory bread(block 164) failed [ 2875.135674][T23961] FAT-fs (loop8): Directory bread(block 165) failed [ 2875.150615][T23961] FAT-fs (loop8): Directory bread(block 166) failed [ 2875.160350][T23961] FAT-fs (loop8): Directory bread(block 167) failed [ 2875.167461][T23961] FAT-fs (loop8): Directory bread(block 168) failed [ 2875.174512][T23961] FAT-fs (loop8): Directory bread(block 169) failed [ 2876.297831][T23975] loop7: detected capacity change from 0 to 512 [ 2876.435357][T23975] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.4757: missing EA_INODE flag [ 2876.456203][T23975] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.4757: error while reading EA inode 11 err=-117 [ 2876.521990][T23975] EXT4-fs (loop7): 1 orphan inode deleted [ 2876.530546][T23975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2876.947501][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2877.479621][T23989] 9pnet_fd: Insufficient options for proto=fd [ 2877.512154][T23991] loop7: detected capacity change from 0 to 512 [ 2877.856427][T23991] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2877.870346][T23991] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2878.271964][T18262] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2879.016582][T24012] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4766'. [ 2879.027095][T24012] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4766'. [ 2879.043967][T24012] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4766'. [ 2879.091757][T24009] netlink: 'syz.2.4772': attribute type 13 has an invalid length. [ 2879.106571][T24010] loop8: detected capacity change from 0 to 512 [ 2879.326421][T24010] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #11: comm syz.8.4771: missing EA_INODE flag [ 2879.425202][T24010] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.4771: error while reading EA inode 11 err=-117 [ 2879.562396][T24009] bridge0: port 2(bridge_slave_1) entered disabled state [ 2879.571580][T24009] bridge0: port 1(bridge_slave_0) entered disabled state [ 2879.663975][T24010] EXT4-fs (loop8): 1 orphan inode deleted [ 2879.676490][T24010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2879.843691][T24018] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4772'. [ 2879.861512][T24018] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.4772'. [ 2880.136590][T24009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2880.174978][T24009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2880.803233][T21098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2881.166894][T24027] 9pnet_fd: Insufficient options for proto=fd [ 2881.355074][T13197] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.396094][T13197] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.448575][T13197] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2881.515360][ T3586] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2882.916181][T24044] loop7: detected capacity change from 0 to 1024 [ 2882.953116][T24044] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2882.964843][T24044] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2882.990894][T24044] JBD2: no valid journal superblock found [ 2882.997392][T24044] EXT4-fs (loop7): Could not load journal inode [ 2883.807425][ T30] audit: type=1326 audit(1755190466.112:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24057 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2883.896965][T24056] 9pnet_fd: Insufficient options for proto=fd [ 2883.915753][ T30] audit: type=1326 audit(1755190466.132:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24057 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2883.940750][ T30] audit: type=1326 audit(1755190466.142:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24057 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2883.968853][ T30] audit: type=1326 audit(1755190466.142:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24057 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2883.994256][ T30] audit: type=1326 audit(1755190466.142:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24057 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc378ebe9 code=0x7ffc0000 [ 2884.095984][T24063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4787'. [ 2884.106914][T24063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4787'. [ 2884.116694][T24063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4787'. [ 2885.180914][T24072] tipc: New replicast peer: 255.255.255.255 [ 2885.191796][T24072] tipc: Enabled bearer , priority 10 [ 2886.435427][T11773] tipc: Node number set to 2529775433 [ 2886.646181][ T30] audit: type=1326 audit(1755190468.942:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24081 comm="syz.9.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2886.670503][ T30] audit: type=1326 audit(1755190468.942:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24081 comm="syz.9.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2886.694976][ T30] audit: type=1326 audit(1755190468.942:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24081 comm="syz.9.