last executing test programs: 22m51.335470252s ago: executing program 32 (id=2066): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 20m51.718827299s ago: executing program 33 (id=2407): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x1000003, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x111, 0x0, 0x0, &(0x7f0000000280)) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000e0ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 9m16.768882427s ago: executing program 34 (id=4450): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 8m51.580260111s ago: executing program 35 (id=4482): mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x104, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x0}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x5efe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x100000000, 0x8, 0x0, 0x100000, 0x0, 0x2, 0x8000000, 0x7, 0x7, 0xfffffffffffffffe], 0x80a0000}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0xfffffffffffffe57) 8m51.48507224s ago: executing program 36 (id=4486): r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, 0x0}) 8m51.427423019s ago: executing program 37 (id=4483): sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x20000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x4, 0x8c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback, 0x5}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) chdir(0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8m51.342842154s ago: executing program 38 (id=4487): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioprio_get$uid(0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r5, &(0x7f00000004c0)={0x2, 0x20, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x5, 0x6, 0x5, 0x9}, {0x7, 0x7a, 0x3, 0xfffffff8}, {0x80b9, 0x7, 0x6, 0x4}, {0x2, 0x40, 0x44}]}) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x48005) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 8m10.715980154s ago: executing program 8 (id=4560): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009800)="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", 0x2000, 0x0) fsync(r6) ftruncate(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, 0x0) shutdown(r7, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f00000000c0)=""/170) 8m4.963982756s ago: executing program 8 (id=4580): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8m4.725618352s ago: executing program 8 (id=4588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000e27f000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 8m4.543209833s ago: executing program 8 (id=4593): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 8m4.374566854s ago: executing program 8 (id=4598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m4.016438746s ago: executing program 39 (id=4599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="40ee00"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 8m3.956388213s ago: executing program 8 (id=4603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 8m3.727345795s ago: executing program 40 (id=4601): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 8m3.700860841s ago: executing program 41 (id=4602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 8m3.678962216s ago: executing program 42 (id=4603): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 7m39.939433679s ago: executing program 2 (id=4669): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd23, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x40000000000009, 0x6, 0x0, 0x3}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x4, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe}) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7m37.876555699s ago: executing program 2 (id=4672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer], 0x0, 0x0, 0x0}) 7m37.780869139s ago: executing program 2 (id=4673): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa0100ff}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_clone3(0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) 7m37.154167581s ago: executing program 6 (id=4680): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mknod$loop(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586", 0xd, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="12010000c7ce360863078020abd0010203010902120001000000000904000000ff"], 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x40080) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r8, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, 0x0, 0x20004000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) 7m34.347730795s ago: executing program 2 (id=4689): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) 7m33.909810817s ago: executing program 2 (id=4690): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$FUSE(r5, &(0x7f0000003600)={0x2020}, 0x2020) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000000c0)='.\x00', 0x5000009) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x7) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r8}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r8, 0x9dffffff}}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x9910, r4, 0x6b115000) clock_adjtime(0x0, &(0x7f0000000e00)={0xa627, 0x0, 0x100000000000000, 0xc8d, 0x0, 0x0, 0xdb0a, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x88}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x400040) 7m33.373504627s ago: executing program 2 (id=4691): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x402, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$nl_route(0x10, 0x3, 0x0) 7m33.219429409s ago: executing program 43 (id=4691): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffe, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000004c0)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x402, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) socket$nl_route(0x10, 0x3, 0x0) 7m33.034131935s ago: executing program 6 (id=4693): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x800, 0x5, 0x32c}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m32.72869724s ago: executing program 6 (id=4694): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) unshare(0x80) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) 7m31.468756423s ago: executing program 6 (id=4700): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) 7m31.327855087s ago: executing program 6 (id=4702): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m30.979498912s ago: executing program 6 (id=4705): r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b0174949173922f6ee103a5a4af7b30", 0x8a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 7m30.718303695s ago: executing program 44 (id=4705): r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b0174949173922f6ee103a5a4af7b30", 0x8a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 7m20.516035128s ago: executing program 3 (id=4746): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1, r0}) shutdown(r1, 0x1) 7m20.47618915s ago: executing program 3 (id=4747): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x800, 0x5, 0x32c}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)=""/106, 0x6a}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m20.391927009s ago: executing program 3 (id=4748): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x2a, 0x57, 0x21, 0x40, 0xad15, 0x725, 0x47e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x8, 0x30, 0xb, [{{0x9, 0x4, 0x34, 0x6, 0x0, 0xe0, 0x1, 0x3, 0xe}}]}}]}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0, 0x131c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) fsopen(&(0x7f0000000180)='proc\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 7m18.949328401s ago: executing program 3 (id=4757): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r2, 0x0, r1, 0x0, 0x46) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) 7m18.948361914s ago: executing program 3 (id=4758): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) 7m16.630335235s ago: executing program 3 (id=4764): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) 7m16.421121547s ago: executing program 45 (id=4764): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)}], 0x1) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) 7m15.231761708s ago: executing program 0 (id=4768): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mknod$loop(0x0, 0x2, 0x0) renameat2(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x26}}}}}, 0x28}}, 0x4000) r8 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001280), 0x101202, 0x0) getdents(r8, &(0x7f0000000280)=""/4096, 0x9005) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 7m13.961635633s ago: executing program 0 (id=4775): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc02864cf, 0x0) 7m13.869074225s ago: executing program 0 (id=4776): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) socket(0x10, 0x2, 0x0) 7m12.457119723s ago: executing program 0 (id=4778): socket$inet6(0xa, 0x3, 0x8000000003c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x1, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) 7m12.447814503s ago: executing program 0 (id=4779): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 7m11.859566727s ago: executing program 0 (id=4781): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x10005, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7m11.256051735s ago: executing program 46 (id=4781): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x10005, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 13.279774081s ago: executing program 4 (id=7112): r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x8000000000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x80010, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f0000009800)="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", 0x2000, 0x0) fsync(r6) ftruncate(r3, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200), 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, 0x0) shutdown(r7, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a"], 0x0) semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f00000000c0)=""/170) 10.376554858s ago: executing program 5 (id=7121): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.699922024s ago: executing program 4 (id=7123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) unshare(0xa020480) socket$inet_udp(0x2, 0x2, 0x0) gettid() unshare(0x6020400) close(0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) 9.036172722s ago: executing program 5 (id=7130): openat$kvm(0xffffffffffffff9c, 0x0, 0x2c000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000005f304433b3c4d403b4c4ddca0e3cf4c122da00a646d2f5d832c05d66d0c0e7f6a1e88d3116c882674e74c604eab452ac64e43e8effe88a272982ecf2ef60b197aa20a77eb246d253986c65bb78cb8bd43cee3440b80f4fc8720bf57f597c50f8b2373f9a67f3e6511c9bcadd35d5cb65433d9e4a97b8a71c5fb1f84d973937eb4ce52122c6d0441ffca0a1bb962430859b3ebbb7782a4e014285611f3adb985f54b120b42a6b64a654918151ae42fa286de83507118c213a27209c9905c676164775c1"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.908451204s ago: executing program 4 (id=7132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) 7.095812142s ago: executing program 5 (id=7135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 6.547908804s ago: executing program 7 (id=7137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.083684878s ago: