last executing test programs: 14m32.055904674s ago: executing program 0 (id=230): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2], 0x27) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x1, 0x7ff}) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) ptrace(0x10, 0x1) (async, rerun: 32) r4 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x16, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) (async, rerun: 32) syz_open_procfs(0x0, 0x0) (async, rerun: 32) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) io_setup(0x3fe, 0x0) (async) io_submit(0x0, 0x0, 0x0) 14m31.575700582s ago: executing program 0 (id=231): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x6}, {0xfff2, 0xc}, {0x18, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x40, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) r4 = gettid() mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xc000}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = syz_clone(0x8000080, &(0x7f00000002c0)="d1d33e6d4866f166e720563f681df6d38ca527a85c31224e080426c95647253c98176c2af84d40aa595aeb86ec0b592f18007159730b3915319016b4fa687dc744efd1357f6acbf1e11d753e35c91310ecf7b3b90010af7e61c2ce3633f027bd32323de6eba9d18d4dced1ffaef7ef483eca72543dc1cd66dd865242e75a46db65b5b979e8842d4eff6c97fe7ab6a605", 0x90, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000003c0)="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") eventfd(0xffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x9, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d36, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0xa42, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x1ff, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x8, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x8, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x6, 0x0, 0x1ef, 0x60e, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x10038, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7ffe, 0x8, 0x200a620, 0x2, 0xff, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x5, 0x8, 0x9e95, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0xffffffff, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000180)='exfat\x00', 0x0) ptrace$ARCH_GET_CPUID(0x1e, r7, 0x0, 0x1011) r8 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r8, &(0x7f0000004d80)={0x2020}, 0x2020) readv(r8, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000380)=0x1) 14m31.364402117s ago: executing program 0 (id=232): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x78, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000100), 0x6, 0x46000) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d", @ANYBLOB="510f"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = socket$kcm(0x29, 0xf, 0x0) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000000)=@sco={0x1f, @none}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/78, 0x4e}], 0x1}, 0x45b539b67d4f8a4a) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) read$hidraw(r4, &(0x7f0000002340)=""/147, 0x93) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 14m29.233632372s ago: executing program 0 (id=239): socket$netlink(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f0000000280)=[{&(0x7f0000000000)="96", 0x1}], 0x1, 0x8, 0x0) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$RTC_UIE_OFF(r1, 0x7004) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) migrate_pages(r7, 0xa, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40, 0x54) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001b00)="766538ad9eb05dde246a3ec9591c2e75014e8b8bb7f3b7025dc8ca3ce7249b5106493405ddaa1bd2b3b059030000009b75502264e0cdb19f67d0720abec2210000b25fe80ec02cc67a23ec0cd17b03eca63b", 0x52}], 0x1, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x42) r13 = syz_open_procfs(r6, &(0x7f0000000140)='net/udplite6\x00') lseek(r13, 0x100000000, 0x4) mknodat(r10, &(0x7f0000000240)='./file0\x00', 0x8050, 0x4) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@ll={0x11, 0x10, r14, 0x1, 0x2, 0x6, @random="440a3cba5a84"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f0000000a40)='S', 0x1}, {&(0x7f00000004c0)="f5a1840ba00d86918c", 0x9}], 0x3}}], 0x1, 0x400c889) capset(&(0x7f0000000000)={0x20080522, r7}, &(0x7f0000000080)={0x8412, 0xf6, 0x8, 0x3, 0x6}) 14m28.515207194s ago: executing program 0 (id=241): rt_sigtimedwait(&(0x7f0000004380), 0x0, 0xfffffffffffffffc, 0x8) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000180), 0x0}, 0x20) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="200616000000d2"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 14m27.291220944s ago: executing program 0 (id=245): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="b638c8457ecf1804092731f8da8efc35009e8fc4df9a2e60d4c3"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf25050000003400018008000700", @ANYRES32=r6, @ANYBLOB="060001000a00000008000300ac1e0001060005004e200000060001000a000000087812e5bf326f29fc000500090000000800030001000000080004007f0000000800040001800000"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x40084) r10 = socket(0x1, 0x803, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffffffff5d2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = io_uring_setup(0x39fc, &(0x7f00000005c0)={0x0, 0xdc22, 0x800, 0x1, 0x386}) io_uring_register$IORING_REGISTER_FILES2(r13, 0xd, &(0x7f0000000d40)={0x1, 0x1, 0x0, &(0x7f0000000c80)=[{0x0}], 0x0}, 0x20) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x2) r16 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100, 0x0, 0x75}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r17, r18, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r16, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 14m26.097211575s ago: executing program 32 (id=245): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6, @ANYBLOB="b638c8457ecf1804092731f8da8efc35009e8fc4df9a2e60d4c3"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002dbd7000fddbdf25050000003400018008000700", @ANYRES32=r6, @ANYBLOB="060001000a00000008000300ac1e0001060005004e200000060001000a000000087812e5bf326f29fc000500090000000800030001000000080004007f0000000800040001800000"], 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x40084) r10 = socket(0x1, 0x803, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffffffff5d2}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r13 = io_uring_setup(0x39fc, &(0x7f00000005c0)={0x0, 0xdc22, 0x800, 0x1, 0x386}) io_uring_register$IORING_REGISTER_FILES2(r13, 0xd, &(0x7f0000000d40)={0x1, 0x1, 0x0, &(0x7f0000000c80)=[{0x0}], 0x0}, 0x20) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) syz_open_dev$video4linux(&(0x7f0000000080), 0x7, 0x2) r16 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100, 0x0, 0x75}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r17, r18, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r16, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 10m58.475865776s ago: executing program 5 (id=798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xf4) (async) r2 = fsmount(0xffffffffffffffff, 0x1, 0xf4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000200)={r3}) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}}, 0x0) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000000) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f00000001c0)=0x3) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) 10m57.032058564s ago: executing program 5 (id=802): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015001500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="a47973d657b6aaaaaaaaaaaa0000000000000800450000330068000000119078a00000020000000000004e22001f906c0400000000000000000000dfff00000000"], 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1507df25da69a040feffffffffffffff0000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x4, 0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x8, 0x1, 0x40000333}, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r7, 0x540b, 0xfffffffffffeffff) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$dsp(r8, &(0x7f0000000200)='m', 0x1) 10m54.404527102s ago: executing program 5 (id=807): r0 = syz_io_uring_setup(0x647e, &(0x7f0000000440)={0x0, 0x0, 0x10100, 0x5, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x5c14d826, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000280)=0x10) shutdown(r3, 0x0) mprotect(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x5}, 0x20) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 10m53.301534135s ago: executing program 5 (id=811): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) dup3(r2, r1, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x4}}, 0x80, 0x0}, 0x4000080) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x3) syz_usb_connect(0x0, 0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585dadb118af4291728831b5e249eab2b7325c9fcd7fc8c8010341ae3a3b605f1e6f6e626e9acd9cf601338e05ca37c3b5122bd66122719bad7a356fc2c09af933de64551f97694d6f51424b1c22a2376bd18fe329b8edbe96d7dab2376aff94a2beb3b0b82cd6dc94d3f5abe68fffafa24ccc3ae1d17f148ee9230399d0f4d2b1fecd1110c1bad20115fa3e25d5a5d0322"], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r6, 0x400445a0, &(0x7f0000000100)=0x7) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f00000000c0)=""/1) preadv2(r6, &(0x7f0000000200)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/32, 0x20}], 0x3, 0xfffffff6, 0x3, 0x10) 10m51.419865309s ago: executing program 5 (id=816): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x3, 0xfa11, 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kexec_load(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200, &(0x7f0000000340)) lsm_get_self_attr(0x64, &(0x7f00000002c0)={0x0, 0x0, 0x35, 0x15, ""/21}, &(0x7f0000001280)=0x35, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xb4, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc6d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) 10m50.812518797s ago: executing program 5 (id=819): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0xe, 0x7ff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x7, @output={0x1000, 0x0, {0xfffffffd, 0x7}, 0xc8d, 0xb}}) 10m50.407723323s ago: executing program 33 (id=819): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0xe, 0x7ff}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x7, @output={0x1000, 0x0, {0xfffffffd, 0x7}, 0xc8d, 0xb}}) 4m48.164936829s ago: executing program 3 (id=2042): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="8fcf", @ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = dup(r0) ioctl$KVM_CAP_PMU_CAPABILITY(r2, 0x4068aea3, &(0x7f0000000000)) (async) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006) 4m44.975985356s ago: executing program 3 (id=2052): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r0 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x2004e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0xb91c7a3e83baa4fa, 0x0, 0x0, 0x0, 0xb59, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4b23}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r6 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) shutdown(r4, 0x1) 4m41.627075218s ago: executing program 3 (id=2061): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000700)=@v2={0x3, 0x2, 0x9, 0xffffffff, 0xbb, "2010fb3a22ff46218d9d1b8f385dd2cd416428e10b91c5c2bbbe16bcfec4fc5b1bb96bac8850e41b4575e4c73c263afb50a4f6e6b87e858a02902f1fb2f66cf83bca61fbbe710d885688e5ea5e58ce48a2e7d3e8c9993c746af9bc373821b9ee1194d7aef62e6d6cb0a3c335a28b0de6c9ebee3923f579ea554f3063739c09b5a92952d56f8fddf404c5e2dd5a83188c384aaef34780cf72e8200d7ed985339fd2de040e55490e7a7472ae073787d1fd1d4e0aa0a5909042a913a6"}, 0xc4, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80141, 0x0) ftruncate(r4, 0x200004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 4m39.238589947s ago: executing program 3 (id=2065): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6f, &(0x7f0000000080)=ANY=[], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7079, 0x15000, 0x13, 0x288}, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) r3 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async) r5 = syz_open_dev$media(&(0x7f0000000080), 0xa, 0x141) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f00000003c0)={0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x5b, 0x0, &(0x7f00000016c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=ANY=[@ANYBLOB="04020000130a050000000000000000000000000708000340000000010900020073797a300000000009000100"], 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x24048084) 4m37.448944947s ago: executing program 3 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) inotify_init() setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000700)=@v2={0x3, 0x2, 0x9, 0xffffffff, 0xbb, "2010fb3a22ff46218d9d1b8f385dd2cd416428e10b91c5c2bbbe16bcfec4fc5b1bb96bac8850e41b4575e4c73c263afb50a4f6e6b87e858a02902f1fb2f66cf83bca61fbbe710d885688e5ea5e58ce48a2e7d3e8c9993c746af9bc373821b9ee1194d7aef62e6d6cb0a3c335a28b0de6c9ebee3923f579ea554f3063739c09b5a92952d56f8fddf404c5e2dd5a83188c384aaef34780cf72e8200d7ed985339fd2de040e55490e7a7472ae073787d1fd1d4e0aa0a5909042a913a6"}, 0xc4, 0x3) ftruncate(0xffffffffffffffff, 0x200004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r4, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 4m36.922125887s ago: executing program 3 (id=2074): rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000040)="c4e189f4adfeefffffc442f9337c8e5dc4c60166400fe2def3bd46c7045300101000f00fc02bc422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7ffffffe, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3d}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) io_setup(0x7e, &(0x7f0000000080)=0x0) io_submit(r11, 0x1, &(0x7f0000001d00)=[&(0x7f0000000100)={0x200000000000000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xeffdffffffffffff}]) 4m35.77934882s ago: executing program 34 (id=2074): rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000040)="c4e189f4adfeefffffc442f9337c8e5dc4c60166400fe2def3bd46c7045300101000f00fc02bc422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x7ffffffe, 0xea, 0x100004}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3d}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff01, 0xb7c56ad10922c48a, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), 0x0, 0x0) io_setup(0x7e, &(0x7f0000000080)=0x0) io_submit(r11, 0x1, &(0x7f0000001d00)=[&(0x7f0000000100)={0x200000000000000, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xeffdffffffffffff}]) 10.227450112s ago: executing program 7 (id=3001): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="a47973d657b6aaaaaaaaaaaa0000000000000800450000330068000000119078a00000020000000000004e22001f906c0400000000000000000000dfff0000"], 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x4, 0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x8, 0x1, 0x40000333}, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r6, 0x540b, 0xfffffffffffeffff) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) 9.940857969s ago: executing program 6 (id=3003): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async, rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 64) r2 = syz_io_uring_setup(0x6367, &(0x7f0000000340)={0x0, 0x47ea, 0x100, 0x1, 0x24a}, &(0x7f0000002680)=0x0, &(0x7f0000000040)=0x0) (rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x10, 0x4000, @fd=r0, 0xfffffffffffff616, 0x0, 0x0, 0x2, 0x1, {0x1}}) (async) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}}) (async) syz_usb_connect(0x2, 0x51, &(0x7f0000001c40)=ANY=[@ANYBLOB="12010000875ac908651918004dd90102030109023f00010700a00c09046d040503a44302099a759ecb0006070a09050c00400005067f0905030b00020005060905020000020e7f05090508"], 0x0) 9.34813119s ago: executing program 6 (id=3006): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, 0x0, &(0x7f0000ffe000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = semget(0x1, 0x4, 0x39c) semop(r3, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r3, &(0x7f00000001c0)=[{0x1, 0x9}, {0x3, 0xffff, 0x1000}], 0x2a8c) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x6, 0xe1e, 0x1, 0x70310, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x5}, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18, r6}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r8 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000002c0)='test_dummy_e\x8b\xde\x1f\xd3\xb9\xd5Q\xd8n', &(0x7f00000004c0)='vto_d\x02\x00\x00\x00\x00\x00\x00\x00\xe9\x82\xc5 \x99\x86\x13\x8boLC}\x9b0Pj\xa6-\x17*\x9a\xc3\xf3\xb9\x16R\x8c\xe7\x11\xda\x1a\xa3\'C3\x00\x16\xb5\x92\xb6\xadv\x86\xd1\x86Z\x7fx\xa2\xa8\xfb\x04zN\xd8\x9f^\xf3\x10Z/E\xce\xe3c\xb0g\x8a\xcc\xd2\xb3\x8a\xad\x98va\x00\x00\x00\x00\x00\x00\x00\x00\x82($~d\xce\xcf*\'|AY#\xd6z\x12\xa0\xfd2fGw\xe3I\xf2\x8d\xaak\xa3\x97\n\x1a\xcd:u.Z\x12\x1b\xc9\xbbt\xac\xe4\x98]2\xb2\xe0\xec\x1a\xbdC7B, \xc9\xc8\xb0\f}\xc9\xcd\x00\x9c\x81\xbe\xfa\xe2\xe7C{)\x04\x9e56\xc6p(\xd5A\xfa\xa4\xdbD$\xc7\xef\x1dQ\xd7\xbc\xd8\x94\xb6\xc5\x15g\x87&8\xc87\xc5\xabX\xf0\x98XOu\x1e\xe1\xb9UA\xe2\xceV2o/=\xf18\xc9\x17\xcd\x1c\xb9sF\xde\'F\xc4\xa1y\"\xe0\xae\xca\x7fZ\xe9\xd4`*\xdcl\xa7\x16\x99\x9b\xe7hGf\x03\xaa\xa5j\xef\x14\xcb\x10c\xd42f\xc9\xe4?vs\x9e\xc3\xae&\x06fYF9', 0x0) 8.008859239s ago: executing program 7 (id=3012): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x20, 0x1405, 0x131, 0x0, 0x0, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x20}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, &(0x7f0000005d40)=[{{&(0x7f0000000600)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x10}}], 0x1, 0x400c0) sendfile(r5, r4, 0x0, 0x20000023893) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x6, 0x1, @vifc_lcl_addr=@broadcast, @broadcast}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.701381388s ago: executing program 7 (id=3015): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000300)={0xfff, 0x6, 0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x100004, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x8, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc}) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af60, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) write$sndseq(r7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc001, 0x0, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) syz_usb_connect(0x0, 0xe6, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003cb63b206d04b00827e5010203010902d400010000000009040400025a82e500052406000105240001000d240f01060000006e0040000406241a001214052415b4a97a04"], 0x0) 5.639855959s ago: executing program 4 (id=3016): r0 = socket$pptp(0x18, 0x1, 0x2) recvmsg(r0, &(0x7f00000012c0)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/156, 0x9c}], 0x3, &(0x7f00000011c0)=""/238, 0xee}, 0x21) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001300)="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", 0x1000) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000002300)=@fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x64}, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000002340)={0x2, 0x4e20, @multicast1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000002380)={0x7fff, 0xffffffff, 0xffffff9c, 0x0, 0x2}, 0x14) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000023c0)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x5c, r4, 0x24, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) r5 = request_key(&(0x7f0000002580)='ceph\x00', &(0x7f00000025c0)={'syz', 0x2}, &(0x7f0000002600)='netdevsim', 0xfffffffffffffff9) keyctl$read(0xb, r5, &(0x7f0000002640)=""/55, 0x37) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000002680)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000026c0)={0x28, 