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2889.035866][T24114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2890.086658][T24132] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4815'. [ 2890.102733][T24132] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4815'. [ 2890.112587][T24132] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4815'. [ 2892.194777][T24158] fuse: Unknown parameter 'group_id00000000000000000000' [ 2893.335694][T24164] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4835'. [ 2893.347185][T24164] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4835'. [ 2893.356724][T24164] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4835'. [ 2893.925426][T24185] fuse: Bad value for 'fd' [ 2894.744438][T24199] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4850'. [ 2895.537427][T24215] fuse: Bad value for 'fd' [ 2896.753064][T24229] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4863'. [ 2896.762751][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4863'. [ 2896.777916][T24229] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4863'. [ 2898.500796][ T30] audit: type=1326 audit(1755190480.772:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24238 comm="syz.7.4868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aed58ebe9 code=0x0 [ 2899.462471][T24256] fuse: Bad value for 'fd' [ 2902.529175][T24268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4881'. [ 2903.340300][T24281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2903.350980][T24281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2903.361333][T24281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4878'. [ 2905.306278][T24299] fuse: Invalid rootmode [ 2907.845416][ T30] audit: type=1107 audit(1755190490.142:430): pid=24318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 2908.473540][T24332] fuse: Invalid rootmode [ 2909.625685][T24335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4903'. [ 2909.635263][T24335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 2909.653099][T24335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4903'. [ 2910.749052][T24346] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4907'. [ 2911.414797][ T30] audit: type=1326 audit(1755190493.642:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24353 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2911.442395][ T30] audit: type=1326 audit(1755190493.642:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24353 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2911.466642][ T30] audit: type=1326 audit(1755190493.652:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24353 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2911.495414][ T30] audit: type=1326 audit(1755190493.652:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24353 comm="syz.9.4910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2911.847115][T24360] fuse: Unknown parameter 'user_id00000000000000000000' [ 2912.199399][T24368] fuse: Invalid rootmode [ 2912.839086][T24364] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4915'. [ 2912.848628][T24364] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4915'. [ 2912.859798][T24364] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4915'. [ 2914.855177][ T30] audit: type=1326 audit(1755190497.112:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.038606][ T30] audit: type=1326 audit(1755190497.192:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.063262][ T30] audit: type=1326 audit(1755190497.192:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.090312][ T30] audit: type=1326 audit(1755190497.192:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.114871][ T30] audit: type=1326 audit(1755190497.192:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.138953][ T30] audit: type=1326 audit(1755190497.192:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.162362][ T30] audit: type=1326 audit(1755190497.192:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.189415][ T30] audit: type=1326 audit(1755190497.212:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.215051][ T30] audit: type=1326 audit(1755190497.212:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2915.238624][ T30] audit: type=1326 audit(1755190497.222:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24395 comm="syz.2.