executing program 9 (id=7139): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x7f, &(0x7f0000000300)=""/127, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1c000000120a0101000000000000000005000005080003400000000964000000090a03000000000000000000030000090900010001007a300000000008000440"], 0xcc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000301010100000000000000000a0000030c0019800800020017000000300002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4851}, 0x0) 5.879978475s ago: executing program 9 (id=7140): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.525119178s ago: executing program 7 (id=7142): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x20000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) unshare(0xa020480) socket$inet_udp(0x2, 0x2, 0x0) gettid() unshare(0x6020400) close(0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) 4.541168664s ago: executing program 1 (id=7143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1}, 0x12060) 4.314326311s ago: executing program 4 (id=7144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioprio_get$uid(0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r4, &(0x7f00000004c0)={0x2, 0x20, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x5, 0x6, 0x5, 0x9}, {0x7, 0x7a, 0x3, 0xfffffff8}, {0x80b9, 0x7, 0x6, 0x4}, {0x2, 0x40, 0x44}]}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 4.188965622s ago: executing program 1 (id=7145): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r2, 0x0, 0x2) write$FUSE_INTERRUPT(r2, 0x0, 0x0) 4.163154326s ago: executing program 9 (id=7146): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', 0x0}) socket$kcm(0x10, 0x3, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x1f9, &(0x7f0000002280)={0x0, 0x11ab, 0x40, 0x1, 0xa2}) io_uring_setup(0x2ad3, &(0x7f0000002300)={0x0, 0xd4a6, 0x80, 0x0, 0x39f, 0x0, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) 3.984382571s ago: executing program 7 (id=7147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000003c0)="a750d2c528509c8fa1904611e7862e4eabe5fa8708efa91147da8ff1ed4366f5aeeba21c19e3e363aa674b8dd7cae3e47970"}, 0x20) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12020) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 3.233360215s ago: executing program 4 (id=7148): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3.145094309s ago: executing program 1 (id=7149): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 2.920026305s ago: executing program 1 (id=7150): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa0ee40000000000001400000000000c18000000000200000000000000000000001c000000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 2.760644968s ago: executing program 5 (id=7151): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x4e3, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x708, 0x41e3, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) 2.724167324s ago: executing program 1 (id=7152): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.102694417s ago: executing program 7 (id=7153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000d40)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbce", 0x2f}], 0x2}}], 0x1, 0xc000) recvmsg$unix(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1}, 0x12060) 2.046485661s ago: executing program 9 (id=7154): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0xc000) sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1}, 0x12060) 1.761042146s ago: executing program 9 (id=7155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000008c0)=""/253, 0xfd}], 0x1}, 0x12060) 1.743748638s ago: executing program 5 (id=7156): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.503654764s ago: executing program 9 (id=7157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0) 1.195226318s ago: executing program 7 (id=7158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r1, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 1.05193929s ago: executing program 1 (id=7159): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000140)={0x1, 0x1, 0xf1a, 0x38, 0x4, 0x7ff}) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 749.691881ms ago: executing program 5 (id=7160): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$FUSE(r3, &(0x7f0000003600)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x100000000) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r6}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r6, 0x9dffffff}}, 0x48) 325.474077ms ago: executing program 7 (id=7162): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=7163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t allmulticast mode [ 2007.689357][T28682] team_slave_1: left allmulticast mode [ 2007.778014][T28682] team0 (unregistering): left promiscuous mode [ 2007.784367][T28682] team_slave_0: left promiscuous mode [ 2007.790033][T28682] team_slave_1: left promiscuous mode [ 2008.020021][T28682] team0 (unregistering): Port device team_slave_0 removed [ 2008.109777][T28682] team0 (unregistering): Port device team_slave_1 removed [ 2008.961473][ T30] audit: type=1400 audit(1752276453.940:1603): avc: denied { append } for pid=28696 comm="syz.4.6159" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 2009.017289][T19384] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2009.230642][T19384] usb 2-1: Using ep0 maxpacket: 32 [ 2009.238337][T19384] usb 2-1: config 0 has an invalid interface number: 140 but max is 0 [ 2009.246659][T19384] usb 2-1: config 0 has no interface number 0 [ 2009.266896][T19384] usb 2-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db [ 2009.277599][T19384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2009.314653][T19384] usb 2-1: Product: syz [ 2009.348566][T19384] usb 2-1: Manufacturer: syz [ 2009.380405][T19384] usb 2-1: SerialNumber: syz [ 2009.398828][T19384] usb 2-1: config 0 descriptor?? [ 2009.419760][T19384] sierra 2-1:0.140: Sierra USB modem converter detected [ 2009.631264][T19384] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 2009.655259][T19384] usb 2-1: USB disconnect, device number 62 [ 2009.691229][T19384] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2009.717440][T19384] sierra 2-1:0.140: device disconnected [ 2010.404144][T28713] netlink: 'syz.1.6163': attribute type 27 has an invalid length. [ 2010.418094][T28713] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2010.425642][T28713] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2010.521180][T28715] binder: 28714:28715 ioctl c0306201 200000000240 returned -11 [ 2010.931486][T28722] input: syz0 as /devices/virtual/input/input114 [ 2011.510672][ T5902] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2011.945173][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2011.958175][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2011.979441][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2012.015398][T28735] fuse: Bad value for 'fd' [ 2012.024770][T28736] fuse: Unknown parameter 'group_id00000000000000000000' [ 2012.032807][ T5902] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2012.044173][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2012.057714][ T5902] usb 2-1: config 0 descriptor?? [ 2012.332370][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 2012.437172][T28744] kvm: pic: non byte write [ 2012.444635][T28744] kvm: vcpu 0: requested 64 ns lapic timer period limited to 200000 ns [ 2012.484151][ T5902] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2012.510563][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 2012.521402][ T10] usb 8-1: config 0 has an invalid interface number: 140 but max is 0 [ 2012.648430][ T10] usb 8-1: config 0 has no interface number 0 [ 2012.657662][ T10] usb 8-1: New USB device found, idVendor=03f0, idProduct=1e1d, bcdDevice=1c.db [ 2012.669155][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2012.682215][ T10] usb 8-1: Product: syz [ 2012.686592][ T10] usb 8-1: Manufacturer: syz [ 2012.707658][ T10] usb 8-1: SerialNumber: syz [ 2012.732124][ T10] usb 8-1: config 0 descriptor?? [ 2012.744382][ T10] sierra 8-1:0.140: Sierra USB modem converter detected [ 2012.890599][ T5902] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 2012.905336][T28752] netlink: 'syz.5.6177': attribute type 6 has an invalid length. [ 2012.913602][T28752] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6177'. [ 2012.976562][ T10] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 2012.994916][ T10] usb 8-1: USB disconnect, device number 18 [ 2013.022284][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 2013.070993][ T10] sierra 8-1:0.140: device disconnected [ 2013.090921][ T5902] usb 10-1: Using ep0 maxpacket: 32 [ 2013.103845][ T5902] usb 10-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2013.119619][ T5902] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2013.135284][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.144441][ T5902] usb 10-1: Product: syz [ 2013.148838][ T5902] usb 10-1: Manufacturer: syz [ 2013.155094][ T5902] usb 10-1: SerialNumber: syz [ 2013.196175][ T5902] usb 10-1: config 0 descriptor?? [ 2013.365580][ T5902] usb 10-1: bad CDC descriptors [ 2013.392420][ T5902] usb 10-1: unsupported MDLM descriptors [ 2014.074919][ T10] usb 2-1: USB disconnect, device number 63 [ 2014.153131][T28770] fuse: Bad value for 'fd' [ 2014.277930][T28778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6188'. [ 2015.302881][T28796] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 2015.302881][T28796] The task syz.5.6192 (28796) triggered the difference, watch for misbehavior. [ 2015.477038][ T10] usb 10-1: USB disconnect, device number 30 [ 2015.558377][T28804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6197'. [ 2015.569933][T28804] tipc: Started in network mode [ 2015.574960][T28804] tipc: Node identity 8, cluster identity 4711 [ 2015.584533][T28804] tipc: Node number set to 8 [ 2015.687186][T28812] tipc: Enabled bearer , priority 0 [ 2015.696660][T28812] tipc: Resetting bearer [ 2015.710255][T28807] tipc: Disabling bearer [ 2015.813221][T28816] netlink: 'syz.7.6199': attribute type 27 has an invalid length. [ 2015.833621][T28816] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2015.842498][T28816] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2015.873203][T28818] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2016.065198][T28823] netlink: 'syz.5.6204': attribute type 6 has an invalid length. [ 2016.107313][T28823] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6204'. [ 2016.309892][T28829] netlink: 252 bytes leftover after parsing attributes in process `syz.4.6205'. [ 2017.391217][T28847] fuse: Unknown parameter 'group_id00000000000000000000' [ 2018.946677][T28867] kvm: kvm [28866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 2018.972636][T28867] kvm: kvm [28866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2019.003161][T28867] kvm: kvm [28866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 2019.138178][T28867] kvm: kvm [28866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 2019.221117][ T10] IPVS: starting estimator thread 0... [ 2019.306457][T28867] kvm: kvm [28866]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 2019.351303][T28881] IPVS: using max 50 ests per chain, 120000 per kthread [ 2019.540659][T19384] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 