0x1, r6, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002740), r3) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, r7, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000002840)={0x8, {{0xa, 0x4e21, 0x9, @mcast1, 0x1}}, 0x3, 0x2, [{{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {{0xa, 0x4e24, 0x10001, @mcast1, 0x7}}]}, 0x190) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000002a00)=@assoc_value={0x0, 0x2}, 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002d00)={&(0x7f0000002a40)="ada7177461a350198cff01ebb384f521370a7676ce44973a952033a04a547785758dab8adc4b259e39493fc2928c27321caa58bfa88084aaea380c9e95bb4163176905d5fda7368e4bce46f5e46c76e73cdbb80a4bbf5ecf05316ad408a0773d26771325ddde757e958970a622bfbaf6ea298008e48bb483e4b0332cabfe20e38c074dd49979eb5d5f33a29d9732c65d6ba369b30e261083ddc993622730bb40b2752b06211754731cc95a24d1f16900f5fb776f2f821c4cfb21", &(0x7f0000002b00)=""/182, &(0x7f0000002bc0)="23e9a335353dd174c75455aa1ecb8822162565", &(0x7f0000002c00)="fe860f2d4e5ff889a74f19c64b51081837df1effbfdd04ef5a9c2ca75174d8a9fdccdf6013b8e36986345b6060a14df2af76dc77cb82605a23d7cc18177c4cc3dca8e82195004b8a00138cde47c9eb1f90ef3fab134779ed8bd72850d75c6335", 0x8, r8, 0x4}, 0x38) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002d80)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000002dc0)={0x48, 0x2, r6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)=@getrule={0x14, 0x22, 0x800, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}}, 0x840) recvmsg(r2, &(0x7f00000041c0)={&(0x7f0000002f40)=@xdp, 0x80, &(0x7f0000004180)=[{&(0x7f0000002fc0)=""/176, 0xb0}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/154, 0x9a}, {&(0x7f0000004140)=""/59, 0x3b}], 0x4}, 0x0) rt_sigtimedwait(&(0x7f0000004200), 0x0, &(0x7f0000004280), 0x8) 4.947439432s ago: executing program 6 (id=3018): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20122705100000050100f4"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.84028129s ago: executing program 1 (id=3019): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000cc0)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001e80)={0x800, 0x10}) r1 = syz_open_dev$video4linux(&(0x7f0000000280), 0x400000003, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x0, {0x0, 0x2, 0x4, 0xc09}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000020a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f"], 0xe8}}, 0x8040) 4.822840804s ago: executing program 1 (id=3020): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect$uac1(0x6, 0xa9, &(0x7f0000000140)=ANY=[@ANYBLOB="ecc6dd9b15579db2b81fedbaccc03d1a2d0d9f904693508556d99b12f35a8b0bf5a5a7f5a9a8d047d54c27dd87b645beadfc04c507bf98520b842a4655cb7540e0a15c3b5130ae0b989500fd65a888ebafd37330ff5456cb75c40ef404c0bcf1e58902ee258061dbdbfe6e19822f4a35a489c12da6e8e7a2280d28efc727a76ba61f1a6bd36195295f82f52614a252de72775e277c1a9269928600cc3db08aef8d94fc72e97e6930b4477ac705af046f6e1f1f54de1dd665bfc30885ee3d30a16788e918d4c1eec027f697a01fdceedd8ad32094e518451e43054128"], 0x0) 4.555280873s ago: executing program 2 (id=3021): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x8, 0x409, 0x2, 0x8, 0x2d}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 4.480110876s ago: executing program 4 (id=3022): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="a47973d657b6aaaaaaaaaaaa0000000000000800450000330068000000119078a00000020000000000004e22001f906c0400000000000000000000dfff0000"], 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) ftruncate(r4, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000100)=0x4, 0x4) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x8, 0x1, 0x40000333}, &(0x7f0000000240), &(0x7f00000001c0)) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r6, 0x540b, 0xfffffffffffeffff) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$dsp(r7, &(0x7f0000000200)='m', 0x1) 4.412401269s ago: executing program 2 (id=3023): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'gretap0\x00', r1, 0x8, 0x8, 0x7, 0xc, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x64, 0x0, 0x9, 0x29, 0x0, @broadcast, @local, {[@end]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xbb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46}, 0x80) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000740)={0x8, {0x0, 0xfffffff9, 0x6, 0x9c}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009e173610ef171e7206070002030109022a00010000000009040000db09", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=r0], 0x0) close(0x3) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000040)={0x8000003, 0x8, 0x1}) syz_usb_connect(0x6, 0x2d, &(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x0) 4.257345821s ago: executing program 1 (id=3024): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x218040, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) modify_ldt$write(0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310325bd7000fadbdf250b00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4000000) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000580)={@mcast1, 0x19, r3}) r4 = socket(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r11, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c00, 0x5d, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="080100000046ff2e89a1fa6500000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x804) r12 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_crypto(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=@getstat={0xe0, 0x15, 0x1, 0x70bd2d, 0x25dfdbfd, {{'cbc(camellia)\x00'}, '\x00', '\x00', 0x200, 0x4400}, ["", "", "", ""]}, 0xe0}}, 0x10) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x1003}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x8, 0x409, 0x2, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 4.06825287s ago: executing program 1 (id=3025): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.511812862s ago: executing program 7 (id=3026): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) read(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r3 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f00000000c0)=0x1000007, 0x4) (async) sendmmsg$inet(r4, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000100000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c000000000000000000000008000000", @ANYRES32], 0x50}}], 0x1, 0x0) fstatfs(r3, &(0x7f00000003c0)=""/146) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000001780)={0x0, 0x1, 0x5}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f00000000c0)=""/111) (async) syz_usb_connect$uac1(0x0, 0x9c, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xf, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x6}, [@feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x8, 0x8, 0x1, 0x0, 0xa, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xfd, 0x1, 0xff, 0xad}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x2, 0x3d}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0xb0, 0x5, {0x7, 0x25, 0x1, 0x2, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x9, 0x4, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x40, 0xfb, {0x7, 0x25, 0x1, 0x0, 0xed, 0x1}}}}}}}]}}, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000000), 0x0, 0x4, 0x0, 0x2}]) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) (async) r8 = syz_io_uring_setup(0x3, &(0x7f0000000140)={0x0, 0x8b0, 0x2, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440), 0x1) signalfd4(r7, &(0x7f0000000080)={[0x6]}, 0x8, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) 3.053399158s ago: executing program 6 (id=3027): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) mkdir(0x0, 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000700)=@v2={0x3, 0x2, 0x9, 0xffffffff, 0xbb, "2010fb3a22ff46218d9d1b8f385dd2cd416428e10b91c5c2bbbe16bcfec4fc5b1bb96bac8850e41b4575e4c73c263afb50a4f6e6b87e858a02902f1fb2f66cf83bca61fbbe710d885688e5ea5e58ce48a2e7d3e8c9993c746af9bc373821b9ee1194d7aef62e6d6cb0a3c335a28b0de6c9ebee3923f579ea554f3063739c09b5a92952d56f8fddf404c5e2dd5a83188c384aaef34780cf72e8200d7ed985339fd2de040e55490e7a7472ae073787d1fd1d4e0aa0a5909042a913a6"}, 0xc4, 0x3) ftruncate(0xffffffffffffffff, 0x200004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) 3.051567087s ago: executing program 4 (id=3028): bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000000c0)=0x10, 0x4) shutdown(0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) sendto$inet(r3, &(0x7f0000002140)="d2", 0x1, 0x4040100, &(0x7f0000000140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000100)=ANY=[@ANYRES32=r5], 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5}, &(0x7f0000000140)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) ioctl$DRM_IOCTL_GET_MAP(r7, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil}) fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x1, 0x0, 0x8, 0x4006}) fcntl$lock(r6, 0x24, &(0x7f0000000100)={0x1, 0x1, 0x2, 0x47fff800000000}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x2f, {0x2f, 0x23, "ff7dbd0b342790b332d8c143e8b52873d5c7f9fcd26fce9651dc18e8c5389e527f8c6b82705d1d35606f2230b0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) unshare(0x6020400) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x2000000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.907482615s ago: executing program 2 (id=3029): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0xfff7, 0x28, 0xe4d, 0x2053, 0x7ff, 0x0, 0x7, 0x1, 0x800, 0x40d0, 0x7, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_usbip_server_init(0x4) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0x4, 0xb, 0x3, 0x13, 0x5, 0x70, 0x0, 0x2, 0xb, 0x0, 0x1, 0x5, 0xce, '\x00', 0x4, 0x4}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xaa}]}}]}, 0x68}}, 0x4000010) syz_usb_connect(0x3, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0xc6, 0x91, 0x9f, 0x40, 0x174f, 0x5212, 0x6041, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5b, 0x3, 0x1, 0xe, 0x1, 0x0, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x7}}], [{{0x9, 0x5, 0x5, 0xf, 0x400, 0xc, 0x5, 0x83}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.663663421s ago: executing program 1 (id=3030): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0xf, 0x13, {0x13, 0xa, "889db9667168343b80e3d97aa87e4a26bf"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000080)={0x0, 0x22, 0x9, {[@local=@item_4={0x3, 0x2, 0xa, "16861b52"}, @global=@item_012={0x2, 0x1, 0x4, "c3e0"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x47, 0x9, 0x1, {0x22, 0x876}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x82, "b96a60e19817fc4495a6d689f507433a8a7ab357390d846fd5795da63360b3acbd8623d7187f0fc3109f28ed1ec87b647f39d90b1cbafb8a07c8d35aecb6f8bddff887362ad2d73ecd1a7bcbcc0a4178fb5744e92a90b497285226f3b1a9fb03f1a8e7a63274c8598a0ebedc0901b3d4807de8cc59f969fd08376e6bb32906a92787"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000002c0)={0x20, 0x1, 0x75, "c48876827768ebd83b2955ed93d54028822885f2b20b3eb954a005a8549e15025c5a3b0901ad421a32336c336d27f511e52147f83a948a206e7a81290ed8fcbc1768e9e5c01e8919e29a058833a68f1b2d1909e9355c31ed5feb08dfcc322d82de120abf5c1fd8e8f155cdc14a905798e59fefe18e"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xbe}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0xf, 0x13, {0x13, 0xa, "889db9667168343b80e3d97aa87e4a26bf"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000080)={0x0, 0x22, 0x9, {[@local=@item_4={0x3, 0x2, 0xa, "16861b52"}, @global=@item_012={0x2, 0x1, 0x4, "c3e0"}, @global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x47, 0x9, 0x1, {0x22, 0x876}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x11, 0x82, "b96a60e19817fc4495a6d689f507433a8a7ab357390d846fd5795da63360b3acbd8623d7187f0fc3109f28ed1ec87b647f39d90b1cbafb8a07c8d35aecb6f8bddff887362ad2d73ecd1a7bcbcc0a4178fb5744e92a90b497285226f3b1a9fb03f1a8e7a63274c8598a0ebedc0901b3d4807de8cc59f969fd08376e6bb32906a92787"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xa}, &(0x7f00000002c0)={0x20, 0x1, 0x75, "c48876827768ebd83b2955ed93d54028822885f2b20b3eb954a005a8549e15025c5a3b0901ad421a32336c336d27f511e52147f83a948a206e7a81290ed8fcbc1768e9e5c01e8919e29a058833a68f1b2d1909e9355c31ed5feb08dfcc322d82de120abf5c1fd8e8f155cdc14a905798e59fefe18e"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xbe}}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000940)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="001410"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) 1.404220285s ago: executing program 6 (id=3031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1, 0xbf27}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}]}, 0x5c}}, 0x20000084) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x1000, 0x7ff, &(0x7f00000002c0)) getgroups(0x7, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) getgroups(0x2, &(0x7f0000000400)=[0xee00, 0xffffffffffffffff]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r3 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r3], 0xfc, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x800, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x2000003, 0x3, 0x6, 0x0, 0x1ff, 0x3, {0x6, 0x4, 0x7, 0x5, 0x100000001, 0x6, 0x3, 0x0, 0x101, 0x6000, 0x5, 0x0, r3, 0x801, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) getegid() getgroups(0x3, &(0x7f0000000540)=[0xee01, 0xee00, 0xee00]) 1.115961551s ago: executing program 4 (id=3032): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000000)=[@wrmsr={0x1e, 0x20, {0x2c5, 0xfff}}, @out_dx={0xaa, 0x28, {0xbafb, 0x2, 0xa0ba}}, @wrmsr={0x1e, 0x20, {0xbc1, 0x3}}, @in_dx={0x82, 0x20, {0x9b50}}, @wr_crn={0x46, 0x20, {0x8, 0x1ff}}, @code={0xa, 0x6b, {"363e0fe032460f080f56a0fd7f00002e400f1ca7d6d15ccb460f08470fc7bb0a000000b9a00a0000b803000000ba000000000f3048b88f540000000000000f23c80f21f835080060000f23f80fc73568000000c4e2f9357c1d5e"}}, @wr_crn={0x46, 0x20, {0x3, 0x40}}, @wrmsr={0x1e, 0x20, {0x3f2, 0x9}}, @in_dx={0x82, 0x20, {0x787c, 0x2}}, @wr_drn={0x6e, 0x20, {0x2, 0x6dd}}, @rdmsr={0x32, 0x18, {0x233}}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @cpuid={0x14, 0x18, {0x84f9, 0x5}}, @wr_crn={0x46, 0x20, {0x4, 0x10000}}, @code={0xa, 0x71, {"66b859008ed00f20c035200000000f22c066baf80cb85c27f181ef66bafc0cb800800000ef0f01bbb22f0000670f35f30fc7b41001000000f3420f229cb913000000b800080000ba000000000f30b805000000b9f8e800000f01c1c461fd1022"}}, @code={0xa, 0x71, {"36f2460f5daea7f8303a450f00933a420c1e67430f6aa800000000470f01c48fa868a3675f2bb8010000000f01d9460f787c6a05b805000000b9003800000f01d9c744240064700000c744240207000000c7442406000000000f011424450f35"}}], 0x2e5}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000ac3", @ANYRES32=r1, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c0002"], 0x15c}}, 0x0) (async) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000340)={0x1000, 0x7829}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r3) (async) bind$packet(r3, &(0x7f0000000080)={0x11, 0x808, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0x9, 0xc, 0x3, 0x9}, {0xfd7, 0x81, 0x6, 0x6}, {0x4, 0xb, 0xde, 0x33a}, {0x7, 0xf4, 0x1f, 0x7}, {0xc, 0xb1, 0x2}, {0x2, 0x6, 0xfe, 0xffff0001}]}) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0x0, &(0x7f0000002000)) 1.104837488s ago: executing program 4 (id=3033): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xb}, {0x4}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x8, 0x409, 0x2, 0x8, 0x2f}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) 1.052174402s ago: executing program 4 (id=3034): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a01020000000000000000010000000900030073797a32000000000900010073797a3100000000040004802c000000050a01020000000000000000010000000c000240000000000000000109000100737905310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000a"], 0xac}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000002400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x7, 0x1, 0x6, 0x86, 0x2, 0x0, 0x6, 0x4, 0x2, 0x4, 0x8, 0xd2, 0x1, 0x5}, 0xe) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x848, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x818, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe9}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x40080, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x2, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x7ff, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x1, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffffc, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xfe, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0xffff, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0x7, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x7, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x7, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x100008, 0xd675, 0xf, 0x8, 0x8001, 0x20fff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x1, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x81, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0x7, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x848}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 967.743576ms ago: executing program 2 (id=3035): r0 = socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0xc6bf38ef30c90122, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000029c0)="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", 0x1000}, {&(0x7f0000000600)="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", 0xfe}, {&(0x7f0000000700)="3abe56f06103f9519ec367ab44718253ac532f430b13c5a6fa1d5df2e34885ca422050cf1c5c7db34fa63c3a7652bc93be2baa61b1cff15ae547a2606a68808c12120a1fa24b121e2ecd9dd18e95ce752f5982aec9e02987ebe504498923cc603e1d6713a0406bd9118c55311bb98444cb5dd23516fde614256ea56d866d0f0d65411a036c198c9d607256c3bb5ea9751504eb440264b8a705645ac727f4c1cbe9a1010ea4b2cb621bd830d6fb7d56bcca28af07c5f015", 0xb7}, {&(0x7f0000000440)="efeeace0a0318975d2c88126f43f71001f7fbb6d92420cc5a220d23e6821192a4f104bc5ec9e9c54b5dcbeed2233ebe0f9da2434c80013de1e7bf8c61b3ca7ce5eebb5feb0314d7434c47db2", 0x4c}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="0604000000000000c005a8b14d7ed160", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40020c0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$TCSETS(r3, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(r3, 0x42) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff03e}, {&(0x7f0000001440)=""/76, 0x20000253}], 0x2}, 0x1) socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1991e3f1ff2f9a31, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x21, 0x3, 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0xb}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) r10 = socket$kcm(0x2, 0x6, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @local}) 681.823949ms ago: executing program 2 (id=3036): r0 = socket(0x1e, 0x6, 0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x0, 0x1, 0x20000000, 0x8000000000001, 0xfffffffd, 0x0, {0x6, 0xfffffffffffffffc, 0x7, 0x7, 0x8, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, r3, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x4, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffa, 0x80000000000, 0x80000000004, 0x400000000003, 0xe, 0x0, 0x2, 0x1, 0x4000, 0x4000000, r3, r4, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r5, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x40040c1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x005'], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 439.630571ms ago: executing program 2 (id=3037): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x6dde, &(0x7f00000002c0)={0x0, 0xd612, 0x1, 0x0, 