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2917.079881][T24423] loop8: detected capacity change from 0 to 1024 [ 2917.111605][T24423] EXT4-fs: Ignoring removed oldalloc option [ 2917.194752][T24423] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2917.433112][T24423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2918.165083][T24439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4941'. [ 2918.175536][T24439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4941'. [ 2918.185167][T24439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4941'. [ 2918.228431][T21098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2918.735558][ T6497] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2918.973723][ T6497] usb 4-1: Using ep0 maxpacket: 32 [ 2919.047686][ T6497] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2919.056631][ T6497] usb 4-1: config 0 has no interface number 0 [ 2919.201673][ T6497] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2919.212218][ T6497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.221612][ T6497] usb 4-1: Product: syz [ 2919.226343][ T6497] usb 4-1: Manufacturer: syz [ 2919.231360][ T6497] usb 4-1: SerialNumber: syz [ 2919.874752][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 2919.874831][ T30] audit: type=1326 audit(1755190502.172:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.001687][T24451] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4949'. [ 2920.119231][ T30] audit: type=1326 audit(1755190502.252:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.143091][ T30] audit: type=1326 audit(1755190502.252:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc7a78d69f code=0x7ffc0000 [ 2920.166704][ T30] audit: type=1326 audit(1755190502.252:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.189780][ T30] audit: type=1326 audit(1755190502.252:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.199690][ T6497] usb 4-1: config 0 descriptor?? [ 2920.217970][ T30] audit: type=1326 audit(1755190502.262:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.243786][ T30] audit: type=1326 audit(1755190502.262:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.267008][ T30] audit: type=1326 audit(1755190502.282:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.290962][ T30] audit: type=1326 audit(1755190502.282:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.319204][ T30] audit: type=1326 audit(1755190502.302:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24449 comm="syz.8.4949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2920.465732][T24451] sd 0:0:1:0: device reset [ 2921.402465][T24464] fuse: Unknown parameter '00000000000000000000' [ 2921.470080][ T6497] smsc95xx v2.0.0 [ 2921.488514][ T6497] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2921.501003][ T6497] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2921.954934][ T6497] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2921.967700][ T6497] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 2922.127299][T24477] loop7: detected capacity change from 0 to 164 [ 2922.164569][ T6497] usb 4-1: USB disconnect, device number 32 [ 2922.251288][T24477] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4956'. [ 2922.261601][T24477] unsupported nla_type 10042 [ 2922.442658][T24480] loop8: detected capacity change from 0 to 1024 [ 2922.490222][T24480] EXT4-fs: Ignoring removed oldalloc option [ 2922.509546][T24480] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 2922.656738][T24480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2923.341299][T21098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2923.527141][T24501] fuse: Unknown parameter 'user00000000000000000000' [ 2925.352457][T24515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4968'. [ 2925.697126][T24520] loop8: detected capacity change from 0 to 16384 [ 2925.883896][ T6497] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2926.137855][ T6497] usb 10-1: Using ep0 maxpacket: 32 [ 2926.206604][ T6497] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 2926.216098][ T6497] usb 10-1: config 0 has no interface number 0 [ 2926.377713][ T6497] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2926.387722][ T6497] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2926.397012][ T6497] usb 10-1: Product: syz [ 2926.402010][ T6497] usb 10-1: Manufacturer: syz [ 2926.409699][ T6497] usb 10-1: SerialNumber: syz [ 2926.665180][ T6497] usb 10-1: config 0 descriptor?? [ 2926.732804][ T6497] smsc95xx v2.0.0 [ 2927.047133][T24520] loop8: detected capacity change from 16384 to 0 [ 2927.219113][ T6497] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2927.230873][ T6497] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2927.685461][ T6497] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2927.698215][ T6497] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 2927.756157][ T6497] usb 10-1: USB disconnect, device number 42 [ 2928.004785][T24541] fuse: Unknown parameter 'user00000000000000000000' [ 2930.476946][T11773] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2930.674449][T11773] usb 3-1: Using ep0 maxpacket: 16 [ 2930.714121][T11773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2930.790900][T11773] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2930.801166][T11773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2930.810301][T11773] usb 3-1: Product: syz [ 2930.814963][T11773] usb 3-1: Manufacturer: syz [ 2930.820003][T11773] usb 3-1: SerialNumber: syz [ 2931.035394][T11773] usb 3-1: config 0 descriptor?? [ 2931.903632][T24581] fuse: Unknown parameter 'user00000000000000000000' [ 2932.839850][T15078] usb 3-1: USB