2019.794380][T19384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2019.808362][T19384] usb 10-1: config 0 has no interfaces? [ 2019.857025][T28894] netlink: 'syz.7.6227': attribute type 1 has an invalid length. [ 2019.888019][T28894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2019.914639][T28894] vlan2: entered allmulticast mode [ 2019.923219][T28894] veth1: entered allmulticast mode [ 2019.934287][T28894] bond3: (slave vlan2): making interface the new active one [ 2019.943705][T28894] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 2019.976824][T28899] netlink: 'syz.5.6226': attribute type 27 has an invalid length. [ 2019.987292][T28899] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2019.995072][T28899] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2020.018872][T28900] fuse: Bad value for 'user_id' [ 2020.025865][T28900] fuse: Bad value for 'user_id' [ 2020.036069][T19384] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2020.045761][T19384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.053878][T19384] usb 10-1: Product: syz [ 2020.060110][T19384] usb 10-1: Manufacturer: syz [ 2020.065806][T19384] usb 10-1: SerialNumber: syz [ 2020.120741][T19384] usb 10-1: config 0 descriptor?? [ 2020.744894][T28903] input: syz0 as /devices/virtual/input/input115 [ 2020.929641][T28908] netlink: 'syz.5.6231': attribute type 17 has an invalid length. [ 2020.948852][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6231'. [ 2021.019906][T28912] tipc: Started in network mode [ 2021.025507][T28912] tipc: Node identity ea4fdde97ee7, cluster identity 4711 [ 2021.032856][T28912] tipc: Enabled bearer , priority 0 [ 2021.040242][T28912] syzkaller0: entered promiscuous mode [ 2021.046108][T28912] syzkaller0: entered allmulticast mode [ 2021.062984][T28911] tipc: Resetting bearer [ 2021.070582][T19384] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2021.086174][T28911] tipc: Disabling bearer [ 2021.230414][T19384] usb 2-1: Using ep0 maxpacket: 32 [ 2021.236942][T19384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2021.248408][T19384] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2021.258289][T19384] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2021.269430][T19384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.286702][T19384] usb 2-1: config 0 descriptor?? [ 2021.714932][T19384] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2021.723623][T19384] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2021.730557][T19384] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2021.737452][T19384] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2021.744448][T19384] savu 0003:1E7D:2D5A.001B: unknown main item tag 0x0 [ 2021.751392][T19384] savu 0003:1E7D:2D5A.001B: unbalanced collection at end of report description [ 2021.761227][T19384] savu 0003:1E7D:2D5A.001B: parse failed [ 2021.766970][T19384] savu 0003:1E7D:2D5A.001B: probe with driver savu failed with error -22 [ 2021.860863][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 2021.986100][T19384] usb 2-1: USB disconnect, device number 64 [ 2022.006405][T23284] usb 10-1: USB disconnect, device number 31 [ 2022.034081][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2022.056007][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2022.067812][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2022.078316][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2022.124673][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2022.140130][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.154943][ T10] usb 8-1: config 0 descriptor?? [ 2022.510538][T23284] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2022.597072][ T10] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2022.624516][T28932] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2022.730784][T23284] usb 10-1: Using ep0 maxpacket: 32 [ 2022.751516][T23284] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.807883][T23284] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2022.852413][T23284] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2022.878985][T23284] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2023.073337][T28940] netlink: 'syz.1.6241': attribute type 27 has an invalid length. [ 2023.087000][T28940] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2023.095184][T28940] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2023.103888][T23284] usb 10-1: config 0 descriptor?? [ 2023.124193][T23284] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2023.217932][T28943] netlink: 'syz.4.6243': attribute type 17 has an invalid length. [ 2023.226302][T28943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6243'. [ 2023.237164][T28944] tipc: Enabled bearer , priority 0 [ 2023.247232][T28944] syzkaller0: entered promiscuous mode [ 2023.253113][T28944] syzkaller0: entered allmulticast mode [ 2023.269089][T28942] tipc: Resetting bearer [ 2023.285081][T28942] tipc: Disabling bearer [ 2023.929528][T28964] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2024.159292][T28967] kvm: kvm [28966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 2024.470955][T28967] kvm: kvm [28966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 2024.536341][T28967] kvm: kvm [28966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 2024.550761][T28967] kvm: kvm [28966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000080 [ 2024.562700][T28967] kvm: kvm [28966]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 2024.684547][T23284] usb 8-1: USB disconnect, device number 19 [ 2024.709209][T28980] tipc: Enabled bearer , priority 0 [ 2024.718458][T28980] syzkaller0: entered promiscuous mode [ 2024.726610][T28980] syzkaller0: entered allmulticast mode [ 2024.940458][ T10] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2024.973375][T28979] tipc: Resetting bearer [ 2024.992821][T28979] tipc: Disabling bearer [ 2025.027018][T28985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6257'. [ 2025.100471][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 2025.133939][ T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 2025.142286][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2025.157430][ T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2025.170451][ T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2025.184821][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2025.228547][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2025.237875][ T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2025.247602][ T10] usb 6-1: Product: syz [ 2025.256453][ T10] usb 6-1: Manufacturer: syz [ 2025.262857][T28989] fuse: Unknown parameter '0x0000000000000004' [ 2025.269067][ T10] usb 6-1: SerialNumber: syz [ 2025.279830][ T10] usb 6-1: config 0 descriptor?? [ 2025.298583][ T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2025.337039][ T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2025.568743][T19384] usb 10-1: USB disconnect, device number 32 [ 2026.458974][T19384] usb 6-1: USB disconnect, device number 70 [ 2026.459024][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 2026.481151][T19384] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 2026.561510][T29006] bond1: (slave veth0_to_bond): Releasing active interface [ 2026.745052][T29017] tipc: Started in network mode [ 2026.767611][T29017] tipc: Node identity 6e02a2aa0502, cluster identity 4711 [ 2026.808037][T29017] tipc: Enabled bearer , priority 0 [ 2026.817495][T29019] syzkaller0: entered promiscuous mode [ 2026.826494][T29019] syzkaller0: entered allmulticast mode [ 2026.846284][T29017] tipc: Resetting bearer [ 2026.862058][T29016] tipc: Resetting bearer [ 2026.881020][T29016] tipc: Disabling bearer [ 2027.030628][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 2027.066207][T29025] fuse: Unknown parameter 'fd0x0000000000000004' [ 2027.113046][T29029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6272'. [ 2027.191764][ T10] usb 8-1: config 0 has an invalid interface number: 101 but max is 0 [ 2027.215185][ T10] usb 8-1: config 0 has no interface number 0 [ 2027.427896][ T10] usb 8-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 2027.437162][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.446549][ T10] usb 8-1: Product: syz [ 2027.450864][ T10] usb 8-1: Manufacturer: syz [ 2027.455466][ T10] usb 8-1: SerialNumber: syz [ 2027.464222][ T10] usb 8-1: config 0 descriptor?? [ 2027.475472][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 2028.146883][T19384] usb 10-1: new full-speed USB device number 33 using dummy_hcd [ 2028.190586][ T10] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 2028.197548][ T10] gspca_pac7302 8-1:0.101: probe with driver gspca_pac7302 failed with error -110 [ 2028.314241][T19384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.325891][T19384] usb 10-1: config 0 has no interfaces? [ 2028.337984][T19384] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2028.349900][T19384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.360596][T19384] usb 10-1: Product: syz [ 2028.365555][T19384] usb 10-1: Manufacturer: syz [ 2028.373520][T19384] usb 10-1: SerialNumber: syz [ 2028.382434][T19384] usb 10-1: config 0 descriptor?? [ 2029.353981][T29064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6280'. [ 2029.374213][T29064] vlan3: entered allmulticast mode [ 2029.379459][T29064] macvtap0: entered allmulticast mode [ 2029.385176][T29064] veth0_macvtap: entered allmulticast mode [ 2029.682604][ T10] usb 8-1: USB disconnect, device number 20 [ 2029.749584][T29066] tipc: Enabled bearer , priority 0 [ 2029.769583][T29066] syzkaller0: entered promiscuous mode [ 2029.785553][T29066] syzkaller0: entered allmulticast mode [ 2029.820148][T29066] tipc: Resetting bearer [ 2029.843920][T29065] tipc: Resetting bearer [ 2029.864707][T29065] tipc: Disabling bearer [ 2029.984201][T29068] netlink: 124 bytes leftover after parsing attributes in process `syz.7.6282'. [ 2030.008450][T29068] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6282'. [ 2030.059822][T29068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6282'. [ 2030.175498][T29072] fuse: Unknown parameter 'fd0x0000000000000004' [ 2030.265224][T29074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6285'. [ 2030.927498][ T5902] usb 10-1: USB disconnect, device number 33 [ 2031.175662][ T30] audit: type=1400 audit(1752276476.170:1604): avc: denied { bind } for pid=29099 comm="syz.9.6295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2031.380354][ T5902] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2031.435204][T29106] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6297'. [ 2031.486828][T29108] netlink: 'syz.1.6298': attribute type 1 has an invalid length. [ 2031.520735][T19384] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 2031.561473][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 2031.573371][ T5902] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2031.596234][T29108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2031.643870][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2031.663351][T29112] bond3: (slave veth13): Enslaving as an active interface with a down link [ 2031.693291][ T5902] usb 6-1: Product: syz [ 2031.708243][ T5902] usb 6-1: Manufacturer: syz [ 2031.723718][T19384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2031.740674][ T5902] usb 6-1: SerialNumber: syz [ 2031.783801][ T5902] usb 6-1: config 0 descriptor?? [ 2031.788886][T19384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2031.813739][ T5902] gspca_main: se401-2.14.0 probing 047d:5003 [ 2031.820194][T19384] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2031.835454][T19384] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2031.844764][T19384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.866802][T19384] usb 8-1: config 0 descriptor?? [ 2032.247228][ T5902] gspca_se401: Wrong descriptor type [ 2032.455822][ T5902] usb 6-1: USB disconnect, device number 71 [ 2034.183781][T19384] usbhid 8-1:0.0: can't add hid device: -71 [ 2034.193807][T19384] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2034.244651][T19384] usb 8-1: USB disconnect, device number 21 [ 2034.278715][T29153] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6311'. [ 2034.433144][T29155] netlink: 'syz.7.6312': attribute type 1 has an invalid length. [ 2034.463943][T29155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2034.500152][T29155] bond4: (slave veth9): Enslaving as an active interface with a down link [ 2034.519794][ T30] audit: type=1400 audit(1752276479.520:1605): avc: denied { shutdown } for pid=29159 comm="syz.5.