0x28b}) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x16, 0x1, 0x2, "f0d20486605373128be76d09d6c183ec8853d4759db58e9dbcce89fd1aab1ad4", 0x47504a50}) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x741) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000004c0)={0x400, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/89, 0x59}, {&(0x7f00000003c0)=""/84, 0x54}], &(0x7f0000000480)=[0x100, 0x8, 0x8], 0x2}, 0x20) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x3, 0xff, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="587ff8", 0x0, 0x0, 0x1002c, 0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x1, 0x1) pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r7 = getpid() kcmp(r7, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) get_robust_list(r7, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000040), 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f0000000200)=0x18) 381.775269ms ago: executing program 6 (id=3038): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x6, 0x0, 0x8, 0x46080, 0xffffffffffffffff}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) close_range(r1, r2, 0x2) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000d40)={0x34, &(0x7f0000000bc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 377.038447ms ago: executing program 7 (id=3039): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002e000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) (async) sendmmsg(r1, &(0x7f0000009dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x10}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x3502, 0x0, 0x2}]}]}, 0xfc}}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0xa}, 0xfffffffd}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x3502, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xe891}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x40, 0x0, 0x7ffffffe}]}) r7 = dup(r6) ioctl$VHOST_SET_FEATURES(r7, 0x40082103, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x72bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x823}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}]}}}]}, 0x48}}, 0x24000800) (async) r9 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r9, 0xc0287c02, &(0x7f0000000200)={0x80000000, &(0x7f0000000040), &(0x7f0000000180)}) 155.862055ms ago: executing program 7 (id=3040): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8000000, 0x5, 0x6, 0x100, 0x0, [{0x8, 0xb, 0xb, '\x00', 0x9}, {0x1, 0x1, 0x1, '\x00', 0x7}, {0x8, 0x5, 0x0, '\x00', 0x10}, {0x6, 0x9, 0x9, '\x00', 0x5}, {0x5, 0x5, 0x2, '\x00', 0xb6}, {0x3e, 0x2c, 0x6, '\x00', 0x1}, {0x1, 0x5, 0xc, '\x00', 0x77}, {0x74, 0x7, 0x4, '\x00', 0xe}, {0xfc, 0xb, 0x40}, {0x3, 0x0, 0x4, '\x00', 0x7}, {0x7, 0xa, 0x5, '\x00', 0x3}, {0x5, 0x6, 0x8, '\x00', 0x40}, {0x2, 0xd, 0x7, '\x00', 0x40}, {0x7, 0x7, 0x5, '\x00', 0x2}, {0xfe, 0xd0, 0xfa, '\x00', 0x2}, {0x2, 0x9, 0x3, '\x00', 0x5}, {0xa, 0xf, 0x7, '\x00', 0x4}, {0xe, 0x1, 0x67}, {0x7, 0x3, 0x6, '\x00', 0x4}, {0x8, 0xff, 0x4, '\x00', 0xd1}, {0x2, 0x7, 0x1, '\x00', 0x5}, {0x4, 0x1, 0x5, '\x00', 0xe5}, {0x5, 0x85, 0xc, '\x00', 0x1}, {0x3, 0xf7, 0x9, '\x00', 0x6b}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x5, 0xc}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3041): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) dup(r3) mkdir(0x0, 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f00000001c0), &(0x7f0000000700)=@v2={0x3, 0x2, 0x9, 0xffffffff, 0xbb, "2010fb3a22ff46218d9d1b8f385dd2cd416428e10b91c5c2bbbe16bcfec4fc5b1bb96bac8850e41b4575e4c73c263afb50a4f6e6b87e858a02902f1fb2f66cf83bca61fbbe710d885688e5ea5e58ce48a2e7d3e8c9993c746af9bc373821b9ee1194d7aef62e6d6cb0a3c335a28b0de6c9ebee3923f579ea554f3063739c09b5a92952d56f8fddf404c5e2dd5a83188c384aaef34780cf72e8200d7ed985339fd2de040e55490e7a7472ae073787d1fd1d4e0aa0a5909042a913a6"}, 0xc4, 0x3) ftruncate(0xffffffffffffffff, 0x200004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): 4.555107][ T5839] usb 2-1: can't read configurations, error -61 [ 894.718855][T12443] usb 5-1: Using ep0 maxpacket: 16 [ 894.726151][ T5839] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 894.729105][T12443] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 894.749154][T12443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.757653][T12443] usb 5-1: Product: syz [ 894.761889][T12443] usb 5-1: Manufacturer: syz [ 894.766508][T12443] usb 5-1: SerialNumber: syz [ 894.788453][ T5839] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 894.796658][ T5839] usb 2-1: can't read configurations, error -61 [ 894.811058][ T5839] usb usb2-port1: unable to enumerate USB device [ 895.519214][ T5839] usb 7-1: USB disconnect, device number 116 [ 895.621209][T12443] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 895.700021][T12443] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 895.732299][T12443] usb 5-1: USB disconnect, device number 52 [ 895.796709][T12383] udevd[12383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.447706][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 896.498212][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2596'. [ 897.489262][ T43] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 897.664829][ T43] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 897.678099][ T43] usb 3-1: config 0 has an invalid interface number: 248 but max is 3 [ 897.695789][ T43] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 897.768650][ T43] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 897.825828][ T43] usb 3-1: config 0 has no interface number 1 [ 897.847926][ T43] usb 3-1: config 0 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 897.911616][ T43] usb 3-1: config 0 interface 0 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 897.931779][ T43] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 897.945337][ T43] usb 3-1: config 0 interface 0 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 897.956406][ T43] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 898.062024][ T43] usb 3-1: config 0 interface 0 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 898.129147][ T43] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 898.178704][ T43] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 898.214506][T16914] input: syz0 as /devices/virtual/input/input70 [ 898.231136][T16914] batadv0: entered promiscuous mode [ 898.335325][ T43] usb 3-1: config 0 interface 0 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 898.419103][ T5924] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 898.470557][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 898.470575][ T30] audit: type=1326 audit(1759398006.174:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 898.499971][ T43] usb 3-1: config 0 interface 0 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 898.516383][ T43] usb 3-1: config 0 interface 0 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 898.529508][ T43] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x9 has invalid maxpacket 446, setting to 64 [ 898.547671][ T30] audit: type=1326 audit(1759398006.174:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 898.570764][ T43] usb 3-1: config 0 interface 248 altsetting 255 has a duplicate endpoint with address 0x4, skipping [ 898.582070][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 898.601780][ T30] audit: type=1326 audit(1759398006.174:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 898.624241][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.646768][ T43] usb 3-1: config 0 interface 248 has no altsetting 0 [ 898.679158][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 898.694644][ T5924] usb 2-1: unable to get BOS descriptor or descriptor too short [ 898.708681][ T43] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=50.2a [ 898.727463][ T5924] usb 2-1: config 4 interface 0 has no altsetting 0 [ 898.729061][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.768477][ T5924] usb 2-1: string descriptor 0 read error: -22 [ 898.814674][ T5924] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 898.815591][ T43] usb 3-1: Product: ᐃ [ 898.848876][ T30] audit: type=1326 audit(1759398006.174:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 898.892414][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.922305][ T43] usb 3-1: Manufacturer: 昊﫮㺄榸Ꟊ爩ꌆ赽꣙⬆ᗨ凿쑝䀢ꘫ䅿踕鋿✠橢ଥ叕屾髈㻓ⲭ掣쀼ᤇ钇伕ṇ쇜䗐ᔞ [ 898.956427][ T5924] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 898.964396][ T30] audit: type=1326 audit(1759398006.174:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 898.992661][ T43] usb 3-1: SerialNumber: ݯ姉ꪒ㥻礣┰昂駜鞵랹ዑ鯐扉ꋘ﹘拒斔杒䂚鈵藴瞖욾Ⱐ買躯볱疴꧝섿풦懁纚걵ꩌ湽ꇄﹳ莂莟풝⧵ꃵ埵ㄢ윑蘓狵◣︣脲ꉊ按꜈쬗튍ᾗƙᑻ堡䂮欄펋샫⢈䫋谰㘨쩘쁂偀斓꼡轣䧢豛꺔乀칖脇갾䴺⒥鼺㏹낡躻䀐 [ 899.023573][ C1] vkms_vblank_simulate: vblank timer overrun [ 899.050440][ T5924] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 899.088584][ T5924] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 899.104530][ T30] audit: type=1326 audit(1759398006.184:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12fb8d710 code=0x7ffc0000 [ 899.147760][ T5924] usb 2-1: media controller created [ 899.166559][ T43] usb 3-1: config 0 descriptor?? [ 899.248628][T16884] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 899.263123][ T30] audit: type=1326 audit(1759398006.184:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 899.348621][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.378866][ T30] audit: type=1326 audit(1759398006.184:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12fb8d710 code=0x7ffc0000 [ 899.463863][ T5924] zl10353_read_register: readreg error (reg=127, ret==0) [ 899.487879][ T30] audit: type=1326 audit(1759398006.184:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 899.571328][ T30] audit: type=1326 audit(1759398006.184:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16913 comm="syz.4.2609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb12fb8eec9 code=0x7ffc0000 [ 899.639913][ T5924] usb 2-1: USB disconnect, device number 70 [ 899.651341][T16934] netlink: 136 bytes leftover after parsing attributes in process `syz.7.2615'. [ 899.721186][T16934] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 899.778662][ T43] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 899.874583][ T43] usb 3-1: USB disconnect, device number 27 [ 899.949277][T12383] udevd[12383]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.068898][ T5924] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 900.238830][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 900.259212][ T5924] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 900.270455][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.285875][ T5924] usb 2-1: config 0 descriptor?? [ 900.306034][ T5924] usblcd 2-1:0.0: USBLCD model not supported. [ 900.688895][ T43] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 901.065338][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 901.116938][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 901.147912][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 901.193674][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.227319][T16957] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 901.239275][T16962] kvm: pic: level sensitive irq not supported [ 901.239327][T16962] kvm: pic: non byte read [ 901.253709][T16962] kvm: pic: level sensitive irq not supported [ 901.253776][T16962] kvm: pic: non byte read [ 901.264877][T16962] kvm: pic: level sensitive irq not supported [ 901.264944][T16962] kvm: pic: non byte read [ 901.271318][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 901.309979][T16962] kvm: pic: level sensitive irq not supported [ 901.310054][T16962] kvm: pic: non byte read [ 901.376801][ T977] usb 2-1: USB disconnect, device number 71 [ 901.481312][ T43] usb 7-1: USB disconnect, device number 117 [ 901.978992][ T43] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 902.342281][ T43] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 902.354536][ T43] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 902.364805][ T43] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 902.469114][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.486080][T16957] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 902.559353][T16987] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2627'. [ 902.607325][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.274261][T16995] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 903.328730][T16995] block device autoloading is deprecated and will be removed. [ 903.496889][ T5924] usb 7-1: USB disconnect, device number 118 [ 903.754492][T17002] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 903.765553][T17002] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 904.041760][T12443] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 904.049090][T17005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2632'. [ 904.261706][T12443] usb 2-1: unable to get BOS descriptor or descriptor too short [ 904.300609][T12443] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 212, changing to 7 [ 904.335077][T12443] usb 2-1: config 1 interface 1 has no altsetting 0 [ 904.364824][T12443] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.374423][T12443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.430875][T12443] usb 2-1: Product: syz [ 904.435068][T12443] usb 2-1: Manufacturer: syz [ 904.699189][T12443] usb 2-1: SerialNumber: syz [ 904.966971][T17017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.248983][ T43] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 905.495159][T17022] tipc: Started in network mode [ 905.509133][T17022] tipc: Node identity bef38f45d55b, cluster identity 4711 [ 905.538271][T17022] tipc: Enabled bearer , priority 0 [ 905.566301][T17023] syzkaller0: entered promiscuous mode [ 905.578956][T17023] syzkaller0: entered allmulticast mode [ 905.608032][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.712828][ T43] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 905.738579][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 905.751517][T17022] tipc: Resetting bearer [ 905.783178][T17021] tipc: Resetting bearer [ 905.806194][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.878726][T17021] tipc: Disabling bearer [ 906.762283][T12443] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 906.850099][T12443] usb 2-1: USB disconnect, device number 72 [ 907.063408][T17040] netlink: 'syz.2.2640': attribute type 3 has an invalid length. [ 907.103670][T17040] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2640'. [ 907.107269][T12383] udevd[12383]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.408957][T12443] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 907.570499][T12443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.596186][T12443] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.673368][T12443] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 907.686463][T12443] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 907.859233][T12443] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.241151][T12443] usb 2-1: config 0 descriptor?? [ 908.255675][ T977] usb 5-1: USB disconnect, device number 53 [ 908.453526][T12443] plantronics 0003:047F:FFFF.003C: invalid report_count 33010 [ 908.506419][T12443] plantronics 0003:047F:FFFF.003C: item 0 4 1 9 parsing failed [ 908.515134][T12443] plantronics 0003:047F:FFFF.003C: parse failed [ 908.521902][T12443] plantronics 0003:047F:FFFF.003C: probe with driver plantronics failed with error -22 [ 908.655538][T12443] usb 2-1: USB disconnect, device number 73 [ 909.088182][T17072] fuse: Bad value for 'group_id' [ 909.095030][T17072] fuse: Bad value for 'group_id' [ 909.189395][T12443] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 909.499163][T12443] usb 5-1: Using ep0 maxpacket: 8 [ 909.506147][T12443] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 909.559667][T12443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.600449][T12443] usb 5-1: config 0 has no interface number 0 [ 909.712265][T12443] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 909.724968][T12443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.733432][T12443] usb 5-1: Product: syz [ 909.737591][T12443] usb 5-1: Manufacturer: syz [ 909.746021][T12443] usb 5-1: SerialNumber: syz [ 909.765671][T12443] usb 5-1: config 0 descriptor?? [ 909.980284][T12443] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 910.028380][T12443] usb 5-1: No valid video chain found. [ 910.254053][T17068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.263145][T17068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.382167][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 910.382185][ T30] audit: type=1326 audit(1759398018.104:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.1.2652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x0 [ 910.674784][ T977] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 910.868373][T12443] usb 5-1: USB disconnect, device number 54 [ 911.198878][ T977] usb 7-1: Using ep0 maxpacket: 32 [ 911.208194][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.227985][ T977] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.264905][ T977] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 911.295279][ T977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.328995][ T977] usb 7-1: config 0 descriptor?? [ 911.355675][ T977] hub 7-1:0.0: bad descriptor, ignoring hub [ 911.370306][ T977] hub 7-1:0.0: probe with driver hub failed with error -5 [ 911.401695][ T977] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 911.793197][T17111] fuse: Unknown parameter 'f0x0000000000000004' [ 912.059096][ T977] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 912.221011][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.231576][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.243179][ T977] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 912.253111][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 912.263813][ T977] usb 5-1: SerialNumber: syz [ 912.495482][ T977] usb 5-1: 0:2 : does not exist [ 912.524563][ T977] usb 5-1: unit 5: unexpected type 0x0b [ 912.556080][ T977] usb 5-1: USB disconnect, device number 55 [ 912.615403][T12383] udevd[12383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 913.209734][ T977] IPVS: starting estimator thread 0... [ 913.219278][ T10] usb 7-1: USB disconnect, device number 119 [ 913.488919][T17164] IPVS: using max 49 ests per chain, 117600 per kthread [ 914.141661][T17173] ip6gre1: entered allmulticast mode [ 914.337084][T17179] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 914.463887][T17180] kvm: kvm [17169]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 914.588486][T17180] kvm: kvm [17169]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 914.630645][T17185] netlink: 139 bytes leftover after parsing attributes in process `syz.4.2672'. [ 914.769354][ T10] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 914.867170][T17187] could not allocate digest TFM handle sha256-avx [ 914.979172][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 914.988364][ T10] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 914.997863][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 915.006794][ T10] usb 7-1: Product: syz [ 915.011453][ T10] usb 7-1: Manufacturer: syz [ 915.026287][ T10] usb 7-1: SerialNumber: syz [ 915.036330][ T10] usb 7-1: config 0 descriptor?? [ 916.354334][ T977] usb 7-1: USB disconnect, device number 120 [ 917.708921][ T977] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 917.772255][T17217] netlink: 'syz.6.2682': attribute type 5 has an invalid length. [ 917.858933][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 917.865932][ T977] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 917.874453][ T977] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.899894][ T977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 917.938339][ T977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 917.958698][ T977] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.992263][ T977] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 918.001854][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.215540][ T977] usb 2-1: GET_CAPABILITIES returned 0 [ 918.221362][ T977] usbtmc 2-1:16.0: can't read capabilities [ 918.229052][ T43] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 918.379386][ T43] usb 5-1: device descriptor read/64, error -71 [ 918.435366][ T10] usb 2-1: USB disconnect, device number 74 [ 918.619206][ T43] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 918.774283][ T43] usb 5-1: device descriptor read/64, error -71 [ 918.979576][ T43] usb usb5-port1: attempt power cycle [ 919.329092][ T43] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 919.383420][ T43] usb 5-1: device descriptor read/8, error -71 [ 919.698907][ T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 919.719329][ T43] usb 5-1: device descriptor read/8, error -71 [ 919.829379][ T43] usb usb5-port1: unable to enumerate USB device [ 919.908445][T17241] dns_resolver: Unsupported server list version (0) [ 920.398981][ T43] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 920.562820][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 920.621775][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 920.828724][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 920.847775][ T43] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 920.857453][ T43] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 920.868116][ T43] usb 7-1: Manufacturer: syz [ 920.876743][ T43] usb 7-1: config 0 descriptor?? [ 920.890898][ T43] smsusb:smsusb_probe: board id=9, interface number 0 [ 920.902791][ T43] smsusb:smsusb_probe: Device initialized with return code -19 [ 921.153834][T17248] program syz.6.