disconnect, device number 46 [ 2932.853374][T11773] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2933.077023][T11773] usb 9-1: Using ep0 maxpacket: 16 [ 2933.133873][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2933.141057][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2933.235994][T11773] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2933.246827][T11773] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2933.418999][T11773] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2933.429889][T11773] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.439325][T11773] usb 9-1: Product: syz [ 2933.443837][T11773] usb 9-1: Manufacturer: syz [ 2933.449153][T11773] usb 9-1: SerialNumber: syz [ 2934.473567][T11773] usb 9-1: config 0 descriptor?? [ 2935.892711][T24619] fuse: Unknown parameter 'user_i00000000000000000000' [ 2936.308106][T24628] fuse: Unknown parameter '0x0000000000000003' [ 2936.400999][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2936.401084][ T30] audit: type=1326 audit(2000000008.560:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.431537][ T30] audit: type=1326 audit(2000000008.560:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.488798][ T30] audit: type=1326 audit(2000000008.640:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.513480][ T30] audit: type=1326 audit(2000000008.640:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.537517][ T30] audit: type=1326 audit(2000000008.640:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.561138][ T30] audit: type=1326 audit(2000000008.650:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.588851][ T30] audit: type=1326 audit(2000000008.750:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.615109][ T30] audit: type=1326 audit(2000000008.750:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.644589][ T30] audit: type=1326 audit(2000000008.800:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.675028][ T30] audit: type=1326 audit(2000000008.830:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24629 comm="syz.9.5011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2936.736366][T11773] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2936.925215][T11773] usb 4-1: Using ep0 maxpacket: 16 [ 2936.952845][T11773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2936.963681][T11773] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2937.020813][ T6497] usb 9-1: USB disconnect, device number 38 [ 2937.063425][T11773] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2937.073766][T11773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2937.082733][T11773] usb 4-1: Product: syz [ 2937.087664][T11773] usb 4-1: Manufacturer: syz [ 2937.097648][T11773] usb 4-1: SerialNumber: syz [ 2937.141796][T11773] usb 4-1: config 0 descriptor?? [ 2937.921203][T24652] fuse: Unknown parameter 'user_i00000000000000000000' [ 2939.792089][T11773] usb 4-1: USB disconnect, device number 33 [ 2940.807628][T24689] fuse: Unknown parameter 'user_i00000000000000000000' [ 2941.623210][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5038'. [ 2941.762857][T24706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5038'. [ 2941.914515][T11773] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2942.124956][T11773] usb 4-1: Using ep0 maxpacket: 16 [ 2942.174527][T11773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2942.186144][T11773] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2942.358651][T11773] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2942.371844][T11773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.381481][T11773] usb 4-1: Product: syz [ 2942.386639][T11773] usb 4-1: Manufacturer: syz [ 2942.391545][T11773] usb 4-1: SerialNumber: syz [ 2942.473431][T11773] usb 4-1: config 0 descriptor?? [ 2942.987735][T24723] fuse: Unknown parameter 'user_id00000000000000000000' [ 2944.767901][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2944.767996][ T30] audit: type=1326 audit(2000000016.920:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.8.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2945.007125][ T30] audit: type=1326 audit(2000000017.020:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.8.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2945.031420][ T30] audit: type=1326 audit(2000000017.070:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.8.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2945.055125][ T30] audit: type=1326 audit(2000000017.070:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.8.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2945.082624][ T30] audit: type=1326 audit(2000000017.070:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24745 comm="syz.8.5056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7a78ebe9 code=0x7ffc0000 [ 2945.682125][ T6497] usb 4-1: USB disconnect, device number 34 [ 2949.463015][T24736] Set syz1 is full, maxelem 65536 reached [ 2949.565132][ T30] audit: type=1326 audit(2000000021.720:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24778 comm="syz.9.