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2034.617179][T29162] tipc: Enabled bearer , priority 0 [ 2034.626951][T29162] syzkaller0: entered promiscuous mode [ 2034.633423][T29162] syzkaller0: entered allmulticast mode [ 2034.647118][T29162] tipc: Resetting bearer [ 2034.655781][T29161] tipc: Resetting bearer [ 2034.675442][T29161] tipc: Disabling bearer [ 2035.030577][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 2035.351948][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 2035.360210][ T10] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2035.369433][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.377454][ T10] usb 8-1: Product: syz [ 2035.382565][ T10] usb 8-1: Manufacturer: syz [ 2035.387140][ T10] usb 8-1: SerialNumber: syz [ 2035.393638][ T10] usb 8-1: config 0 descriptor?? [ 2035.434614][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 2035.715323][ T5902] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2035.771469][T29189] fuse: Bad value for 'user_id' [ 2035.776440][T29189] fuse: Bad value for 'user_id' [ 2035.812014][ T10] gspca_se401: Wrong descriptor type [ 2035.826636][T29192] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2035.913587][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2035.936903][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2035.948596][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2035.968163][ T5902] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2035.981983][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.999608][ T5902] usb 2-1: config 0 descriptor?? [ 2036.014273][ T10] usb 8-1: USB disconnect, device number 22 [ 2036.406580][T29196] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6328'. [ 2036.878674][ T30] audit: type=1400 audit(1752276481.860:1606): avc: denied { bind } for pid=29202 comm="syz.7.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2036.912744][ T30] audit: type=1400 audit(1752276481.860:1607): avc: denied { listen } for pid=29202 comm="syz.7.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2037.190695][T23220] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2037.235038][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.241770][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.340684][T23220] usb 10-1: Using ep0 maxpacket: 8 [ 2037.347462][T23220] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2037.355156][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2037.366783][T23220] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2037.396867][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2037.429651][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2037.444107][T23220] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2037.451808][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2037.463421][T23220] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2037.475684][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2037.487005][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2037.502295][T23220] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 2037.511563][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2037.523010][T23220] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2037.540203][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2037.552128][T23220] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2037.593944][T23220] usb 10-1: string descriptor 0 read error: -22 [ 2037.606894][T23220] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2037.616480][T23220] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.634372][T23220] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2037.889100][T19384] usb 10-1: USB disconnect, device number 34 [ 2038.380077][ T5902] usbhid 2-1:0.0: can't add hid device: -71 [ 2038.394958][ T5902] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2038.419992][ T5902] usb 2-1: USB disconnect, device number 65 [ 2038.533584][T29224] syzkaller1: entered promiscuous mode [ 2038.539056][T29224] syzkaller1: entered allmulticast mode [ 2039.259023][T17104] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 2039.509744][T29237] fuse: Bad value for 'user_id' [ 2039.514977][T29237] fuse: Bad value for 'user_id' [ 2039.532009][T17104] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2039.550347][T17104] usb 10-1: config 0 has no interfaces? [ 2039.577182][T17104] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2039.668391][T17104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.790685][T17104] usb 10-1: Product: syz [ 2039.794973][T17104] usb 10-1: Manufacturer: syz [ 2039.799644][T17104] usb 10-1: SerialNumber: syz [ 2039.958934][T17104] usb 10-1: config 0 descriptor?? [ 2040.579127][T29254] netlink: 'syz.7.6346': attribute type 6 has an invalid length. [ 2040.604548][T29254] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6346'. [ 2041.050851][ T5902] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 2041.204812][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2041.216135][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2041.350619][T19384] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2041.409573][ T5902] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2041.429708][ T5902] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2041.449318][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.464277][ T5902] usb 8-1: config 0 descriptor?? [ 2041.530738][T19384] usb 2-1: Using ep0 maxpacket: 8 [ 2041.536952][T17104] usb 10-1: USB disconnect, device number 35 [ 2041.555890][T19384] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2041.573843][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2041.611651][T19384] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2041.669072][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2041.688631][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2041.738096][T19384] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2041.778545][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2041.809114][T19384] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2041.822699][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2041.834095][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2041.877786][T19384] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2041.895234][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2041.918228][T19384] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2041.944080][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2041.964393][T19384] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2041.993123][T19384] usb 2-1: string descriptor 0 read error: -22 [ 2042.005518][T19384] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2042.027260][T19384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2042.063446][T19384] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2042.262467][ T10] usb 2-1: USB disconnect, device number 66 [ 2043.811693][ T5902] usbhid 8-1:0.0: can't add hid device: -71 [ 2043.817827][ T5902] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2043.899255][T29288] tipc: Enabled bearer , priority 0 [ 2043.956785][T19384] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2043.964902][ T5902] usb 8-1: USB disconnect, device number 23 [ 2043.965806][T29289] syzkaller0: entered promiscuous mode [ 2043.997313][T29289] syzkaller0: entered allmulticast mode [ 2044.035043][T29288] tipc: Resetting bearer [ 2044.054736][T29287] tipc: Resetting bearer [ 2044.114478][T29287] tipc: Disabling bearer [ 2044.130468][T19384] usb 6-1: Using ep0 maxpacket: 32 [ 2044.337101][T19384] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 2044.345685][T19384] usb 6-1: config 0 has no interface number 0 [ 2044.367510][T19384] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2044.399311][T19384] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2044.624621][T19384] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2044.643604][T19384] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2044.662904][T19384] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2044.688543][T19384] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2044.806751][T19384] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2044.839603][T19384] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2044.903151][T19384] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2044.947529][T19384] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2045.016140][T19384] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2045.052207][T19384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.082374][T19384] usb 6-1: Product: syz [ 2045.099762][T19384] usb 6-1: Manufacturer: syz [ 2045.111076][T19384] usb 6-1: SerialNumber: syz [ 2045.177147][T19384] usb 6-1: config 0 descriptor?? [ 2045.282547][T29286] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2045.290839][T29286] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2045.301598][T19384] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2045.318657][T19384] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2045.363736][T19384] scsi host1: microtekX6 [ 2046.039145][T17104] usb 6-1: USB disconnect, device number 72 [ 2046.222957][ T10] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 2046.420693][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 2046.433321][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2046.541623][ T10] usb 10-1: config 4 interface 0 has no altsetting 0 [ 2046.552224][ T10] usb 10-1: string descriptor 0 read error: -22 [ 2046.558822][ T10] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2046.568119][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.602235][ T10] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2046.638728][ T10] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2046.670115][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2046.706639][ T10] usb 10-1: media controller created [ 2046.775314][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2046.808198][T29319] usb 10-1: dvb_usb_au6610: wlen=0, aborting [ 2047.192054][T29319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2047.221666][T29319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2047.416581][T29332] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6369'. [ 