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 921.240067][T17260] input: syz0 as /devices/virtual/input/input71 [ 921.444211][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2696'. [ 921.481295][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.488927][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.656387][T17274] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2344495276 (4688990552 ns) > initial count (2453455498 ns). Using initial count to start timer. [ 921.679167][T17274] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 921.755093][ T30] audit: type=1326 audit(1759398029.434:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 921.781954][ T30] audit: type=1326 audit(1759398029.434:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 921.811933][ T30] audit: type=1326 audit(1759398029.434:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.118080][ T30] audit: type=1326 audit(1759398029.434:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.180551][ T30] audit: type=1326 audit(1759398029.434:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.227875][ T30] audit: type=1326 audit(1759398029.434:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.355992][ T977] usb 7-1: USB disconnect, device number 121 [ 922.367251][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.403512][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.448921][ T30] audit: type=1800 audit(1759398029.434:2302): pid=17278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2696" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 922.584358][ T30] audit: type=1326 audit(1759398029.444:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.621881][ T30] audit: type=1326 audit(1759398029.454:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.799872][ T30] audit: type=1326 audit(1759398029.454:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17265 comm="syz.7.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x7ffc0000 [ 922.903535][T17289] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2700'. [ 923.287184][T17268] geneve3: entered promiscuous mode [ 923.295862][T17268] geneve3: entered allmulticast mode [ 923.310645][T17269] netlink: 'syz.2.2697': attribute type 5 has an invalid length. [ 923.383720][T17123] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.404463][T17123] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.479288][T17123] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.492955][T17123] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 923.786341][T17297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2702'. [ 925.373688][T17338] netlink: 'syz.4.2712': attribute type 5 has an invalid length. [ 925.918887][T12443] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 926.030372][T17353] netlink: 'syz.2.2716': attribute type 21 has an invalid length. [ 926.100515][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 926.161340][T12443] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 926.188887][T12443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 926.221901][T12443] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 926.248927][T12443] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 926.326905][T12443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.376772][T12443] usb 7-1: config 0 descriptor?? [ 926.887594][T12443] a4tech 0003:09DA:001A.003D: item fetching failed at offset 5/7 [ 926.912690][T12443] a4tech 0003:09DA:001A.003D: parse failed [ 926.924372][T12443] a4tech 0003:09DA:001A.003D: probe with driver a4tech failed with error -22 [ 927.039222][T14904] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 927.173898][T12443] usb 7-1: USB disconnect, device number 122 [ 927.219285][T14904] usb 5-1: Using ep0 maxpacket: 16 [ 927.248237][T14904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.268248][T14904] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 927.284471][T14904] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 927.300466][T14904] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 927.308488][T14904] usb 5-1: Manufacturer: syz [ 927.320290][T14904] usb 5-1: config 0 descriptor?? [ 927.489203][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 927.692727][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 927.700187][ T43] usb 3-1: config 0 has an invalid interface number: 250 but max is 1 [ 927.708680][ T43] usb 3-1: config 0 has no interface number 1 [ 927.722941][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 927.743477][ T43] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 927.756024][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.768311][ T43] usb 3-1: Product: syz [ 927.777619][ T43] usb 3-1: Manufacturer: syz [ 927.786970][ T43] usb 3-1: SerialNumber: syz [ 927.802726][ T43] usb 3-1: config 0 descriptor?? [ 927.812796][ T43] usb 3-1: Found UVC 0.00 device syz (0408:3090) [ 927.820064][ T43] usb 3-1: No valid video chain found. [ 928.028112][ T5924] usb 3-1: USB disconnect, device number 28 [ 928.149153][T12443] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 928.308988][T12443] usb 2-1: Using ep0 maxpacket: 8 [ 928.316012][T12443] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 928.323885][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.368958][T12443] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.407933][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.427625][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 928.447536][T12443] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 928.455879][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.468316][T12443] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.481239][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.518853][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 928.534227][T12443] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 928.547786][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 928.567576][T12443] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 928.611569][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 928.635501][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 928.683846][T12443] usb 2-1: string descriptor 0 read error: -22 [ 928.695280][T12443] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 928.729390][T12443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.768687][T12443] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 928.909122][ T5924] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 928.998511][T17389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.020667][T17389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.074202][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.610173][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.620679][ T5924] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 929.630489][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.649522][ T5924] usb 3-1: config 0 descriptor?? [ 930.133785][ T5924] cp2112 0003:10C4:EA90.003E: item fetching failed at offset 5/7 [ 930.186187][ T5924] cp2112 0003:10C4:EA90.003E: parse failed [ 930.215204][ T5924] cp2112 0003:10C4:EA90.003E: probe with driver cp2112 failed with error -22 [ 930.535372][T17408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.544495][T17408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.989219][ T5924] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 931.130082][ T5924] usb 7-1: device descriptor read/64, error -71 [ 931.369233][ T5924] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 931.469363][T17420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.497675][T17420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.515086][ T5924] usb 7-1: device descriptor read/64, error -71 [ 931.622934][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.629819][ T5924] usb usb7-port1: attempt power cycle [ 931.635248][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.751754][T14904] usb 3-1: USB disconnect, device number 29 [ 931.786773][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2736'. [ 931.841095][T17426] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2736'. [ 931.979136][ T5924] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 932.019676][ T5924] usb 7-1: device descriptor read/8, error -71 [ 932.136102][T17436] overlayfs: missing 'lowerdir' [ 932.200266][T17438] loop5: detected capacity change from 0 to 7 [ 932.213253][T17438] Dev loop5: unable to read RDB block 7 [ 932.222428][T17438] loop5: AHDI p1 p2 [ 932.226455][T17438] loop5: partition table partially beyond EOD, truncated [ 932.247883][T17436] fuse: Unknown parameter '0x00000000000000080x000000000000000a' [ 932.314558][T17438] loop5: p1 start 1668641394 is beyond EOD, truncated [ 932.318934][ T5924] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 932.349501][ T5924] usb 7-1: device descriptor read/8, error -71 [ 932.519334][ T5924] usb usb7-port1: unable to enumerate USB device [ 932.748300][T17441] usb usb8: usbfs: process 17441 (syz.4.2740) did not claim interface 0 before use [ 932.885028][T14904] usb 5-1: USB disconnect, device number 60 [ 932.977161][ T43] usb 2-1: USB disconnect, device number 75 [ 933.021729][T17446] CUSE: DEVNAME unspecified [ 934.744153][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 934.744166][ T30] audit: type=1326 audit(1759398042.464:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17461 comm="syz.7.2747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71b2b8eec9 code=0x0 [ 934.772213][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.239066][ T5924] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 935.421035][ T5924] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.491066][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 935.538812][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 935.567435][ T5924] usb 3-1: Product: syz [ 935.586513][ T5924] usb 3-1: Manufacturer: syz [ 935.599106][ T5924] usb 3-1: SerialNumber: syz [ 935.612392][T17470] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2747'. [ 935.884352][ T5924] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 936.078729][T17473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.089447][ T43] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 936.128268][T17473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.136258][T12443] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 936.281684][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 936.300838][T12443] usb 2-1: Using ep0 maxpacket: 8 [ 936.362405][T12443] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 936.375008][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 936.394980][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.405749][ T43] usb 7-1: Product: syz [ 936.414318][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 936.414767][ T43] usb 7-1: Manufacturer: syz [ 936.436513][ T43] usb 7-1: SerialNumber: syz [ 936.467390][ T43] usb 7-1: config 0 descriptor?? [ 936.505131][T12443] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 936.536831][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 936.608292][ T5839] usb 3-1: USB disconnect, device number 30 [ 936.619156][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.655188][ T5839] usblp0: removed [ 936.700440][T12443] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 936.715058][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 936.747619][T12443] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 936.799429][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 936.852642][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 936.950941][T12443] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 936.959127][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 936.997023][T12443] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 937.056104][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 937.129677][T12443] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 937.160388][T17517] loop5: detected capacity change from 0 to 7 [ 937.178722][T12443] usb 2-1: string descriptor 0 read error: -22 [ 937.192935][T12443] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 937.216747][T12443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.231555][T17517] Dev loop5: unable to read RDB block 7 [ 937.245279][T12443] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 937.253326][T17517] loop5: AHDI p1 p2 [ 937.257384][T17517] loop5: partition table partially beyond EOD, truncated [ 937.264916][T17517] loop5: p1 start 1668641394 is beyond EOD, truncated [ 937.441565][T17488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.451549][T17488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.528985][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 937.743402][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.770350][ T43] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 937.787557][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.812663][ T43] usb 3-1: config 0 descriptor?? [ 937.836862][ T43] usb 3-1: bad CDC descriptors [ 938.027147][T12443] usb 3-1: USB disconnect, device number 31 [ 938.596178][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 938.605548][T17531] netlink: 'syz.4.2764': attribute type 5 has an invalid length. [ 938.614041][T17531] netlink: 'syz.4.2764': attribute type 8 has an invalid length. [ 938.622627][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 938.653902][T17531] geneve2: entered promiscuous mode [ 938.660113][T17531] geneve2: entered allmulticast mode [ 938.671472][T17123] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 938.681312][T17123] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 938.716726][T17062] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 938.796692][T17062] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 939.225465][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'. [ 939.295619][ T43] usb 7-1: USB disconnect, device number 127 [ 939.330127][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2768'. [ 939.366877][T17544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 939.459731][T17544] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 939.894600][T17555] tipc: Enabled bearer , priority 0 [ 939.914847][T17555] syzkaller0: entered promiscuous mode [ 939.920749][T17555] syzkaller0: entered allmulticast mode [ 939.929581][T17555] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 939.948624][T17555] tipc: Resetting bearer [ 939.961519][T17553] tipc: Resetting bearer [ 939.985618][T17553] tipc: Disabling bearer [ 940.041777][ T30] audit: type=1326 audit(1759398047.734:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.4.2771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0xffff0000 [ 940.391750][T17567] loop5: detected capacity change from 0 to 7 [ 940.402861][T17567] Dev loop5: unable to read RDB block 7 [ 940.420810][T17567] loop5: AHDI p1 p2 [ 940.437344][T17567] loop5: partition table partially beyond EOD, truncated [ 940.492226][T17567] loop5: p1 start 1668641394 is beyond EOD, truncated [ 940.971877][ T43] usb 2-1: USB disconnect, device number 76 [ 941.572081][ T43] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 941.731975][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 941.740748][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.766629][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 941.797661][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 942.061609][ T43] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 942.073177][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.083644][ T43] usb 2-1: Product: syz [ 942.087960][ T43] usb 2-1: Manufacturer: syz [ 942.095127][ T43] usb 2-1: SerialNumber: syz [ 942.122007][ T43] usb 2-1: config 0 descriptor?? [ 942.161381][T17576] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 942.372321][ T43] usb 2-1: USB disconnect, device number 77 [ 943.143784][T17596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.161989][T17598] loop5: detected capacity change from 0 to 7 [ 943.172452][T17596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.182997][T12383] Dev loop5: unable to read RDB block 7 [ 943.188587][T12383] loop5: AHDI p1 p2 [ 943.238851][ T43] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 943.252222][T12383] loop5: partition table partially beyond EOD, truncated [ 943.264582][T12383] loop5: p1 start 1668641394 is beyond EOD, truncated [ 943.275409][T17598] Dev loop5: unable to read RDB block 7 [ 943.285255][T17596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.294657][T17596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.312241][T17599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2782'. [ 943.329367][T17598] loop5: AHDI p1 p2 [ 943.389061][T17598] loop5: partition table partially beyond EOD, truncated [ 943.408921][T17598] loop5: p1 start 1668641394 is beyond EOD, truncated [ 943.419091][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 943.548683][ T43] usb 2-1: device descriptor read/all, error -61 [ 943.600582][T17602] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2785'. [ 943.819698][ T43] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 943.979362][ T43] usb 2-1: device descriptor read/64, error -71 [ 944.103503][ T43] usb usb2-port1: attempt power cycle [ 944.329315][ T5924] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 944.498998][ T43] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 944.518894][ T5924] usb 7-1: Using ep0 maxpacket: 32 [ 944.534731][ T5924] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 944.534746][ T43] usb 2-1: device descriptor read/8, error -71 [ 944.563521][ T5924] usb 7-1: config 0 has no interface number 0 [ 944.574419][ T5924] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 944.585401][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.594333][ T5924] usb 7-1: Product: syz [ 944.599457][ T5924] usb 7-1: Manufacturer: syz [ 944.604265][ T5924] usb 7-1: SerialNumber: syz [ 944.613470][ T5924] usb 7-1: config 0 descriptor?? [ 944.633550][ T5924] smsc95xx v2.0.0 [ 944.779524][ T43] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 944.800935][ T43] usb 2-1: device descriptor read/8, error -71 [ 944.809992][T14904] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 944.913796][ T43] usb usb2-port1: unable to enumerate USB device [ 944.969083][T14904] usb 5-1: Using ep0 maxpacket: 16 [ 944.976876][T14904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.988377][T14904] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 944.997747][T14904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.017145][T14904] usb 5-1: config 0 descriptor?? [ 945.030597][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 945.051145][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 945.462580][T14904] cypress 0003:04B4:07B1.003F: unknown main item tag 0x0 [ 945.491658][T17642] loop5: detected capacity change from 0 to 7 [ 945.502955][T17642] Dev loop5: unable to read RDB block 7 [ 945.508974][T17642] loop5: AHDI p1 p2 [ 945.513103][T17642] loop5: partition table partially beyond EOD, truncated [ 945.520344][T14904] cypress 0003:04B4:07B1.003F: unknown main item tag 0x0 [ 945.520378][T14904] cypress 0003:04B4:07B1.003F: unknown main item tag 0x0 [ 945.520405][T14904] cypress 0003:04B4:07B1.003F: unknown main item tag 0x0 [ 945.520431][T14904] cypress 0003:04B4:07B1.003F: unknown main item tag 0x0 [ 945.527024][T14904] cypress 0003:04B4:07B1.003F: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.4-1/input0 [ 945.632043][T17631] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2792'. [ 945.659322][T17642] loop5: p1 start 1668641394 is beyond EOD, truncated [ 945.792321][T14904] usb 5-1: USB disconnect, device number 61 [ 945.909309][T17644] fido_id[17644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 946.185587][ T30] audit: type=1326 audit(1759398053.904:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.218647][ T30] audit: type=1326 audit(1759398053.904:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.277836][ T30] audit: type=1326 audit(1759398053.904:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb86c18d710 code=0x7ffc0000 [ 946.305225][ T5924] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 946.344757][ T30] audit: type=1326 audit(1759398053.904:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb86c18d710 code=0x7ffc0000 [ 946.345534][ T5924] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61 [ 946.434786][ T30] audit: type=1326 audit(1759398053.904:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.479448][ T30] audit: type=1326 audit(1759398053.904:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.515841][T17660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2800'. [ 946.547678][ T30] audit: type=1326 audit(1759398053.904:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.572219][ T30] audit: type=1326 audit(1759398053.904:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.595024][ T30] audit: type=1326 audit(1759398053.904:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.639305][ T30] audit: type=1326 audit(1759398053.904:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17648 comm="syz.2.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 946.871142][T17673] tipc: Can't bind to reserved service type 2 [ 947.674419][T17682] netlink: 'syz.1.2805': attribute type 11 has an invalid length. [ 947.843497][T17686] fuse: Bad value for 'fd' [ 947.929541][ T5924] usb 7-1: USB disconnect, device number 2 [ 949.658969][T14904] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 949.818894][T14904] usb 5-1: Using ep0 maxpacket: 32 [ 949.826125][T14904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 949.835374][T14904] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 949.844708][T14904] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 949.874862][T14904] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 949.904436][T14904] usb 5-1: config 128 has no interface number 0 [ 949.950716][T14904] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 950.005665][T14904] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.043698][T14904] usb 5-1: config 128 interface 127 has no altsetting 0 [ 950.108863][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 950.133862][T14904] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 950.159721][T14904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.167816][T14904] usb 5-1: Product: syz [ 950.189591][T14904] usb 5-1: Manufacturer: syz [ 950.211465][T14904] usb 5-1: SerialNumber: syz [ 950.341162][ T43] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 950.351945][ T43] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 950.399921][ T43] usb 3-1: config 220 descriptor has 1 excess byte, ignoring [ 950.412425][ T43] usb 3-1: config 220 has no interface number 2 [ 950.437854][ T43] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 950.503210][ T43] usb 3-1: config 220 interface 0 has no altsetting 0 [ 950.516937][ T43] usb 3-1: config 220 interface 76 has no altsetting 0 [ 950.534640][ T43] usb 3-1: config 220 interface 1 has no altsetting 0 [ 950.547579][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 950.557766][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.625283][ T43] usb 3-1: Product: syz [ 950.631887][ T43] usb 3-1: Manufacturer: syz [ 950.667953][ T43] usb 3-1: SerialNumber: syz [ 950.723744][T14904] usb 5-1: USB disconnect, device number 62 [ 950.773670][T17737] fuse: Bad value for 'fd' [ 950.835650][T12383] udevd[12383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.908188][ T43] usb 3-1: selecting invalid altsetting 0 [ 950.961086][ T43] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 950.967494][ T43] usb 3-1: No valid video chain found. [ 951.178497][ T43] usb 3-1: selecting invalid altsetting 0 [ 951.199009][T17745] loop3: detected capacity change from 0 to 1 [ 951.225289][ T43] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 951.284348][T17745] Dev loop3: unable to read RDB block 1 [ 951.357724][ T43] usb 3-1: USB disconnect, device number 32 [ 951.398197][T17745] loop3: unable to read partition table [ 951.458930][T17745] loop3: partition table beyond EOD, truncated [ 951.467548][T17745] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 951.539413][ T5924] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 951.802129][ T5924] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 951.810209][ T5924] usb 7-1: can't read configurations, error -61 [ 951.948875][ T5924] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 952.201783][ T5924] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 952.209709][ T5924] usb 7-1: can't read configurations, error -61 [ 952.228294][ T5924] usb usb7-port1: attempt power cycle [ 952.739083][T12443] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 952.746802][ T5924] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 952.791456][ T5924] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 952.803215][ T5924] usb 7-1: can't read configurations, error -61 [ 952.908296][T12443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.922855][T12443] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 952.939185][ T5924] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 952.950892][T12443] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 952.972792][T12443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.991386][ T5924] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 953.213221][T17779] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2828'. [ 953.298023][T17780] fuse: Bad value for 'fd' [ 953.314698][ T5924] usb 7-1: can't read configurations, error -61 [ 953.336700][T12443] usb 3-1: config 0 descriptor?? [ 953.342590][ T5924] usb usb7-port1: unable to enumerate USB device [ 953.769375][T12443] kovaplus 0003:1E7D:2D50.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 954.167499][T12443] kovaplus 0003:1E7D:2D50.0040: couldn't init struct kovaplus_device [ 954.184724][T12443] kovaplus 0003:1E7D:2D50.0040: couldn't install mouse [ 954.316579][T12443] kovaplus 0003:1E7D:2D50.0040: probe with driver kovaplus failed with error -32 [ 955.309170][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 955.399243][ T5839] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 955.461529][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 955.488168][ T43] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 955.510664][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.534457][ T43] usb 7-1: config 0 descriptor?? [ 955.559050][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 955.575792][T12443] usb 3-1: USB disconnect, device number 33 [ 955.582248][ T43] usb 7-1: invalid MIDI EP [ 955.622984][ T5839] usb 2-1: config 0 has an invalid interface number: 124 but max is 0 [ 955.651750][ T43] usb 7-1: snd-bcd2000: error during probing [ 955.661840][ T5839] usb 2-1: config 0 has no interface number 0 [ 955.668064][ T5839] usb 2-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 955.808506][ T43] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 955.869336][ T43] usb 7-1: USB disconnect, device number 7 [ 955.886795][ T5839] usb 2-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8 [ 955.937804][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.000518][ T5839] usb 2-1: Product: syz [ 956.006786][ T5839] usb 2-1: Manufacturer: syz [ 956.044177][ T5839] usb 2-1: SerialNumber: syz [ 956.077328][ T5839] usb 2-1: config 0 descriptor?? [ 956.089793][T12443] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 956.101736][ T5839] kvaser_usb 2-1:0.124: error -ENODEV: Cannot get usb endpoint(s) [ 956.249094][T12443] usb 3-1: Using ep0 maxpacket: 32 [ 956.256103][T12443] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 956.268643][T12443] usb 3-1: config 0 has no interface number 0 [ 956.275029][T12443] usb 3-1: config 0 interface 12 has no altsetting 0 [ 956.295117][T12443] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 956.309106][T12443] usb 3-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 956.336385][T12443] usb 3-1: Product: syz [ 956.348948][T12443] usb 3-1: Manufacturer: syz [ 956.356093][T12443] usb 3-1: SerialNumber: syz [ 956.385710][T12443] usb 3-1: config 0 descriptor?? [ 956.395489][ T5839] usb 2-1: USB disconnect, device number 82 [ 957.894300][T17837] netlink: 'syz.4.2845': attribute type 10 has an invalid length. [ 957.928496][T17837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2845'. [ 957.938580][T12443] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 957.959123][T12443] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 957.966459][T12443] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 957.994729][T17837] team0: Port device geneve0 added [ 958.000194][T12443] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 958.020689][T17062] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 958.036749][T17149] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 958.064835][T17149] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 958.069723][T12443] usb 3-1: USB disconnect, device number 34 [ 958.094069][T17149] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 958.359095][ T5924] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 958.699324][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.727977][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 958.967986][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.116466][ T5924] usb 2-1: config 0 descriptor?? [ 959.208888][ T5839] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 959.359215][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 959.379828][ T5839] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 959.394962][ T5839] usb 5-1: config 0 has no interface number 0 [ 959.409093][ T5839] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 959.444154][ T5839] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 959.528889][ T5839] usb 5-1: config 0 interface 41 has no altsetting 0 [ 959.546858][ T5924] usbhid 2-1:0.0: can't add hid device: -71 [ 959.559146][ T5924] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 959.577419][ T5839] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 959.586975][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.599256][ T5924] usb 2-1: USB disconnect, device number 83 [ 959.606474][ T5839] usb 5-1: Product: syz [ 959.615963][ T5839] usb 5-1: Manufacturer: syz [ 959.629852][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 959.629869][ T30] audit: type=1326 audit(1759398067.324:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.683574][ T5839] usb 5-1: SerialNumber: syz [ 959.694694][ T5839] usb 5-1: config 0 descriptor?? [ 959.709641][ T30] audit: type=1326 audit(1759398067.324:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.732813][T17868] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2853'. [ 959.734390][T17861] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 959.754546][T17861] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 959.763303][ T30] audit: type=1326 audit(1759398067.324:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.796529][ T30] audit: type=1326 audit(1759398067.324:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.836833][ T30] audit: type=1326 audit(1759398067.324:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.875509][ T30] audit: type=1326 audit(1759398067.334:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.909057][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 959.935934][ T30] audit: type=1326 audit(1759398067.334:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.959528][ T30] audit: type=1326 audit(1759398067.334:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 959.983124][ T30] audit: type=1326 audit(1759398067.334:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 960.011690][T17862] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 960.047335][ T5839] dm9601 5-1:0.41: probe with driver dm9601 failed with error -71 [ 960.055652][ T30] audit: type=1326 audit(1759398067.334:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17865 comm="syz.2.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 960.108822][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 960.207526][ T43] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 960.207557][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.207577][ T43] usb 3-1: config 0 has no interface number 0 [ 960.207623][ T43] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 960.207647][ T43] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 960.214866][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 960.214898][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.214915][ T43] usb 3-1: Product: syz [ 960.214930][ T43] usb 3-1: Manufacturer: syz [ 960.214944][ T43] usb 3-1: SerialNumber: syz [ 960.218054][ T43] usb 3-1: config 0 descriptor?? [ 960.220640][T17866] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 960.233572][ T5839] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 960.258818][ T5839] usb 5-1: USB disconnect, device number 63 [ 960.315365][T17884] netlink: 'syz.1.2856': attribute type 5 has an invalid length. [ 960.439478][ T43] usb 3-1: probing VID:PID(0424:012C) [ 960.440859][ T43] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 960.440876][ T43] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 960.440931][ T43] vub300 3-1:0.133: probe with driver vub300 failed with error -22 [ 960.443539][ T43] usb 3-1: USB disconnect, device number 35 [ 960.620055][ T5839] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 960.780924][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 960.808974][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.826895][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 960.848068][ T5839] usb 5-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7 [ 960.858707][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.883101][ T5839] usb 5-1: config 0 descriptor?? [ 961.158948][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 961.179245][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 961.214295][ T5839] usb 5-1: USB disconnect, device number 64 [ 961.424633][T17906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2860'. [ 962.133067][ T5839] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 962.329421][ T5924] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 962.438847][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 962.458214][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.507661][ T5924] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 962.528858][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.538670][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 962.564006][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 962.582494][ T5924] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 962.587758][ T5839] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 962.611150][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.619346][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.660414][ T5924] usb 2-1: config 0 descriptor?? [ 962.676032][T17901] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 962.687722][ T5839] usb 5-1: config 0 descriptor?? [ 962.973518][ T5924] elecom 0003:056E:010D.0041: hidraw0: USB HID vb.37 Device [HID 056e:010d] on usb-dummy_hcd.1-1/input0 [ 963.037234][T17897] syzkaller1: tun_chr_ioctl cmd 35108 [ 963.044175][T17915] netlink: 288 bytes leftover after parsing attributes in process `syz.7.2864'. [ 963.131398][T17917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.158041][T17917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.169051][ T43] usb 2-1: USB disconnect, device number 84 [ 963.243942][T17916] fido_id[17916]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 963.609836][ T5839] usbhid 5-1:0.0: can't add hid device: -71 [ 963.660340][ T5839] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 963.708196][ T5839] usb 5-1: USB disconnect, device number 65 [ 964.037753][T17927] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2868'. [ 964.458948][ T5839] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 964.606239][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2873'. [ 964.620494][ T5839] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.639532][T17945] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2873'. [ 964.683709][ T5839] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 964.709476][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.747847][ T5839] usb 3-1: config 0 descriptor?? [ 964.802183][ T5839] pwc: Askey VC010 type 2 USB webcam detected. [ 964.950567][T17961] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2876'. [ 964.979938][T17063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.990043][T17063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.263624][ T5839] pwc: recv_control_msg error -32 req 02 val 2b00 [ 965.264837][T17935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.292641][T17935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.545061][ T5839] pwc: recv_control_msg error -32 req 02 val 2700 [ 965.572949][ T5839] pwc: recv_control_msg error -32 req 02 val 2c00 [ 965.581923][ T5839] pwc: recv_control_msg error -32 req 04 val 1000 [ 965.595122][ T5839] pwc: recv_control_msg error -32 req 04 val 1300 [ 965.660077][ T5839] pwc: recv_control_msg error -32 req 04 val 1400 [ 965.668171][ T5839] pwc: recv_control_msg error -32 req 02 val 2000 [ 965.814692][ T5839] pwc: recv_control_msg error -32 req 02 val 2100 [ 965.989385][ T5839] pwc: recv_control_msg error -32 req 04 val 1500 [ 965.999089][ T5839] pwc: recv_control_msg error -32 req 02 val 2500 [ 966.014158][ T5839] pwc: recv_control_msg error -32 req 02 val 2400 [ 966.226314][ T5839] pwc: recv_control_msg error -71 req 02 val 2600 [ 966.236329][ T5839] pwc: recv_control_msg error -71 req 02 val 2900 [ 966.249092][ T5839] pwc: recv_control_msg error -71 req 02 val 2800 [ 966.272739][ T5839] pwc: recv_control_msg error -71 req 04 val 1100 [ 966.291349][ T5839] pwc: recv_control_msg error -71 req 04 val 1200 [ 966.382413][ T5839] pwc: Registered as video103. [ 966.443881][ T5839] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input72 [ 966.461055][T17959] usb usb7: usbfs: process 17959 (syz.4.2875) did not claim interface 0 before use [ 966.603022][ T5839] usb 3-1: USB disconnect, device number 36 [ 966.603427][T17968] netlink: 'syz.6.2879': attribute type 1 has an invalid length. [ 967.056259][T17968] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2879'. [ 967.111964][T17973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 967.131574][T17973] bond2: (slave bond3): making interface the new active one [ 967.139914][T17973] bond2: (slave bond3): Enslaving as an active interface with an up link [ 967.971173][T17978] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 968.011948][T17968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 968.551183][T18013] netlink: 'syz.4.2888': attribute type 4 has an invalid length. [ 968.611430][T18016] netlink: 'syz.4.2888': attribute type 4 has an invalid length. [ 968.679322][ T5924] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 968.879425][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 968.965160][ T5924] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 968.989678][ T5924] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 969.001677][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 969.029195][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 969.371064][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 969.458765][ T5924] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 969.467982][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.476144][ T5924] usb 2-1: Product: syz [ 969.480475][ T5924] usb 2-1: Manufacturer: syz [ 969.485178][ T5924] usb 2-1: SerialNumber: syz [ 969.545755][ T10] usb 3-1: config 162 has an invalid interface number: 246 but max is 1 [ 969.554739][ T10] usb 3-1: config 162 has an invalid interface number: 245 but max is 1 [ 969.586427][ T5924] usb 2-1: config 0 descriptor?? [ 969.598952][ T10] usb 3-1: config 162 has no interface number 0 [ 969.656603][ T10] usb 3-1: config 162 has no interface number 1 [ 969.670898][ T5924] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 969.712722][ T10] usb 3-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 970.099151][ T10] usb 3-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 970.112979][ T10] usb 3-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 970.167706][ T10] usb 3-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 970.179806][ T10] usb 3-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 970.190380][ T10] usb 3-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 970.204060][ T10] usb 3-1: config 162 interface 246 has no altsetting 0 [ 970.402380][ T10] usb 3-1: config 162 interface 245 has no altsetting 0 [ 970.441609][ T10] usb 3-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 970.493896][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.660345][ T10] usb 3-1: Product: syz [ 970.771486][ T10] usb 3-1: Manufacturer: syz [ 970.814412][ T10] usb 3-1: SerialNumber: syz [ 971.099212][ T5924] usb 2-1: USB disconnect, device number 85 [ 971.300450][T18033] syzkaller1: entered promiscuous mode [ 971.307954][T18033] syzkaller1: entered allmulticast mode [ 971.599863][ T43] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 971.716260][T18049] input: syz0 as /devices/virtual/input/input73 [ 971.776125][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 971.786273][ T43] usb 5-1: no configurations [ 971.810080][ T43] usb 5-1: can't read configurations, error -22 [ 971.924619][T18053] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2896'. [ 972.071204][ T5839] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 972.200647][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 972.200658][ T30] audit: type=1326 audit(1759398079.924:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18058 comm="syz.1.2898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f576c58eec9 code=0x0 [ 972.248891][ T5839] usb 7-1: Using ep0 maxpacket: 8 [ 972.318972][ T5839] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 972.335817][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.346710][ T5839] usb 7-1: Product: syz [ 972.351338][ T5839] usb 7-1: Manufacturer: syz [ 972.362865][ T5839] usb 7-1: SerialNumber: syz [ 972.372091][ T5839] usb 7-1: config 0 descriptor?? [ 972.385490][ T5839] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 972.610478][ T5839] pwc: Failed to set LED on/off time (-71) [ 972.619479][ T5839] pwc: send_video_command error -71 [ 972.624722][ T5839] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 972.634116][ T5839] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 972.650286][ T5839] usb 7-1: USB disconnect, device number 8 [ 973.474377][ T10] Bluetooth: failed to set interface 0, alt 0 -22 [ 973.609005][ T10] btusb 3-1:162.245: probe with driver btusb failed with error -22 [ 973.667439][ T10] usb 3-1: USB disconnect, device number 37 [ 973.928584][T18082] netlink: 'syz.4.2903': attribute type 10 has an invalid length. [ 973.947399][T18082] input: syz0 as /devices/virtual/input/input74 [ 974.087992][ T30] audit: type=1326 audit(1759398081.804:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18081 comm="syz.4.2903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb12fb8eec9 code=0x0 [ 974.509107][ T5839] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 974.585781][T18098] bond0: entered promiscuous mode [ 974.600945][T18098] batadv0: entered promiscuous mode [ 974.610367][T18098] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 974.621552][T18098] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 974.633216][T18098] hsr1: entered allmulticast mode [ 974.638329][T18098] bond0: entered allmulticast mode [ 974.644684][T18098] batadv0: entered allmulticast mode [ 974.650724][T18098] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 974.666993][T18098] bond0: left promiscuous mode [ 974.671015][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 974.686370][T18098] batadv0: left promiscuous mode [ 974.692816][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 974.745037][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 974.769224][ T5839] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 974.821796][ T5839] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 974.856551][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.887506][ T5839] usb 3-1: config 0 descriptor?? [ 974.937858][T18106] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2910'. [ 975.018185][ T30] audit: type=1804 audit(1759398082.734:2439): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2909" name="/newroot/147/file1" dev="fuse" ino=1 res=1 errno=0 [ 975.289027][ T5920] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 975.342741][ T5839] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 975.469490][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 975.489509][ T5920] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 975.498781][ T5920] usb 7-1: config 0 has no interface number 0 [ 975.504940][ T5920] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 975.553183][ T5920] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 975.566207][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 975.587177][ T5920] usb 7-1: Product: syz [ 975.597225][ T5920] usb 7-1: SerialNumber: syz [ 975.616339][ T5920] usb 7-1: config 0 descriptor?? [ 975.636809][ T5920] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 975.658503][ T5920] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input76 [ 975.848804][T18108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.857866][T18108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.162371][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.178981][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.186230][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.193702][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.208880][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.216082][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 976.223043][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 976.246051][ T5920] usb 7-1: USB disconnect, device number 9 [ 976.269888][ T5920] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 976.638945][ T5839] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 976.676506][ T977] usb 3-1: USB disconnect, device number 38 [ 976.878022][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.902018][T18137] netlink: 'syz.7.2918': attribute type 5 has an invalid length. [ 976.910608][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.920912][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 976.939257][ T5839] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 976.948416][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.965704][ T5839] usb 2-1: config 0 descriptor?? [ 977.448975][ T5839] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 977.919049][ T5839] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 978.093981][ T5839] usb 3-1: config 0 has no interfaces? [ 978.103731][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 978.150840][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.218208][ T5839] usb 3-1: config 0 descriptor?? [ 978.527106][ T5839] usb 3-1: USB disconnect, device number 39 [ 978.597852][T18164] !@: renamed from xfrm0 [ 978.719183][ T5920] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 978.838845][ T43] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 978.848913][ T977] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 978.882914][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 978.896467][ T5920] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 978.910323][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.918569][ T5920] usb 5-1: Product: syz [ 978.927729][ T5920] usb 5-1: Manufacturer: syz [ 978.935024][ T5920] usb 5-1: SerialNumber: syz [ 978.949020][ T5920] usb 5-1: config 0 descriptor?? [ 978.958370][ T5920] gspca_main: se401-2.14.0 probing 047d:5003 [ 978.978951][ T977] usb 2-1: device descriptor read/64, error -32 [ 978.991213][ T43] usb 7-1: config 1 has an invalid interface number: 241 but max is 3 [ 979.008851][ T43] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 979.017563][ T43] usb 7-1: config 1 has an invalid interface number: 88 but max is 3 [ 979.039111][ T43] usb 7-1: config 1 has an invalid interface number: 50 but max is 3 [ 979.047229][ T43] usb 7-1: config 1 has an invalid interface number: 22 but max is 3 [ 979.075486][ T43] usb 7-1: config 1 has no interface number 0 [ 979.088024][ T43] usb 7-1: config 1 has no interface number 1 [ 979.102156][ T43] usb 7-1: config 1 has no interface number 2 [ 979.110779][ T43] usb 7-1: config 1 has no interface number 3 [ 979.117007][ T43] usb 7-1: config 1 interface 241 altsetting 6 has an endpoint descriptor with address 0x78, changing to 0x8 [ 979.128710][ T43] usb 7-1: config 1 interface 241 altsetting 6 endpoint 0x8 has invalid maxpacket 3935, setting to 64 [ 979.140746][ T43] usb 7-1: config 1 interface 241 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 979.152378][ T43] usb 7-1: config 1 interface 241 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 979.165621][ T43] usb 7-1: config 1 interface 241 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 979.257863][ T43] usb 7-1: config 1 interface 241 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 979.289165][ T43] usb 7-1: config 1 interface 241 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 979.300073][ T43] usb 7-1: config 1 interface 241 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 979.312873][ T977] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 979.321428][ T43] usb 7-1: config 1 interface 241 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 979.332717][ T43] usb 7-1: config 1 interface 241 altsetting 6 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 979.344577][ T43] usb 7-1: config 1 interface 241 altsetting 6 endpoint 0x85 has an invalid bInterval 238, changing to 11 [ 979.355980][ T43] usb 7-1: config 1 interface 241 altsetting 6 endpoint 0x85 has invalid maxpacket 1387, setting to 1024 [ 979.468893][ T977] usb 2-1: device descriptor read/64, error -32 [ 979.481804][ T30] audit: type=1400 audit(1759398087.174:2440): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18176 comm="syz.7.2926" [ 979.550804][T18161] veth0_to_bond: entered allmulticast mode [ 979.559038][ T43] usb 7-1: config 1 interface 241 altsetting 6 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 979.640315][ T43] usb 7-1: config 1 interface 88 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 979.664701][ T43] usb 7-1: config 1 interface 88 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 979.682354][T18179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 979.712039][ T43] usb 7-1: config 1 interface 50 altsetting 65 has a duplicate endpoint with address 0x2, skipping [ 979.723311][ T977] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 979.751185][ T977] usb 2-1: device descriptor read/8, error -71 [ 979.761432][ T43] usb 7-1: config 1 interface 50 altsetting 65 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 979.808590][ T43] usb 7-1: config 1 interface 50 altsetting 65 has a duplicate endpoint with address 0x9, skipping [ 979.836339][ T30] audit: type=1326 audit(1759398087.554:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 979.911966][ T30] audit: type=1326 audit(1759398087.554:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 979.918898][ T43] usb 7-1: config 1 interface 50 altsetting 65 bulk endpoint 0x7 has invalid maxpacket 16 [ 979.979423][ T5920] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 979.984693][ T43] usb 7-1: config 1 interface 50 altsetting 65 has a duplicate endpoint with address 0xE, skipping [ 980.003528][ T43] usb 7-1: config 1 interface 22 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 980.016748][ T43] usb 7-1: config 1 interface 22 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 980.025092][ T5920] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 980.042602][ T30] audit: type=1326 audit(1759398087.554:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.076516][ T43] usb 7-1: config 1 interface 22 altsetting 6 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 980.078135][ T5920] usb 5-1: USB disconnect, device number 68 [ 980.196174][ T30] audit: type=1326 audit(1759398087.554:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.238144][ T43] usb 7-1: config 1 interface 22 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 980.249561][ T43] usb 7-1: config 1 interface 241 has no altsetting 0 [ 980.256413][ T43] usb 7-1: config 1 interface 88 has no altsetting 0 [ 980.263491][ T43] usb 7-1: config 1 interface 50 has no altsetting 0 [ 980.270534][ T43] usb 7-1: config 1 interface 22 has no altsetting 0 [ 980.279394][ T30] audit: type=1326 audit(1759398087.554:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.302981][ T43] usb 7-1: Dual-Role OTG device on HNP port [ 980.309035][ T30] audit: type=1326 audit(1759398087.624:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.332565][ T43] usb 7-1: New USB device found, idVendor=1bbb, idProduct=0000, bcdDevice=80.b4 [ 980.341831][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.349979][ T43] usb 7-1: Product: 놏뷭Ш춻ꐸ魰 [ 980.355878][ T43] usb 7-1: Manufacturer: ఊ [ 980.360608][ T43] usb 7-1: SerialNumber: 㒼龕痂餠疾턾덉ጝ蓯▼풮迡铋谴ᐍᎻ䀖掏嗀骳䀧큜࢈ꉦম灄⻵䦰㷰Ⱍ噻唯庲纏㟒㰥퟽ [ 980.375309][ T30] audit: type=1326 audit(1759398087.624:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.452467][T18166] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 980.593369][T18188] netlink: 'syz.2.2929': attribute type 5 has an invalid length. [ 980.598809][ T30] audit: type=1326 audit(1759398087.624:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.670132][ T5839] usb 2-1: USB disconnect, device number 86 [ 980.734808][ T30] audit: type=1326 audit(1759398087.624:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18182 comm="syz.1.