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2949.634254][ T30] audit: type=1326 audit(2000000021.780:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24778 comm="syz.9.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2949.659830][ T30] audit: type=1326 audit(2000000021.780:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24778 comm="syz.9.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc37b98ebe9 code=0x7ffc0000 [ 2949.944778][ T30] audit: type=1326 audit(2000000022.100:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.040818][ T30] audit: type=1326 audit(2000000022.140:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.065047][ T30] audit: type=1326 audit(2000000022.180:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.088343][ T30] audit: type=1326 audit(2000000022.180:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.115300][ T30] audit: type=1326 audit(2000000022.180:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.139963][ T30] audit: type=1326 audit(2000000022.180:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.162851][ T30] audit: type=1326 audit(2000000022.180:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.187225][ T30] audit: type=1326 audit(2000000022.180:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.214766][ T30] audit: type=1326 audit(2000000022.190:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.239112][ T30] audit: type=1326 audit(2000000022.190:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24783 comm="syz.2.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f939018ebe9 code=0x7ffc0000 [ 2950.486804][ T6497] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2950.716042][ T6497] usb 9-1: Using ep0 maxpacket: 16 [ 2950.764734][ T6497] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2950.775424][ T6497] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2951.048535][ T6497] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2951.058551][ T6497] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2951.067638][ T6497] usb 9-1: Product: syz [ 2951.072170][ T6497] usb 9-1: Manufacturer: syz [ 2951.077188][ T6497] usb 9-1: SerialNumber: syz [ 2951.106207][ T6497] usb 9-1: config 0 descriptor?? [ 2953.910238][T15078] usb 9-1: USB disconnect, device number 39 [ 2956.605266][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5101'. [ 2961.682722][T24945] ===================================================== [ 2961.690454][T24945] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 2961.698267][T24945] eth_type_trans+0x69d/0x9a0 [ 2961.703312][T24945] __dev_forward_skb2+0x4b1/0x950 [ 2961.708815][T24945] dev_forward_skb_nomtu+0x3b/0xe0 [ 2961.714745][T24945] __bpf_redirect+0x14d6/0x1760 [ 2961.720403][T24945] bpf_clone_redirect+0x366/0x530 [ 2961.725902][T24945] ___bpf_prog_run+0x1294/0xeba0 [ 2961.731130][T24945] __bpf_prog_run512+0xc5/0x100 [ 2961.736688][T24945] bpf_test_run+0x350/0xab0 [ 2961.741429][T24945] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2961.747402][T24945] bpf_prog_test_run+0x5bf/0xa40 [ 2961.752850][T24945] __sys_bpf+0x89a/0xed0 [ 2961.757978][T24945] __x64_sys_bpf+0xa4/0xf0 [ 2961.763121][T24945] x64_sys_call+0x3550/0x3e20 [ 2961.768143][T24945] do_syscall_64+0xd9/0x210 [ 2961.772908][T24945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2961.779241][T24945] [ 2961.781642][T24945] Uninit was created at: [ 2961.786289][T24945] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 2961.792460][T24945] kmalloc_reserve+0x13c/0x4b0 [ 2961.797713][T24945] pskb_expand_head+0x1fc/0x1610 [ 2961.802917][T24945] skb_ensure_writable+0x44e/0x510 [ 2961.808511][T24945] bpf_clone_redirect+0x1c1/0x530 [ 2961.813725][T24945] ___bpf_prog_run+0x1294/0xeba0 [ 2961.819698][T24945] __bpf_prog_run512+0xc5/0x100 [ 2961.825132][T24945] bpf_test_run+0x350/0xab0 [ 2961.829805][T24945] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2961.835746][T24945] bpf_prog_test_run+0x5bf/0xa40 [ 2961.841116][T24945] __sys_bpf+0x89a/0xed0 [ 2961.845852][T24945] __x64_sys_bpf+0xa4/0xf0 [ 2961.850557][T24945] x64_sys_call+0x3550/0x3e20 [ 2961.855846][T24945] do_syscall_64+0xd9/0x210 [ 2961.860724][T24945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2961.866964][T24945] [ 2961.869450][T24945] CPU: 0 UID: 0 PID: 24945 Comm: syz.8.5125 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(none) [ 2961.883875][T24945] Tainted: [W]=WARN [ 2961.888070][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2961.899096][T24945] ===================================================== [ 2961.906635][T24945] Disabling lock debugging due to kernel taint [ 2961.913282][T24945] Kernel panic - not syncing: kmsan.panic set ... [ 2961.919967][T24945] CPU: 0 UID: 0 PID: 24945 Comm: syz.8.5125 Tainted: G B W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(none) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2961.934001][T24945] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2961.939218][T24945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2961.949589][T24945] Call