2047.538988][T29335] bond1: (slave veth0_to_bond): Releasing active interface [ 2047.870786][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 2048.225581][T29352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.239538][T29352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.318997][T29353] vivid-000: disconnect [ 2048.693686][T29344] vivid-000: reconnect [ 2049.154519][T23284] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2049.516878][T23284] usb 2-1: Using ep0 maxpacket: 32 [ 2049.542520][T23284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2049.572418][T23284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2049.637328][T23284] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2049.660407][T23284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.688073][T23284] usb 2-1: config 0 descriptor?? [ 2049.942452][T29374] vivid-000: disconnect [ 2050.176519][T23284] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 2050.416349][T23284] usb 2-1: USB disconnect, device number 67 [ 2050.440204][T29366] vivid-000: reconnect [ 2050.615946][T29377] fido_id[29377]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2051.017944][T23284] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 2051.189480][T23284] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.206895][T23284] usb 6-1: config 0 has no interfaces? [ 2051.225932][T23284] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2051.235276][T23284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.243301][T23284] usb 6-1: Product: syz [ 2051.247486][T23284] usb 6-1: Manufacturer: syz [ 2051.252128][T23284] usb 6-1: SerialNumber: syz [ 2051.258480][T23284] usb 6-1: config 0 descriptor?? [ 2051.850651][T19384] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 2052.277182][T19384] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 2052.287803][T19384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.301422][T19384] usb 8-1: config 0 descriptor?? [ 2052.311954][T19384] usb 8-1: selecting invalid altsetting 1 [ 2052.331858][T19384] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2052.376832][T23138] udevd[23138]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2052.446871][T29405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.460469][T29405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.542495][T29396] xt_NFQUEUE: number of total queues is 0 [ 2052.563041][T19384] usb 8-1: USB disconnect, device number 24 [ 2053.305941][T17104] usb 6-1: USB disconnect, device number 73 [ 2053.450764][T29421] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6396'. [ 2053.518408][T23284] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2053.579922][T29423] fuse: Bad value for 'fd' [ 2053.690559][T23284] usb 2-1: Using ep0 maxpacket: 8 [ 2053.702982][T23284] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2053.715219][T23284] usb 2-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 2053.730596][T23284] usb 2-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 2053.744389][T23284] usb 2-1: config 4 interface 0 has no altsetting 0 [ 2053.753584][T23284] usb 2-1: string descriptor 0 read error: -22 [ 2053.759855][T23284] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2053.771658][T23284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.786702][T23284] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2053.814477][T23284] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2053.853616][T23284] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2053.863332][T23284] usb 2-1: media controller created [ 2053.872993][T29439] vivid-000: disconnect [ 2053.892205][T23284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2053.941019][T19384] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2053.987672][T23284] zl10353_read_register: readreg error (reg=127, ret==0) [ 2054.018858][T23284] usb 2-1: USB disconnect, device number 68 [ 2054.120767][T19384] usb 6-1: Using ep0 maxpacket: 8 [ 2054.131748][T19384] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2054.150823][T19384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.159976][T19384] usb 6-1: Product: syz [ 2054.164670][T19384] usb 6-1: Manufacturer: syz [ 2054.169431][T19384] usb 6-1: SerialNumber: syz [ 2054.176775][T19384] usb 6-1: config 0 descriptor?? [ 2054.194019][T19384] gspca_main: se401-2.14.0 probing 047d:5003 [ 2054.555968][T29430] vivid-000: reconnect [ 2054.621295][T19384] gspca_se401: Wrong descriptor type [ 2054.767037][T29453] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6410'. [ 2054.834893][T19384] usb 6-1: USB disconnect, device number 74 [ 2055.901014][T11184] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2056.024441][T29483] vivid-000: disconnect [ 2056.080511][T11184] usb 6-1: Using ep0 maxpacket: 8 [ 2056.108010][T11184] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2056.118705][T11184] usb 6-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 2056.139170][T11184] usb 6-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 2056.209038][T11184] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2056.252364][T29485] tipc: Enabled bearer , priority 0 [ 2056.259972][T29485] syzkaller0: entered promiscuous mode [ 2056.260169][T11184] usb 6-1: string descriptor 0 read error: -22 [ 2056.267409][T29485] syzkaller0: entered allmulticast mode [ 2056.278228][T11184] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2056.297169][T29487] binder: BINDER_SET_CONTEXT_MGR already set [ 2056.303351][T29487] binder: 29486:29487 ioctl 4018620d 200000000280 returned -16 [ 2056.313954][T29487] binder: 29486:29487 ioctl c0306201 200000000240 returned -11 [ 2056.338503][T29485] tipc: Resetting bearer [ 2056.346865][T29484] tipc: Resetting bearer [ 2056.362573][T11184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.388495][T29484] tipc: Disabling bearer [ 2056.400159][T11184] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2056.438269][T11184] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2056.490646][T11184] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2056.520217][T11184] usb 6-1: media controller created [ 2056.526856][T29492] fuse: Bad value for 'rootmode' [ 2056.560904][T11184] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2056.573146][T29475] vivid-000: reconnect [ 2056.606394][T11184] zl10353_read_register: readreg error (reg=127, ret==0) [ 2056.687506][T11184] usb 6-1: USB disconnect, device number 75 [ 2057.605492][T29508] netlink: 'syz.7.6428': attribute type 7 has an invalid length. [ 2057.614524][T29508] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6428'. [ 2058.171487][T23284] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 2058.305900][T29527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6433'. [ 2058.359472][T23284] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2058.392096][T23284] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.428932][T23284] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2058.506040][T23284] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2058.543663][T23284] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2058.563848][T23284] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2058.614605][T23284] usb 8-1: Manufacturer: syz [ 2058.652629][T23284] usb 8-1: config 0 descriptor?? [ 2059.011082][T17104] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2059.276645][T23284] usbhid 8-1:0.0: can't add hid device: -71 [ 2059.283454][T23284] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 2059.316709][T23284] usb 8-1: USB disconnect, device number 25 [ 2059.350354][T17104] usb 6-1: Using ep0 maxpacket: 32 [ 2059.366208][T17104] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.409466][T17104] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2059.427734][T17104] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2059.437198][T17104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.452855][T17104] usb 6-1: config 0 descriptor?? [ 2059.462884][T17104] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2061.460407][T29578] TCP: TCP_TX_DELAY enabled [ 2061.785081][ T5902] usb 6-1: USB disconnect, device number 76 [ 2062.424515][T29593] netlink: 'syz.1.6449': attribute type 6 has an invalid length. [ 2062.436554][T29593] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6449'. [ 2062.552507][T29595] input: syz0 as /devices/virtual/input/input128 [ 2062.818666][T29602] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6451'. [ 2063.710343][ T5902] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2063.893223][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 2063.908612][ T5902] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.104969][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2064.233484][ T5902] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2064.281657][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.317505][ T5902] usb 6-1: config 0 descriptor?? [ 2064.370699][T29627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2064.406858][ T5902] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2064.910830][T20962] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 2065.132066][T20962] usb 8-1: Using ep0 maxpacket: 32 [ 2065.457163][T20962] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 2065.491089][T20962] usb 8-1: config 0 has no interface number 0 [ 2065.516573][T20962] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2065.660325][T20962] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2065.672139][T20962] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2065.955676][T20962] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2066.028912][T20962] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2066.094809][T20962] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2066.118281][T20962] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2066.134763][T20962] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2066.146795][T20962] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2066.261546][T29660] input: syz0 as /devices/virtual/input/input129 [ 2066.291343][T20962] usb 8-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2066.329229][T20962] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2066.354350][T20962] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.370355][T20962] usb 8-1: Product: syz [ 2066.378992][T20962] usb 8-1: Manufacturer: syz [ 2066.385486][T20962] usb 8-1: SerialNumber: syz [ 2066.419594][T20962] usb 8-1: config 0 descriptor?? [ 2066.426318][T29636] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 2066.435757][T29636] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 2066.447399][T20962] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2066.467994][ T1221] usb 6-1: USB disconnect, device number 77 [ 2066.474034][T17104] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2066.484602][T20962] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2066.507656][T20962] scsi host1: microtekX6 [ 2066.797576][T17104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.816773][T17104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.847118][T17104] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2066.894046][T17104] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2066.903243][ T1221] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2067.030234][T17104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.050746][T17104] usb 2-1: config 0 descriptor?? [ 2067.177890][ T1221] usb 6-1: Using ep0 maxpacket: 8 [ 2067.389876][ T1221] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2067.399325][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.407446][ T1221] usb 6-1: Product: syz [ 2067.467206][ T1221] usb 6-1: Manufacturer: syz [ 2067.483245][ T1221] usb 6-1: SerialNumber: syz [ 2067.513323][ T1221] usb 6-1: config 0 descriptor?? [ 2067.522760][ T1221] gspca_main: se401-2.14.0 probing 047d:5003 [ 2067.616212][T20962] usb 8-1: USB disconnect, device number 26 [ 2067.684306][T17104] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2067.934623][ T1221] gspca_se401: Wrong descriptor type [ 2068.110507][T20962] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 2068.137347][ T1221] usb 6-1: USB disconnect, device number 78 [ 2068.273973][T20962] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 2068.288703][T20962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2068.304480][T20962] usb 8-1: config 0 descriptor?? [ 2068.313005][T20962] usb 8-1: selecting invalid altsetting 1 [ 2068.327060][T20962] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2068.338775][T29684] vivid-000: disconnect [ 2068.365406][T23138] udevd[23138]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2068.804293][ T1221] usb 8-1: USB disconnect, device number 27 [ 2068.917155][T29679] vivid-000: reconnect [ 2069.031556][T20962] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2069.150884][ T1221] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 2069.190792][T20962] usb 6-1: Using ep0 maxpacket: 32 [ 2069.205641][T20962] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 2069.214297][T20962] usb 6-1: config 0 has no interface number 0 [ 2069.225174][T20962] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 2069.234770][T20962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.244618][T20962] usb 6-1: Product: syz [ 2069.248856][T20962] usb 6-1: Manufacturer: syz [ 2069.259287][T20962] usb 6-1: SerialNumber: syz [ 2069.278645][T20962] usb 6-1: config 0 descriptor?? [ 2069.285017][ T1221] usb 2-1: device descriptor read/64, error -32 [ 2069.523157][T29701] netlink: 'syz.9.6478': attribute type 1 has an invalid length. [ 2069.540752][ T1221] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 2069.673098][T29701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2069.735744][T29704] bond5: (slave veth19): Enslaving as an active interface with a down link [ 2069.778752][ T1221] usb 2-1: device descriptor read/64, error -32 [ 2069.800576][T11184] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 2070.031498][ T1221] usb 2-1: reset high-speed USB device number 69 using dummy_hcd [ 2070.155845][T29708] input: syz0 as /devices/virtual/input/input130 [ 2070.172640][T11184] usb 8-1: Using ep0 maxpacket: 32 [ 2070.206891][T11184] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.230689][T11184] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2070.245701][T11184] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2070.257390][T11184] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.280477][ T1221] usb 2-1: device not accepting address 69, error -71 [ 2070.304987][T11184] usb 8-1: config 0 descriptor?? [ 2070.318178][T11184] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2071.061405][T17104] usb 2-1: USB disconnect, device number 69 [ 2071.805112][T20962] mos7840 6-1:0.225: required endpoints missing [ 2071.814036][T20962] usb 6-1: USB disconnect, device number 79 [ 2072.637258][T20962] usb 8-1: USB disconnect, device number 28 [ 2072.833638][T29748] input: syz0 as /devices/virtual/input/input132 [ 2072.940789][T11184] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2073.010230][T29754] fuse: Unknown parameter 'group_id00000000000000000000' [ 2073.102719][T11184] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 2073.113544][T11184] usb 2-1: config 0 has no interface number 0 [ 2073.128039][T11184] usb 2-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 2073.142537][T11184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.153305][T11184] usb 2-1: Product: syz [ 2073.157569][T11184] usb 2-1: Manufacturer: syz [ 2073.165235][T11184] usb 2-1: SerialNumber: syz [ 2073.178463][T11184] usb 2-1: config 0 descriptor?? [ 2073.192277][T11184] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 2073.408972][T11184] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 2073.473444][T11184] gspca_pac7302 2-1:0.101: probe with driver gspca_pac7302 failed with error -71 [ 2073.599912][T11184] usb 2-1: USB disconnect, device number 70 [ 2073.851559][T29767] vivid-000: disconnect [ 2073.976590][T29755] vivid-000: reconnect [ 2074.996820][T20962] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2075.151267][T29791] fuse: Unknown parameter 'group_id00000000000000000000' [ 2075.167433][T20962] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2075.178998][T20962] usb 2-1: config 174 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.218403][T20962] usb 2-1: config 174 has 0 interfaces, different from the descriptor's value: 1 [ 2075.236201][T20962] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice= 8.ae [ 2075.245450][T20962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.253681][T20962] usb 2-1: Product: syz [ 2075.257891][T20962] usb 2-1: Manufacturer: syz [ 2075.270480][T20962] usb 2-1: SerialNumber: syz [ 2075.337394][T29793] tipc: Enabled bearer , priority 0 [ 2075.352563][T29793] syzkaller0: entered promiscuous mode [ 2075.359136][T29793] syzkaller0: entered allmulticast mode [ 2075.414425][T29793] tipc: Resetting bearer [ 2075.597504][T29792] tipc: Resetting bearer [ 2075.647314][T29792] tipc: Disabling bearer [ 2075.754611][T29796] input: syz0 as /devices/virtual/input/input134 [ 2076.248774][T29809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6513'. [ 2077.148305][ T30] audit: type=1400 audit(1752276522.150:1608): avc: denied { write } for pid=29812 comm="syz.5.6516" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2077.370879][ T30] audit: type=1400 audit(1752276522.200:1609): avc: denied { read } for pid=29812 comm="syz.5.6516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2077.577668][T20962] usb 2-1: USB disconnect, device number 71 [ 2077.756711][T29828] fuse: Unknown parameter 'group_id00000000000000000000' [ 2078.101288][ T1221] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 2078.317704][T29840] netlink: 'syz.4.6523': attribute type 6 has an invalid length. [ 2078.350872][T29840] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6523'. [ 2078.451433][ T1221] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2078.509757][ T1221] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2078.789100][ T1221] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2078.802398][ T1221] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2078.812500][ T1221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.859260][ T1221] usb 8-1: config 0 descriptor?? [ 2078.998531][T29846] binder: BINDER_SET_CONTEXT_MGR already set [ 2079.004582][T29846] binder: 29845:29846 ioctl 4018620d 200000000280 returned -16 [ 2079.013134][T29846] binder: 29845:29846 ioctl c0306201 200000000240 returned -11 [ 2079.379043][ T1221] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2079.505208][T29855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6527'. [ 2080.810940][T11184] usb 8-1: reset high-speed USB device number 29 using dummy_hcd [ 2080.880615][ T1221] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2080.970328][T11184] usb 8-1: device descriptor read/64, error -32 [ 2081.090357][ T1221] usb 6-1: Using ep0 maxpacket: 32 [ 2081.545588][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2081.570676][T11184] usb 8-1: reset high-speed USB device number 29 using dummy_hcd [ 2081.595002][ T1221] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2081.637611][ T1221] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2081.661015][ T1221] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2081.706422][ T1221] usb 6-1: config 0 descriptor?? [ 2081.722083][T11184] usb 8-1: device descriptor read/64, error -32 [ 2081.746516][T29888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2082.000897][T29892] tipc: Enabled bearer , priority 0 [ 2082.008548][T29892] syzkaller0: entered promiscuous mode [ 2082.017835][T29892] syzkaller0: entered allmulticast mode [ 2082.083979][T29892] tipc: Resetting bearer [ 2082.178242][ T1221] savu 0003:1E7D:2D5A.0020: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 2082.190882][T29890] tipc: Resetting bearer [ 2082.272959][T29890] tipc: Disabling bearer [ 2082.440940][ T5902] usb 6-1: USB disconnect, device number 80 [ 2082.620393][T20962] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2082.631222][T19384] usb 8-1: USB disconnect, device number 29 [ 2082.810331][T20962] usb 2-1: Using ep0 maxpacket: 32 [ 2082.882495][T20962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2082.896204][T20962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.916312][T20962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2082.999028][T20962] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2083.008474][T20962] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2083.018208][T20962] usb 2-1: Product: syz [ 2083.026888][T20962] usb 2-1: Manufacturer: syz [ 2083.034300][T20962] usb 2-1: SerialNumber: syz [ 2083.068432][T20962] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input136 [ 2083.327123][T19384] usb 2-1: USB disconnect, device number 72 [ 2083.383415][T19384] appletouch 2-1:1.0: input: appletouch disconnected [ 2083.394278][T29916] fuse: Unknown parameter 'use00000000000000000000' [ 2084.393917][T29951] PKCS7: Unknown OID: [5] (bad) [ 2084.399775][T29951] PKCS7: Only support pkcs7_signedData type [ 2084.700570][T19384] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 2085.165600][T19384] usb 8-1: Using ep0 maxpacket: 16 [ 2085.197172][T19384] usb 8-1: config 0 has an invalid interface number: 161 but max is 0 [ 2085.254454][T19384] usb 8-1: config 0 has no interface number 0 [ 2085.284245][T19384] usb 8-1: config 0 interface 161 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 2085.340727][T19384] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0102, bcdDevice=9a.fd [ 2085.371811][T19384] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.509218][T19384] usb 8-1: Product: syz [ 2085.621926][T19384] usb 8-1: Manufacturer: syz [ 2085.643880][T19384] usb 8-1: SerialNumber: syz [ 2085.699735][T19384] usb 8-1: config 0 descriptor?? [ 2085.750058][T29951] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 2085.759787][T19384] kvaser_usb 8-1:0.161: error -ENODEV: Cannot get usb endpoint(s) [ 2085.774719][T29961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2085.837087][T29961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.376060][T29982] fuse: Unknown parameter 'use00000000000000000000' [ 2086.693416][T29986] vivid-000: disconnect [ 2086.698807][T29980] vivid-000: reconnect [ 2087.808410][T30006] netlink: 'syz.1.6576': attribute type 6 has an invalid length. [ 2087.845888][T30006] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6576'. [ 2087.924799][T19384] usb 8-1: USB