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 980.830441][ T43] option 7-1:1.241: GSM modem (1-port) converter detected [ 980.852412][ T43] option 7-1:1.88: GSM modem (1-port) converter detected [ 980.873614][ T43] option 7-1:1.50: GSM modem (1-port) converter detected [ 980.906107][ T43] option 7-1:1.22: GSM modem (1-port) converter detected [ 980.959436][T18192] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 980.966018][T18192] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 980.977280][ T43] usb 7-1: USB disconnect, device number 10 [ 980.998073][ T43] option 7-1:1.241: device disconnected [ 981.011798][ T43] option 7-1:1.88: device disconnected [ 981.044667][ T43] option 7-1:1.50: device disconnected [ 981.079811][ T43] option 7-1:1.22: device disconnected [ 981.114059][T18192] vhci_hcd vhci_hcd.0: Device attached [ 981.288921][ T5839] vhci_hcd: vhci_device speed not set [ 981.348849][ T5839] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 981.373113][T18201] loop5: detected capacity change from 0 to 7 [ 981.397206][T18201] Dev loop5: unable to read RDB block 7 [ 981.419219][T18201] loop5: AHDI p1 p2 [ 981.433971][T18201] loop5: partition table partially beyond EOD, truncated [ 981.487794][T18201] loop5: p1 start 1668641394 is beyond EOD, truncated [ 981.960378][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2936'. [ 981.971575][T18215] netlink: 'syz.1.2936': attribute type 1 has an invalid length. [ 982.161725][T18215] bond1: entered promiscuous mode [ 982.167258][T18215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 982.252088][T18216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 982.261719][T18216] bond1: (slave bond2): making interface the new active one [ 982.269579][T18216] bond2: entered promiscuous mode [ 982.275641][T18216] bond1: (slave bond2): Enslaving as an active interface with an up link [ 982.620688][ T43] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 982.779001][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 983.213424][T18223] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 983.226627][T18223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.235345][T18223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.427271][T18238] netlink: 'syz.6.2941': attribute type 5 has an invalid length. [ 983.969108][T14904] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 984.042268][T18257] loop5: detected capacity change from 0 to 7 [ 984.055301][T12383] Dev loop5: unable to read RDB block 7 [ 984.061914][T12383] loop5: AHDI p1 p2 [ 984.066168][T12383] loop5: partition table partially beyond EOD, truncated [ 984.081813][T12383] loop5: p1 start 1668641394 is beyond EOD, truncated [ 984.120876][T18257] Dev loop5: unable to read RDB block 7 [ 984.126842][T18257] loop5: AHDI p1 p2 [ 984.131268][T14904] usb 2-1: Using ep0 maxpacket: 8 [ 984.144099][T14904] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 984.202245][T18257] loop5: partition table partially beyond EOD, truncated [ 984.214504][T18257] loop5: p1 start 1668641394 is beyond EOD, truncated [ 984.670690][T14904] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 984.698197][T14904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.773251][T14904] usb 2-1: Product: syz [ 984.784966][T14904] usb 2-1: Manufacturer: syz [ 984.789689][T14904] usb 2-1: SerialNumber: syz [ 984.820320][T14904] usb 2-1: config 0 descriptor?? [ 984.832446][T14904] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 984.840627][T14904] usb 2-1: setting power ON [ 984.845187][T14904] dvb-usb: bulk message failed: -22 (2/0) [ 984.855334][T14904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 984.866096][T14904] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 984.874713][T14904] usb 2-1: media controller created [ 984.916476][T14904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.028970][T18251] dvb-usb: bulk message failed: -22 (3/0) [ 985.036372][T18251] dvb-usb: bulk message failed: -22 (3/0) [ 985.175154][T14904] usb 2-1: selecting invalid altsetting 6 [ 985.233470][T14904] usb 2-1: digital interface selection failed (-22) [ 985.289036][T14904] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 985.463291][T14904] usb 2-1: setting power OFF [ 985.530618][T14904] dvb-usb: bulk message failed: -22 (2/0) [ 985.564688][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 985.686417][T14904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 985.754471][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 985.771387][T14904] (NULL device *): no alternate interface [ 985.778002][ T43] usb 5-1: can't read configurations, error -71 [ 986.117535][T18267] netlink: 'syz.4.2948': attribute type 13 has an invalid length. [ 986.220705][T18268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2948'. [ 986.242521][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 986.266205][T18267] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2948'. [ 986.440771][ T977] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 986.874674][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 986.890965][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.923486][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 987.029098][T18274] netlink: 'syz.7.2950': attribute type 23 has an invalid length. [ 987.038654][ T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 987.090035][T18193] vhci_hcd: connection reset by peer [ 987.258851][ T977] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 987.268663][T17147] vhci_hcd: stop threads [ 987.278935][T17147] vhci_hcd: release socket [ 987.293397][T17147] vhci_hcd: disconnect device [ 987.318878][ T977] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.359086][ T5839] vhci_hcd: vhci_device speed not set [ 987.401678][ T977] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 987.412958][ T977] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 987.426630][ T977] usb 7-1: Manufacturer: syz [ 987.460704][ T977] usb 7-1: config 0 descriptor?? [ 987.951015][ T977] rc_core: IR keymap rc-hauppauge not found [ 987.956930][ T977] Registered IR keymap rc-empty [ 987.987344][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.019165][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.070482][ T977] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 988.084111][ T977] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input77 [ 988.319647][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.327238][T14904] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 988.441001][T14904] usb 2-1: USB disconnect, device number 87 [ 988.449777][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.482242][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.509394][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.539172][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 988.558909][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 989.209165][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 989.388901][T14904] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 989.503786][T18300] netlink: 'syz.4.2954': attribute type 5 has an invalid length. [ 989.526550][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 989.559101][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 989.568987][T14904] usb 2-1: Using ep0 maxpacket: 8 [ 989.592433][T14904] usb 2-1: config 0 has no interfaces? [ 989.602312][T14904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 989.612810][ T977] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 989.620239][T14904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.628653][T14904] usb 2-1: Product: syz [ 989.638043][T14904] usb 2-1: Manufacturer: syz [ 989.644285][ T977] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 989.663032][ T977] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 989.675017][T14904] usb 2-1: SerialNumber: syz [ 989.712720][T14904] usb 2-1: config 0 descriptor?? [ 989.747197][ T977] usb 7-1: USB disconnect, device number 11 [ 989.926539][T18305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2956'. [ 990.145308][ T5920] usb 2-1: USB disconnect, device number 88 [ 991.229256][ T977] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 991.368018][T13726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 991.379680][T13726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 991.388088][T13726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 991.400360][T13726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 991.416207][T13726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.436367][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 991.443910][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 991.454109][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 991.465673][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 991.474763][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 991.482637][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.578947][T14904] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 991.738859][T14904] usb 3-1: Using ep0 maxpacket: 32 [ 991.770780][T14904] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 991.780982][T14904] usb 3-1: config 0 has no interface number 0 [ 991.789913][T14904] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 991.852584][T14904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.977338][T14904] usb 3-1: Product: syz [ 991.991111][T14904] usb 3-1: Manufacturer: syz [ 992.010321][T14904] usb 3-1: SerialNumber: syz [ 992.036545][T14904] usb 3-1: config 0 descriptor?? [ 992.067203][T14904] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 992.148379][T18335] chnl_net:caif_netlink_parms(): no params data found [ 992.230079][T17146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 992.262738][T17146] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 992.352976][T14904] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 992.407851][T14904] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 992.515688][T17146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 992.534855][T17146] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 992.590077][ T5920] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 992.703179][T17146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 992.713773][T17146] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 992.735381][T18335] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.742926][T18335] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.744723][T18332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.754755][T18335] bridge_slave_0: entered allmulticast mode [ 992.770336][T18335] bridge_slave_0: entered promiscuous mode [ 992.780520][T18335] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.788112][T18335] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.789894][ T5920] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.796582][T18335] bridge_slave_1: entered allmulticast mode [ 992.815521][T18335] bridge_slave_1: entered promiscuous mode [ 992.819237][T18332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.835597][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.856497][ T5920] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 992.867413][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 992.869945][ T10] usb 3-1: USB disconnect, device number 40 [ 992.896591][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 992.906415][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 992.943567][ T5920] usb 7-1: SerialNumber: syz [ 992.988407][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 993.029292][ T10] quatech2 3-1:0.51: device disconnected [ 993.039475][T17146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 993.054465][T17146] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 993.065892][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.072633][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.215582][ T5920] usb 7-1: 0:2 : does not exist [ 993.227000][T18335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.255059][T18335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.543814][T13726] Bluetooth: hci5: command tx timeout [ 993.613341][T18335] team0: Port device team_slave_0 added [ 993.621217][T18335] team0: Port device team_slave_1 added [ 993.670477][ T5920] usb 7-1: unit 5: unexpected type 0x0b [ 993.722157][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 993.746074][ T977] usb 2-1: no configurations [ 993.763432][ T977] usb 2-1: can't read configurations, error -22 [ 993.784679][ T5920] usb 7-1: USB disconnect, device number 12 [ 993.809054][T18335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.816205][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.927806][T18335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.948307][T18335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.983830][T12383] udevd[12383]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.001113][T18335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.073063][T18335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.266356][T18362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2970'. [ 994.279157][ T977] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 994.452822][ T977] usb 2-1: config index 0 descriptor too short (expected 64736, got 72) [ 994.482016][ T977] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 994.491368][T18335] hsr_slave_0: entered promiscuous mode [ 994.492402][T18335] hsr_slave_1: entered promiscuous mode [ 994.506145][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.532196][T18335] debugfs: 'hsr0' already exists in 'hsr' [ 994.538015][ T977] usb 2-1: Product: syz [ 994.549036][ T977] usb 2-1: Manufacturer: syz [ 994.552878][T18335] Cannot create hsr debugfs directory [ 994.560615][ T977] usb 2-1: SerialNumber: syz [ 994.593557][ T977] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 994.642809][T14904] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 994.672925][T18374] netlink: 'syz.7.2973': attribute type 1 has an invalid length. [ 994.856813][ C1] usb 2-1: ath: unknown panic pattern! [ 994.924769][T18382] syzkaller1: entered promiscuous mode [ 994.937848][T18382] syzkaller1: entered allmulticast mode [ 995.060025][ T5924] usb 2-1: USB disconnect, device number 90 [ 995.554400][T17146] bond1 (unregistering): (slave gretap2): Releasing active interface [ 995.610184][T13726] Bluetooth: hci5: command tx timeout [ 995.768945][T14904] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 995.794307][T17146] team0: Port device geneve0 removed [ 995.918443][T14904] ath9k_htc: Failed to initialize the device [ 995.954023][ T5924] usb 2-1: ath9k_htc: USB layer deinitialized [ 996.239491][T17146] bond0 (unregistering): Released all slaves [ 996.263991][T17146] bond1 (unregistering): Released all slaves [ 996.368866][ T5924] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 996.603667][ T5924] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 997.004517][ T5924] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 997.117009][ T5924] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.146305][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.467185][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'. [ 997.559406][T18399] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 997.705448][T13726] Bluetooth: hci5: command tx timeout [ 998.395676][T17146] tipc: Left network mode [ 998.887901][ T5924] usb 2-1: USB disconnect, device number 91 [ 999.504958][T17146] hsr_slave_0: left promiscuous mode [ 999.527288][T17146] hsr_slave_1: left promiscuous mode [ 999.779488][T13726] Bluetooth: hci5: command tx timeout [ 1001.329092][ T5920] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1001.514846][ T5920] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1001.531231][ T5920] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1001.543512][ T5920] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1001.556432][ T5920] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1001.568044][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.570997][T17146] lo (unregistering): left allmulticast mode [ 1001.582465][ T5920] usb 7-1: Product: syz [ 1001.586646][ T5920] usb 7-1: Manufacturer: syz [ 1001.593138][ T5920] usb 7-1: SerialNumber: syz [ 1001.598612][T18335] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1001.601328][ T5920] usb 7-1: config 0 descriptor?? [ 1001.623571][T18472] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1001.644217][T18472] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1001.652232][T18335] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1001.662826][ T5920] usb 7-1: ucan: probing device on interface #0 [ 1001.665508][T18335] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1001.685593][T18335] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1001.863250][ T5920] usb 7-1: ucan: device protocol version 0 is not supported [ 1001.885403][ T5920] usb 7-1: ucan: probe failed; try to update the device firmware [ 1002.083727][T18335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.168213][T18335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.252605][T17146] IPVS: stop unused estimator thread 0... [ 1002.323475][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2995'. [ 1002.364223][T17063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.371455][T17063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.395935][T17063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.403100][T17063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.978889][ T5920] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1003.226210][ T5920] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.236738][ T5920] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1003.270640][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1003.283505][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.549683][T18512] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1003.583382][T18335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.880515][T18335] veth0_vlan: entered promiscuous mode [ 1004.017911][T18335] veth1_vlan: entered promiscuous mode [ 1004.095343][T18335] veth0_macvtap: entered promiscuous mode [ 1004.121697][T14904] usb 7-1: USB disconnect, device number 13 [ 1004.158249][T18335] veth1_macvtap: entered promiscuous mode [ 1004.242701][T18335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.315270][T18335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.346142][T14554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.374491][T14554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.392087][T14554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.539686][T14554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.874710][T14554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.918344][T14554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.954736][T17063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.964639][T17063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.858355][ T10] usb 2-1: USB disconnect, device number 92 [ 1005.931042][ T5920] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1006.116775][ T5920] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1006.145098][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.208286][ T5920] usb 3-1: config 0 descriptor?? [ 1006.266625][ T5920] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1006.299929][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'. [ 1006.367557][T18561] team_slave_0: entered promiscuous mode [ 1006.373732][T18561] team_slave_1: entered promiscuous mode [ 1006.492888][T18561] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1006.510289][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1006.510306][ T30] audit: type=1326 audit(1759398114.234:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1006.551939][ T30] audit: type=1326 audit(1759398114.234:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1006.667331][ T5920] cpia1 3-1:0.0: unexpected state after lo power cmd: 01 [ 1006.683004][ T30] audit: type=1326 audit(1759398114.234:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1006.745585][ T30] audit: type=1326 audit(1759398114.234:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1006.833971][ T30] audit: type=1326 audit(1759398114.234:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1006.959206][ T30] audit: type=1326 audit(1759398114.234:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1006.985089][ T30] audit: type=1326 audit(1759398114.294:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1007.037588][ T30] audit: type=1326 audit(1759398114.294:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18562 comm="syz.1.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f576c58eec9 code=0x7ffc0000 [ 1007.420646][ T5924] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1007.598953][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1007.619089][ T5924] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1007.643330][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.833787][ T5924] usb 5-1: Product: syz [ 1007.858924][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1007.916660][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.951241][ T5924] usb 5-1: Manufacturer: syz [ 1007.956102][ T5920] gspca_cpia1: usb_control_msg 01, error -110 [ 1007.970947][ T10] usb 7-1: config 0 has no interfaces? [ 1008.025489][ T5924] usb 5-1: SerialNumber: syz [ 1008.030451][ T5920] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1008.050167][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1008.121311][ T5924] usb 5-1: config 0 descriptor?? [ 1008.130581][ T10] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1008.224243][ T10] usb 7-1: Manufacturer: syz [ 1008.333085][ T10] usb 7-1: config 0 descriptor?? [ 1008.603293][ T43] usb 3-1: USB disconnect, device number 41 [ 1008.615684][ T5924] usb 5-1: Firmware version (0.0) predates our first public release. [ 1008.894230][ T5924] usb 5-1: Please update to version 0.2 or newer [ 1009.422623][ T5924] usb 5-1: USB disconnect, device number 71 [ 1009.866584][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3015'. [ 1009.899144][ T30] audit: type=1326 audit(1759398117.614:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18609 comm="syz.2.