Trace: [ 2961.953006][T24945] [ 2961.956025][T24945] __dump_stack+0x26/0x30 [ 2961.960549][T24945] dump_stack_lvl+0x53/0x270 [ 2961.965808][T24945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2961.972163][T24945] dump_stack+0x1e/0x25 [ 2961.976618][T24945] vpanic+0x361/0xc50 [ 2961.981036][T24945] panic+0x15d/0x160 [ 2961.985362][T24945] kmsan_report+0x31c/0x320 [ 2961.990235][T24945] ? bpf_prog_test_run+0x5bf/0xa40 [ 2961.995808][T24945] ? __msan_warning+0x1b/0x30 [ 2962.000685][T24945] ? eth_type_trans+0x69d/0x9a0 [ 2962.006077][T24945] ? __dev_forward_skb2+0x4b1/0x950 [ 2962.011962][T24945] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 2962.018615][T24945] ? __bpf_redirect+0x14d6/0x1760 [ 2962.023847][T24945] ? bpf_clone_redirect+0x366/0x530 [ 2962.029246][T24945] ? ___bpf_prog_run+0x1294/0xeba0 [ 2962.034698][T24945] ? __bpf_prog_run512+0xc5/0x100 [ 2962.040154][T24945] ? bpf_test_run+0x350/0xab0 [ 2962.045150][T24945] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2962.051336][T24945] ? bpf_prog_test_run+0x5bf/0xa40 [ 2962.056966][T24945] ? __sys_bpf+0x89a/0xed0 [ 2962.061628][T24945] ? __x64_sys_bpf+0xa4/0xf0 [ 2962.066677][T24945] ? x64_sys_call+0x3550/0x3e20 [ 2962.072270][T24945] ? do_syscall_64+0xd9/0x210 [ 2962.077235][T24945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2962.083572][T24945] ? kmem_cache_charge+0x961/0x9d0 [ 2962.089162][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.094753][T24945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2962.100793][T24945] ? eth_get_headlen+0x151/0x1e0 [ 2962.106380][T24945] ? filter_irq_stacks+0x49/0x190 [ 2962.111859][T24945] ? stack_depot_save_flags+0x35/0x7b0 [ 2962.117566][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.122884][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.128380][T24945] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2962.135175][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.140757][T24945] __msan_warning+0x1b/0x30 [ 2962.145638][T24945] eth_type_trans+0x69d/0x9a0 [ 2962.150651][T24945] __dev_forward_skb2+0x4b1/0x950 [ 2962.156146][T24945] ? pskb_expand_head+0x1268/0x1610 [ 2962.161592][T24945] dev_forward_skb_nomtu+0x3b/0xe0 [ 2962.167215][T24945] __bpf_redirect+0x14d6/0x1760 [ 2962.172367][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.177810][T24945] bpf_clone_redirect+0x366/0x530 [ 2962.183428][T24945] ___bpf_prog_run+0x1294/0xeba0 [ 2962.188940][T24945] __bpf_prog_run512+0xc5/0x100 [ 2962.194172][T24945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2962.200801][T24945] ? preempt_schedule_irq+0x71/0x110 [ 2962.206377][T24945] ? filter_irq_stacks+0x49/0x190 [ 2962.212002][T24945] ? stack_depot_save_flags+0x35/0x7b0 [ 2962.217931][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.223510][T24945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2962.229699][T24945] ? ktime_get+0x530/0x590 [ 2962.234333][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.239910][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.245409][T24945] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2962.252368][T24945] ? kmsan_get_metadata+0x150/0x160 [ 2962.257951][T24945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2962.264279][T24945] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2962.270292][T24945] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2962.276015][T24945] bpf_test_run+0x350/0xab0 [ 2962.280854][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.286409][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.292192][T24945] ? kmsan_get_metadata+0xfb/0x160 [ 2962.297595][T24945] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2962.304412][T24945] ? bpf_test_run+0x1b0/0xab0 [ 2962.309309][T24945] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 2962.315256][T24945] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2962.330275][T24945] bpf_prog_test_run+0x5bf/0xa40 [ 2962.335696][T24945] __sys_bpf+0x89a/0xed0 [ 2962.340391][T24945] __x64_sys_bpf+0xa4/0xf0 [ 2962.345175][T24945] x64_sys_call+0x3550/0x3e20 [ 2962.350106][T24945] do_syscall_64+0xd9/0x210 [ 2962.354795][T24945] ? irqentry_exit+0x16/0x60 [ 2962.359632][T24945] ? clear_bhb_loop+0x40/0x90 [ 2962.364664][T24945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2962.371089][T24945] RIP: 0033:0x7fcc7a78ebe9 [ 2962.375643][T24945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2962.396312][T24945] RSP: 002b:00007fcc7b690038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2962.405434][T24945] RAX: ffffffffffffffda RBX: 00007fcc7a9b5fa0 RCX: 00007fcc7a78ebe9 [ 2962.413627][T24945] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 2962.422351][T24945] RBP: 00007fcc7a811e19 R08: 0000000000000000 R09: 0000000000000000 [ 2962.430985][T24945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2962.440099][T24945] R13: 00007fcc7a9b6038 R14: 00007fcc7a9b5fa0 R15: 00007ffcc8f0b5c8 [ 2962.448610][T24945] [ 2962.452574][T24945] Kernel Offset: disabled [ 2962.457172][T24945] Rebooting in 86400 seconds..