disconnect, device number 30 [ 2088.163908][T30015] tipc: Enabled bearer , priority 0 [ 2088.184800][T30015] syzkaller0: entered promiscuous mode [ 2088.201629][T30015] syzkaller0: entered allmulticast mode [ 2088.289728][T30014] tipc: Resetting bearer [ 2088.341437][T30014] tipc: Disabling bearer [ 2088.357782][T30020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6582'. [ 2088.519991][T30023] fuse: Unknown parameter 'user_id00000000000000000000' [ 2088.588570][T30026] vivid-000: disconnect [ 2088.594064][T30025] vivid-000: reconnect [ 2088.617311][T30027] xt_NFQUEUE: number of total queues is 0 [ 2089.958028][T30060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6595'. [ 2089.960942][T30058] tipc: Enabled bearer , priority 0 [ 2090.013126][T30058] syzkaller0: entered promiscuous mode [ 2090.018663][T30058] syzkaller0: entered allmulticast mode [ 2090.055600][T30057] tipc: Resetting bearer [ 2090.212747][T30057] tipc: Disabling bearer [ 2090.406638][T30073] fuse: Bad value for 'fd' [ 2090.915590][T30085] loop6: detected capacity change from 0 to 524287999 [ 2091.035718][T23138] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 2091.843242][T30101] tipc: Enabled bearer , priority 0 [ 2091.875989][T30101] syzkaller0: entered promiscuous mode [ 2091.884316][T30101] syzkaller0: entered allmulticast mode [ 2091.915324][T30099] tipc: Resetting bearer [ 2092.088846][T30099] tipc: Disabling bearer [ 2092.216351][T30110] fuse: Bad value for 'fd' [ 2092.237265][T30111] vivid-000: disconnect [ 2092.794038][T30102] vivid-000: reconnect [ 2092.877831][T30126] fuse: Bad value for 'group_id' [ 2092.883275][T30126] fuse: Bad value for 'group_id' [ 2093.680455][T17104] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2093.814970][ T30] audit: type=1400 audit(1752276538.800:1610): avc: denied { write } for pid=30142 comm="syz.9.6622" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2093.902935][T17104] usb 2-1: config 0 has no interfaces? [ 2094.044606][T17104] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2094.053785][T17104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2094.087520][T17104] usb 2-1: Product: syz [ 2094.124639][T17104] usb 2-1: Manufacturer: syz [ 2094.220579][T17104] usb 2-1: SerialNumber: syz [ 2094.248069][T17104] usb 2-1: config 0 descriptor?? [ 2094.379047][T30151] fuse: Bad value for 'fd' [ 2094.458173][T30154] netlink: 'syz.7.6625': attribute type 6 has an invalid length. [ 2094.486410][T30154] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.6625'. [ 2094.573299][T30155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2094.582278][T30155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2094.602326][ T30] audit: type=1400 audit(1752276539.600:1611): avc: denied { mount } for pid=30134 comm="syz.1.6621" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 2095.176965][ T30] audit: type=1400 audit(1752276540.180:1612): avc: denied { write } for pid=30161 comm="syz.4.6628" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2095.261835][T30164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.288062][T30164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.327883][T30164] xt_NFQUEUE: number of total queues is 0 [ 2095.412745][T30169] fuse: Unknown parameter 'user_i00000000000000000000' [ 2096.180393][T17104] usb 2-1: USB disconnect, device number 73 [ 2096.586986][T30194] kvm: pic: non byte write [ 2097.585492][T30206] vivid-000: disconnect [ 2097.591571][T30205] vivid-000: reconnect [ 2098.638005][T30219] fuse: Unknown parameter 'user_id00000000000000000000' [ 2098.675793][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.682435][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.015952][ T1221] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 2099.201060][ T1221] usb 8-1: Using ep0 maxpacket: 32 [ 2099.218223][ T1221] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 2099.232183][ T1221] usb 8-1: config 0 has no interface number 0 [ 2099.246233][ T1221] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2099.312135][ T1221] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2099.338889][ T1221] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2099.369344][ T1221] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2099.399016][ T1221] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2099.431965][ T1221] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2099.466616][ T1221] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2099.553250][ T1221] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2099.587068][ T1221] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2099.617522][ T1221] usb 8-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2099.716524][T30227] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 2099.727434][ T30] audit: type=1400 audit(1752276544.720:1613): avc: denied { ioctl } for pid=30226 comm="syz.5.6648" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 2099.810738][ T1221] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2099.860569][ T1221] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.868627][ T1221] usb 8-1: Product: syz [ 2099.884720][ T1221] usb 8-1: Manufacturer: syz [ 2099.889344][ T1221] usb 8-1: SerialNumber: syz [ 2099.946907][ T1221] usb 8-1: config 0 descriptor?? [ 2100.016251][T30222] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2100.033920][T30222] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2100.055664][ T1221] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2100.066412][ T1221] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2100.078396][ T1221] scsi host1: microtekX6 [ 2100.699751][T30247] vivid-000: disconnect [ 2100.705416][T30246] vivid-000: reconnect [ 2101.049235][T19384] usb 8-1: USB disconnect, device number 31 [ 2101.208612][T30260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.229667][T30260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.407437][T30255] netlink: 'syz.1.6656': attribute type 6 has an invalid length. [ 2101.479180][T30255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6656'. [ 2102.363509][T30282] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 2102.791412][T30291] kvm: pic: non byte write [ 2103.022073][T30296] vivid-000: disconnect [ 2103.337286][T30306] binder: 30304:30306 ioctl c0306201 200000000240 returned -11 [ 2103.423874][T30286] vivid-000: reconnect [ 2104.125541][T30323] ptrace attach of "./syz-executor exec"[23997] was attempted by "./syz-executor exec"[30323] [ 2104.872323][ T5902] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 2105.080626][ T5902] usb 8-1: Using ep0 maxpacket: 32 [ 2105.087917][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.099873][ T5902] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2105.120627][ T5902] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2105.139857][ T5902] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.159486][ T5902] usb 8-1: config 0 descriptor?? [ 2105.248989][T30332] netlink: 'syz.5.6680': attribute type 5 has an invalid length. [ 2105.291181][T30332] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6680'. [ 2105.604607][ T5902] savu 0003:1E7D:2D5A.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 2105.960606][T20962] usb 8-1: USB disconnect, device number 32 [ 2106.043043][T30346] vivid-000: disconnect [ 2106.558797][T30339] vivid-000: reconnect [ 2106.620955][T30356] fuse: Bad value for 'fd' [ 2106.791515][T30358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2106.821931][T30358] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2106.868456][T30361] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 2106.868601][T30358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2106.883559][T30358] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2106.893181][T30358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2106.899557][T30358] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2106.908800][T30358] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2106.915191][T30358] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2106.928635][T30358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2106.935009][T30358] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2107.002799][T30365] kvm: user requested TSC rate below hardware speed [ 2107.079119][T30370] ptrace attach of "./syz-executor exec"[24297] was attempted by "./syz-executor exec"[30370] [ 2108.271013][T30389] binder: 30388:30389 ioctl 4018620d 0 returned -22 [ 2108.281582][T30389] binder: 30388:30389 ioctl c0306201 200000000240 returned -11 [ 2108.876369][T30401] fuse: Bad value for 'fd' [ 2108.983140][ T30] audit: type=1400 audit(1752276553.990:1614): avc: denied { accept } for pid=30402 comm="syz.7.6700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2109.315891][ T5902] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2109.530512][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 2109.537757][ T5902] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 2109.557689][ T5902] usb 6-1: config 0 has no interface number 0 [ 2109.574339][ T5902] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 2109.583991][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.592034][ T5902] usb 6-1: Product: syz [ 2109.596386][ T5902] usb 6-1: Manufacturer: syz [ 2109.602263][ T5902] usb 6-1: SerialNumber: syz [ 2109.609350][ T5902] usb 6-1: config 0 descriptor?? [ 2111.834544][T30429] ptrace attach of "./syz-executor exec"[24297] was attempted by "./syz-executor exec"[30429] [ 2112.674922][ T5902] mos7840 6-1:0.225: required endpoints missing [ 2112.713531][ T5902] usb 6-1: USB disconnect, device number 81 [ 2114.055369][T30457] fuse: Unknown parameter '0x0000000000000003' [ 2114.078380][T30459] binder: BINDER_SET_CONTEXT_MGR already set [ 2114.115843][T30459] binder: 30458:30459 ioctl 4018620d 200000000280 returned -16 [ 2114.154812][T30459] binder: 30458:30459 ioctl c0306201 200000000240 returned -11 [ 2114.300617][ T1221] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 2114.316922][T30466] fuse: Unknown parameter 'group_i00000000000000000000' [ 2114.521526][ T1221] usb 8-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 2114.533282][ T1221] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.543524][ T1221] usb 8-1: config 0 descriptor?? [ 2114.640033][ T1221] usb 8-1: selecting invalid altsetting 1 [ 2114.783162][ T1221] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2114.803870][T23138] udevd[23138]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2114.823883][T30456] xt_NFQUEUE: number of total queues is 0 [ 2115.389737][ T5902] usb 8-1: USB disconnect, device number 33 [ 2115.620404][T17104] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2115.800329][T17104] usb 6-1: Using ep0 maxpacket: 16 [ 2115.813013][T17104] usb 6-1: config index 0 descriptor too short (expected 42, got 18) [ 2115.821449][T17104] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.834494][T17104] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2115.860836][T17104] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 2115.877987][T17104] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2115.886285][T17104] usb 6-1: Product: syz [ 2115.898022][T17104] usb 6-1: SerialNumber: syz [ 2115.993833][T17104] r8152-cfgselector 6-1: Unknown version 0x0000 [ 2116.003028][T17104] r8152-cfgselector 6-1: config 0 descriptor?? [ 