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 1009.991028][ T30] audit: type=1326 audit(1759398117.614:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18609 comm="syz.2.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb86c18eec9 code=0x7ffc0000 [ 1010.985731][ T10] usb 7-1: USB disconnect, device number 14 [ 1011.409298][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1011.570971][ T10] usb 7-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1011.607067][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.652595][ T10] usb 7-1: config 0 descriptor?? [ 1011.979007][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1012.139248][ T977] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1012.147005][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1012.155651][ T43] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 1012.169148][ T43] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 1012.180266][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 1012.208937][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 1012.218354][ T43] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1012.227140][ T43] usb 3-1: Product: syz [ 1012.231635][ T43] usb 3-1: SerialNumber: syz [ 1012.251384][ T43] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1012.260468][ T43] r8152-cfgselector 3-1: config 0 descriptor?? [ 1012.277579][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1012.285052][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1012.296767][ T10] usb 7-1: USB disconnect, device number 15 [ 1012.314418][ T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.336128][ T977] usb 2-1: config 0 has no interface number 0 [ 1012.347172][ T977] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1012.357448][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.365831][ T977] usb 2-1: Product: syz [ 1012.370708][ T977] usb 2-1: Manufacturer: syz [ 1012.375454][ T977] usb 2-1: SerialNumber: syz [ 1012.479690][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 1012.490769][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1012.512057][ T977] usb 2-1: config 0 descriptor?? [ 1012.531761][ T43] r8152-cfgselector 3-1: USB disconnect, device number 42 [ 1012.724034][ T977] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1012.737581][ T977] usb 2-1: USB disconnect, device number 93 [ 1013.258834][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1013.258971][ T43] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1013.408813][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1013.417442][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.429292][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1013.442237][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.453283][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.453336][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1013.453359][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.456742][ T10] usb 3-1: config 0 descriptor?? [ 1013.494714][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.507952][ T43] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1013.521678][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.543843][ T10] hub 3-1:0.0: USB hub found [ 1013.547789][ T43] usb 5-1: config 0 descriptor?? [ 1013.553657][ T977] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1013.708918][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 1013.717177][ T977] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1013.728924][ T977] usb 2-1: config 0 has no interface number 0 [ 1013.735128][ T977] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1013.750236][ T977] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1013.759925][ T10] hub 3-1:0.0: 1 port detected [ 1013.771725][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.786026][ T977] usb 2-1: Product: syz [ 1013.804081][ T977] usb 2-1: Manufacturer: syz [ 1013.814975][ T977] usb 2-1: SerialNumber: syz [ 1013.825032][ T977] usb 2-1: config 0 descriptor?? [ 1013.840973][ T977] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1013.852591][ T977] em28xx 2-1:0.89: Video interface 89 found: bulk [ 1013.967870][T18664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.976983][T18664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.000811][T18664] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1014.007354][T18664] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1014.016761][T18664] vhci_hcd vhci_hcd.0: Device attached [ 1014.089341][ T43] hid-multitouch 0003:1FD2:6007.0044: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 1014.132187][T18664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.177880][T18664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.189045][T14904] vhci_hcd: vhci_device speed not set [ 1014.270081][T14904] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 1014.288080][ T43] usb 5-1: USB disconnect, device number 72 [ 1014.322438][T18670] vhci_hcd: connection reset by peer [ 1014.335858][T14554] vhci_hcd: stop threads [ 1014.343061][T18673] fido_id[18673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1014.358923][T14554] vhci_hcd: release socket [ 1014.368273][T14554] vhci_hcd: disconnect device [ 1014.385119][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1014.391937][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1014.407311][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1014.426343][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1014.457670][ T977] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1014.476436][ T10] usb 3-1: USB disconnect, device number 43 [ 1015.068628][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 1015.091212][ T977] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=185) [ 1015.130370][ T977] em28xx 2-1:0.89: board has no eeprom [ 1015.579290][ T977] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1015.586519][ T977] em28xx 2-1:0.89: analog set to bulk mode. [ 1015.624623][ T43] em28xx 2-1:0.89: Registering V4L2 extension [ 1015.705697][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.750389][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.869933][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1015.883493][ T977] usb 2-1: USB disconnect, device number 94 [ 1015.889689][ T43] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1015.914131][ T977] em28xx 2-1:0.89: Disconnecting em28xx [ 1015.926185][ T43] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1015.952899][ T43] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1015.964767][ T43] em28xx 2-1:0.89: No AC97 audio processor [ 1015.991215][ T43] usb 2-1: Decoder not found [ 1016.009563][ T43] em28xx 2-1:0.89: failed to create media graph [ 1016.042288][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1016.057626][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.069035][ T43] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1016.083889][ T10] usb 7-1: Product: syz [ 1016.101563][ T10] usb 7-1: Manufacturer: syz [ 1016.129539][ T10] usb 7-1: SerialNumber: syz [ 1016.144068][ T43] em28xx 2-1:0.89: Registering snapshot button... [ 1016.144581][T18714] ================================================================== [ 1016.158668][T18714] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 1016.166054][T18714] Read of size 8 at addr ffff888051d94740 by task v4l_id/18714 [ 1016.173601][T18714] [ 1016.175933][T18714] CPU: 0 UID: 0 PID: 18714 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1016.175951][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1016.175961][T18714] Call Trace: [ 1016.175968][T18714] [ 1016.175975][T18714] dump_stack_lvl+0x189/0x250 [ 1016.175996][T18714] ? rcu_is_watching+0x15/0xb0 [ 1016.176012][T18714] ? __kasan_check_byte+0x12/0x40 [ 1016.176031][T18714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.176047][T18714] ? rcu_is_watching+0x15/0xb0 [ 1016.176062][T18714] ? lock_release+0x4b/0x3e0 [ 1016.176078][T18714] ? __virt_addr_valid+0x1c8/0x5c0 [ 1016.176097][T18714] ? __virt_addr_valid+0x4a5/0x5c0 [ 1016.176116][T18714] print_report+0xca/0x240 [ 1016.176132][T18714] ? v4l2_fh_open+0xc7/0x430 [ 1016.176146][T18714] kasan_report+0x118/0x150 [ 1016.176164][T18714] ? v4l2_fh_open+0xc7/0x430 [ 1016.176180][T18714] v4l2_fh_open+0xc7/0x430 [ 1016.176195][T18714] em28xx_v4l2_open+0x157/0x9a0 [ 1016.176219][T18714] v4l2_open+0x20c/0x360 [ 1016.176235][T18714] chrdev_open+0x4c9/0x5e0 [ 1016.176255][T18714] ? __pfx_chrdev_open+0x10/0x10 [ 1016.176274][T18714] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1016.176296][T18714] ? __pfx_chrdev_open+0x10/0x10 [ 1016.176313][T18714] do_dentry_open+0x953/0x13f0 [ 1016.176331][T18714] vfs_open+0x3b/0x340 [ 1016.176342][T18714] ? path_openat+0x2ecd/0x3830 [ 1016.176358][T18714] path_openat+0x2ee5/0x3830 [ 1016.176372][T18714] ? arch_stack_walk+0xfc/0x150 [ 1016.176395][T18714] ? stack_depot_save_flags+0x40/0x860 [ 1016.176419][T18714] ? __pfx_path_openat+0x10/0x10 [ 1016.176433][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.176454][T18714] do_filp_open+0x1fa/0x410 [ 1016.176468][T18714] ? __lock_acquire+0xab9/0xd20 [ 1016.176483][T18714] ? __pfx_do_filp_open+0x10/0x10 [ 1016.176505][T18714] ? _raw_spin_unlock+0x28/0x50 [ 1016.176524][T18714] ? alloc_fd+0x64c/0x6c0 [ 1016.176545][T18714] do_sys_openat2+0x121/0x1c0 [ 1016.176560][T18714] ? __pfx_do_sys_openat2+0x10/0x10 [ 1016.176573][T18714] ? exc_page_fault+0x76/0xf0 [ 1016.176589][T18714] ? do_user_addr_fault+0xc85/0x1380 [ 1016.176605][T18714] __x64_sys_openat+0x138/0x170 [ 1016.176621][T18714] do_syscall_64+0xfa/0x3b0 [ 1016.176640][T18714] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.176653][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.176667][T18714] ? clear_bhb_loop+0x60/0xb0 [ 1016.176682][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.176696][T18714] RIP: 0033:0x7f12902a7407 [ 1016.176710][T18714] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1016.176728][T18714] RSP: 002b:00007ffcd7dc9790 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1016.176744][T18714] RAX: ffffffffffffffda RBX: 00007f12909f0880 RCX: 00007f12902a7407 [ 1016.176755][T18714] RDX: 0000000000000000 RSI: 00007ffcd7dc9f1b RDI: ffffffffffffff9c [ 1016.176765][T18714] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1016.176774][T18714] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1016.176783][T18714] R13: 00007ffcd7dc99e0 R14: 00007f1290b57000 R15: 000055de2be674d8 [ 1016.176799][T18714] [ 1016.176805][T18714] [ 1016.485160][T18714] Allocated by task 43: [ 1016.489298][T18714] kasan_save_track+0x3e/0x80 [ 1016.493966][T18714] __kasan_kmalloc+0x93/0xb0 [ 1016.498550][T18714] __kmalloc_cache_noprof+0x230/0x3d0 [ 1016.503912][T18714] em28xx_v4l2_init+0x10b/0x2e70 [ 1016.508850][T18714] em28xx_init_extension+0x11d/0x1c0 [ 1016.514121][T18714] process_scheduled_works+0xade/0x17b0 [ 1016.519665][T18714] worker_thread+0x8a0/0xda0 [ 1016.524306][T18714] kthread+0x711/0x8a0 [ 1016.528362][T18714] ret_from_fork+0x436/0x7d0 [ 1016.533036][T18714] ret_from_fork_asm+0x1a/0x30 [ 1016.537789][T18714] [ 1016.540095][T18714] Freed by task 43: [ 1016.543980][T18714] kasan_save_track+0x3e/0x80 [ 1016.548644][T18714] kasan_save_free_info+0x46/0x50 [ 1016.553654][T18714] __kasan_slab_free+0x5b/0x80 [ 1016.558409][T18714] kfree+0x18e/0x440 [ 1016.562300][T18714] em28xx_v4l2_init+0x1683/0x2e70 [ 1016.567404][T18714] em28xx_init_extension+0x11d/0x1c0 [ 1016.572674][T18714] process_scheduled_works+0xade/0x17b0 [ 1016.578208][T18714] worker_thread+0x8a0/0xda0 [ 1016.582798][T18714] kthread+0x711/0x8a0 [ 1016.586853][T18714] ret_from_fork+0x436/0x7d0 [ 1016.591426][T18714] ret_from_fork_asm+0x1a/0x30 [ 1016.596179][T18714] [ 1016.598483][T18714] The buggy address belongs to the object at ffff888051d94000 [ 1016.598483][T18714] which belongs to the cache kmalloc-8k of size 8192 [ 1016.612615][T18714] The buggy address is located 1856 bytes inside of [ 1016.612615][T18714] freed 8192-byte region [ffff888051d94000, ffff888051d96000) [ 1016.626686][T18714] [ 1016.629006][T18714] The buggy address belongs to the physical page: [ 1016.635410][T18714] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51d90 [ 1016.645393][T18714] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1016.653893][T18714] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1016.661422][T18714] page_type: f5(slab) [ 1016.665390][T18714] raw: 00fff00000000040 ffff88801a042280 ffffea0000a29a00 0000000000000002 [ 1016.674086][T18714] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1016.682682][T18714] head: 00fff00000000040 ffff88801a042280 ffffea0000a29a00 0000000000000002 [ 1016.691454][T18714] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 1016.700110][T18714] head: 00fff00000000003 ffffea0001476401 00000000ffffffff 00000000ffffffff [ 1016.708775][T18714] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1016.717427][T18714] page dumped because: kasan: bad access detected [ 1016.723831][T18714] page_owner tracks the page as allocated [ 1016.729526][T18714] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 16505, tgid 16504 (syz.1.2499), ts 873042999697, free_ts 873042572590 [ 1016.752700][T18714] post_alloc_hook+0x240/0x2a0 [ 1016.757548][T18714] get_page_from_freelist+0x21e4/0x22c0 [ 1016.763106][T18714] __alloc_frozen_pages_noprof+0x181/0x370 [ 1016.768903][T18714] alloc_pages_mpol+0x232/0x4a0 [ 1016.773740][T18714] allocate_slab+0x8a/0x370 [ 1016.778223][T18714] ___slab_alloc+0xbeb/0x1420 [ 1016.782888][T18714] __kmalloc_cache_noprof+0x296/0x3d0 [ 1016.788242][T18714] audit_log_d_path+0xb8/0x1a0 [ 1016.792995][T18714] audit_log_d_path_exe+0x42/0x70 [ 1016.798005][T18714] audit_log_task+0x2b3/0x3c0 [ 1016.802667][T18714] audit_seccomp+0x86/0x190 [ 1016.807156][T18714] __seccomp_filter+0xce4/0x1e10 [ 1016.812082][T18714] syscall_trace_enter+0xaa/0x160 [ 1016.817090][T18714] do_syscall_64+0xd3/0x3b0 [ 1016.821582][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.827526][T18714] page last free pid 16505 tgid 16504 stack trace: [ 1016.834019][T18714] __free_frozen_pages+0xbc4/0xd30 [ 1016.839120][T18714] __slab_free+0x303/0x3c0 [ 1016.843519][T18714] qlist_free_all+0x97/0x140 [ 1016.848092][T18714] kasan_quarantine_reduce+0x148/0x160 [ 1016.853624][T18714] __kasan_slab_alloc+0x22/0x80 [ 1016.858472][T18714] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 1016.864370][T18714] __alloc_skb+0x112/0x2d0 [ 1016.868874][T18714] audit_log_start+0x1ad/0xa20 [ 1016.873898][T18714] audit_seccomp+0x64/0x190 [ 1016.878394][T18714] __seccomp_filter+0xce4/0x1e10 [ 1016.883319][T18714] syscall_trace_enter+0xaa/0x160 [ 1016.888334][T18714] do_syscall_64+0xd3/0x3b0 [ 1016.892821][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.898698][T18714] [ 1016.901008][T18714] Memory state around the buggy address: [ 1016.906618][T18714] ffff888051d94600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.914660][T18714] ffff888051d94680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.922702][T18714] >ffff888051d94700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.930747][T18714] ^ [ 1016.936884][T18714] ffff888051d94780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.944925][T18714] ffff888051d94800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1016.952964][T18714] ================================================================== [ 1016.984138][ T43] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input78 [ 1017.063605][ T43] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1017.097944][ T977] em28xx 2-1:0.89: Closing input extension [ 1017.116427][ T977] em28xx 2-1:0.89: Deregistering snapshot button [ 1017.254518][T18714] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1017.261781][T18714] CPU: 1 UID: 0 PID: 18714 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 1017.270799][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1017.280836][T18714] Call Trace: [ 1017.284122][T18714] [ 1017.287048][T18714] dump_stack_lvl+0x99/0x250 [ 1017.291636][T18714] ? __asan_memcpy+0x40/0x70 [ 1017.296214][T18714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1017.301406][T18714] ? __pfx__printk+0x10/0x10 [ 1017.306020][T18714] vpanic+0x281/0x750 [ 1017.310029][T18714] ? preempt_schedule+0xae/0xc0 [ 1017.314900][T18714] ? __pfx_vpanic+0x10/0x10 [ 1017.319421][T18714] ? preempt_schedule_common+0x83/0xd0 [ 1017.324900][T18714] ? preempt_schedule+0xae/0xc0 [ 1017.329766][T18714] ? __pfx_preempt_schedule+0x10/0x10 [ 1017.335149][T18714] panic+0xb9/0xc0 [ 1017.338898][T18714] ? __pfx_panic+0x10/0x10 [ 1017.343332][T18714] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1017.349241][T18714] ? v4l2_fh_open+0xc7/0x430 [ 1017.353836][T18714] check_panic_on_warn+0x89/0xb0 [ 1017.358783][T18714] ? v4l2_fh_open+0xc7/0x430 [ 1017.363377][T18714] end_report+0x78/0x160 [ 1017.367628][T18714] kasan_report+0x129/0x150 [ 1017.372227][T18714] ? v4l2_fh_open+0xc7/0x430 [ 1017.377009][T18714] v4l2_fh_open+0xc7/0x430 [ 1017.381429][T18714] em28xx_v4l2_open+0x157/0x9a0 [ 1017.386301][T18714] v4l2_open+0x20c/0x360 [ 1017.391001][T18714] chrdev_open+0x4c9/0x5e0 [ 1017.395485][T18714] ? __pfx_chrdev_open+0x10/0x10 [ 1017.400520][T18714] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 1017.406877][T18714] ? __pfx_chrdev_open+0x10/0x10 [ 1017.411828][T18714] do_dentry_open+0x953/0x13f0 [ 1017.416784][T18714] vfs_open+0x3b/0x340 [ 1017.420884][T18714] ? path_openat+0x2ecd/0x3830 [ 1017.425660][T18714] path_openat+0x2ee5/0x3830 [ 1017.430258][T18714] ? arch_stack_walk+0xfc/0x150 [ 1017.435213][T18714] ? stack_depot_save_flags+0x40/0x860 [ 1017.440688][T18714] ? __pfx_path_openat+0x10/0x10 [ 1017.445627][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.451800][T18714] do_filp_open+0x1fa/0x410 [ 1017.456318][T18714] ? __lock_acquire+0xab9/0xd20 [ 1017.461179][T18714] ? __pfx_do_filp_open+0x10/0x10 [ 1017.466224][T18714] ? _raw_spin_unlock+0x28/0x50 [ 1017.471087][T18714] ? alloc_fd+0x64c/0x6c0 [ 1017.475454][T18714] do_sys_openat2+0x121/0x1c0 [ 1017.480132][T18714] ? __pfx_do_sys_openat2+0x10/0x10 [ 1017.485332][T18714] ? exc_page_fault+0x76/0xf0 [ 1017.490024][T18714] ? do_user_addr_fault+0xc85/0x1380 [ 1017.495312][T18714] __x64_sys_openat+0x138/0x170 [ 1017.500167][T18714] do_syscall_64+0xfa/0x3b0 [ 1017.504673][T18714] ? lockdep_hardirqs_on+0x9c/0x150 [ 1017.509881][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.515957][T18714] ? clear_bhb_loop+0x60/0xb0 [ 1017.520640][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.526541][T18714] RIP: 0033:0x7f12902a7407 [ 1017.531409][T18714] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1017.551023][T18714] RSP: 002b:00007ffcd7dc9790 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1017.559458][T18714] RAX: ffffffffffffffda RBX: 00007f12909f0880 RCX: 00007f12902a7407 [ 1017.567436][T18714] RDX: 0000000000000000 RSI: 00007ffcd7dc9f1b RDI: ffffffffffffff9c [ 1017.575498][T18714] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1017.583480][T18714] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1017.591461][T18714] R13: 00007ffcd7dc99e0 R14: 00007f1290b57000 R15: 000055de2be674d8 [ 1017.599541][T18714] [ 1017.602811][T18714] Kernel Offset: disabled [ 1017.607120][T18714] Rebooting in 86400 seconds..