2116.384743][T30504] binder: 30503:30504 ioctl c0306201 0 returned -14 [ 2116.417280][T30504] binder: 30503:30504 ioctl c0306201 200000000240 returned -11 [ 2116.564301][T30510] fuse: Unknown parameter 'fd0x0000000000000003' [ 2116.680825][ T5902] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2116.830506][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 2116.840629][ T5902] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 2116.849111][ T5902] usb 2-1: config 0 has no interface number 0 [ 2116.861004][ T5902] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 2116.872497][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2116.882165][ T5902] usb 2-1: Product: syz [ 2116.886459][ T5902] usb 2-1: Manufacturer: syz [ 2116.892766][ T5902] usb 2-1: SerialNumber: syz [ 2116.899919][ T5902] usb 2-1: config 0 descriptor?? [ 2116.909207][ T5902] net1080 2-1:0.183: probe with driver net1080 failed with error -22 [ 2117.115609][T30516] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6738'. [ 2117.677143][T17104] r8152-cfgselector 6-1: USB disconnect, device number 82 [ 2118.326963][T30545] delete_channel: no stack [ 2119.460538][T19384] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2119.631895][T19384] usb 6-1: Using ep0 maxpacket: 32 [ 2119.641222][T19384] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2119.654842][T19384] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2119.669372][T19384] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2119.709477][T19384] usb 6-1: Product: syz [ 2119.722908][T19384] usb 6-1: Manufacturer: syz [ 2119.738332][T19384] usb 6-1: SerialNumber: syz [ 2119.755495][T19384] usb 6-1: config 0 descriptor?? [ 2119.801686][T30562] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2119.809650][T19384] hub 6-1:0.0: bad descriptor, ignoring hub [ 2119.861935][T19384] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2119.925502][T30569] ptrace attach of "./syz-executor exec"[24297] was attempted by "./syz-executor exec"[30569] [ 2120.337352][T17104] usb 2-1: USB disconnect, device number 74 [ 2120.512151][T30562] usb 6-1: reset high-speed USB device number 83 using dummy_hcd [ 2120.526112][T30562] usb 6-1: device reset changed ep0 maxpacket size! [ 2120.541479][T19384] usb 6-1: USB disconnect, device number 83 [ 2120.806530][T19384] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2120.817662][T30584] netlink: 'syz.1.6756': attribute type 6 has an invalid length. [ 2120.831459][T30584] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6756'. [ 2121.031389][T19384] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 2121.060715][T19384] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 2121.109888][T19384] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2121.120742][T19384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.162856][T19384] usb 6-1: Product: syz [ 2121.167071][T19384] usb 6-1: Manufacturer: syz [ 2121.171928][T19384] usb 6-1: SerialNumber: syz [ 2121.422414][T19384] cdc_ncm 6-1:1.0: bind() failure [ 2121.452987][T19384] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 2121.470729][T19384] cdc_ncm 6-1:1.1: bind() failure [ 2121.495144][T19384] usb 6-1: USB disconnect, device number 84 [ 2121.542498][T30597] fuse: Unknown parameter 'user_id00000000000000000000' [ 2121.652508][T30602] fuse: Unknown parameter 'group_id00000000000000000000' [ 2121.724981][T30607] binder: 30606:30607 ioctl c0306201 200000000240 returned -11 [ 2121.774396][T30608] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2122.820353][T17104] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2122.980349][T17104] usb 6-1: Using ep0 maxpacket: 16 [ 2123.010526][T17104] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2123.019759][T17104] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2123.045557][T17104] usb 6-1: Product: syz [ 2123.062429][T17104] usb 6-1: Manufacturer: syz [ 2123.081997][T17104] usb 6-1: SerialNumber: syz [ 2123.106015][T17104] usb 6-1: config 0 descriptor?? [ 2123.397136][T30622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6767'. [ 2123.423952][T30622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6767'. [ 2123.569484][T30636] ptrace attach of "./syz-executor exec"[24033] was attempted by "./syz-executor exec"[30636] [ 2123.874616][T30641] fuse: Unknown parameter 'user_id00000000000000000000' [ 2124.696518][T30658] binder: 30657:30658 ioctl c0306201 200000000240 returned -11 [ 2124.897668][T30669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6784'. [ 2124.987933][T30667] kvm: pic: non byte write [ 2125.129124][T30677] fuse: Unknown parameter '0x0000000000000003' [ 2125.943945][T30691] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6789'. [ 2126.129529][T19384] usb 6-1: USB disconnect, device number 85 [ 2126.302053][T30702] binder: 30700:30702 ioctl c0306201 200000000240 returned -11 [ 2127.594268][T30729] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2127.603283][T30729] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2127.612104][T30729] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2127.620845][T30729] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2127.668663][T30731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6801'. [ 2127.738185][T30732] bond2: (slave veth0_to_bond): Releasing active interface [ 2127.756689][T30732] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2127.888153][T30734] fuse: Unknown parameter '0x0000000000000003' [ 2127.955632][T30736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6803'. [ 2128.146083][T30741] fuse: Bad value for 'fd' [ 2128.320360][T30745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2128.340477][T30745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.960417][T11184] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2129.151331][T11184] usb 2-1: Using ep0 maxpacket: 16 [ 2129.169838][T11184] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2129.185859][T11184] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2129.226807][T11184] usb 2-1: Product: syz [ 2129.275307][T11184] usb 2-1: Manufacturer: syz [ 2129.330652][T11184] usb 2-1: SerialNumber: syz [ 2129.348057][T11184] usb 2-1: config 0 descriptor?? [ 2129.441203][T30772] vivid-000: disconnect [ 2129.560056][T30746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6805'. [ 2129.569035][T30746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6805'. [ 2129.640927][T30751] vivid-000: reconnect [ 2131.262434][T30790] fuse: Bad value for 'fd' [ 2131.281732][T30787] kvm: kvm [30785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2131.293323][T30787] kvm: kvm [30785]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2131.304434][T11184] usb 2-1: USB disconnect, device number 75 [ 2131.345076][T30787] kvm: kvm [30785]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2131.353759][T30787] kvm: kvm [30785]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2132.310360][ T1221] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2132.501212][ T1221] usb 6-1: Using ep0 maxpacket: 32 [ 2132.520404][ T1221] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 2132.529490][ T1221] usb 6-1: config 0 has no interface number 0 [ 2132.536147][ T1221] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2132.557723][ T1221] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2132.589805][ T1221] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2132.622741][ T1221] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2132.858629][ T1221] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2132.878888][ T1221] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2132.891034][ T1221] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2132.903277][ T1221] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2132.914775][ T1221] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2132.926294][ T1221] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2132.964469][ T1221] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2133.018903][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.053002][ T1221] usb 6-1: Product: syz [ 2133.061544][ T1221] usb 6-1: Manufacturer: syz [ 2133.069668][ T1221] usb 6-1: SerialNumber: syz [ 2133.082511][ T1221] usb 6-1: config 0 descriptor?? [ 2133.141778][T30811] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2133.226250][T30811] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2133.237471][ T1221] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2133.300548][ T1221] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2133.339380][ T1221] scsi host1: microtekX6 [ 2133.348268][T30836] capability: warning: `syz.1.6829' uses deprecated v2 capabilities in a way that may be insecure [ 2133.424926][T30837] binder: BINDER_SET_CONTEXT_MGR already set [ 2133.447376][T30837] binder: 30832:30837 ioctl 4018620d 200000000280 returned -16 [ 2133.482418][T30837] binder: 30832:30837 ioctl c0306201 200000000240 returned -11 [ 2134.113251][T30847] kvm: kvm [30846]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2134.163671][T30847] kvm: kvm [30846]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2134.230820][T30847] kvm: kvm [30846]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2134.279615][T30847] kvm: kvm [30846]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2134.317111][T30852] netlink: 'syz.9.6833': attribute type 1 has an invalid length. [ 2134.387774][T30852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2134.414832][T30854] bond6: (slave veth0_to_bond): making interface the new active one [ 2134.438836][T30854] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2134.568604][T30860] netlink: 'syz.1.6836': attribute type 6 has an invalid length. [ 2134.579547][T30860] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6836'. [ 2135.282204][T20962] usb 6-1: USB disconnect, device number 86 [ 2135.330298][T11184] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 2135.480608][T11184] usb 8-1: Using ep0 maxpacket: 32 [ 2135.514187][T11184] usb 8-1: config 0 has an invalid interface number: 225 but max is 0 [ 2135.523399][T11184] usb 8-1: config 0 has no interface number 0 [ 2135.827356][T11184] usb 8-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 2135.856812][T11184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2135.899145][T11184] usb 8-1: Product: syz [ 2135.931173][T11184] usb 8-1: Manufacturer: syz [ 2135.981562][T11184] usb 8-1: SerialNumber: syz [ 2136.081154][T11184] usb 8-1: config 0 descriptor?? [ 2136.488209][T30896] netlink: 'syz.9.6846': attribute type 1 has an invalid length. [ 2136.524047][T30896] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2136.552855][T30896] bond6: (slave veth0_to_bond): Releasing active interface [ 2136.563921][T30896] bond7: (slave veth0_to_bond): making interface the new active one [ 2136.573167][T30896] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2136.788516][T30899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2136.804541][T30899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2137.566925][ T30] audit: type=1326 audit(1752276582.570:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e98e929 code=0x7ffc0000 [ 2137.590406][ C1] vkms_vblank_simulate: vblank timer overrun [ 2137.605384][ T30] audit: type=1326 audit(1752276582.570:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2137.639067][ T30] audit: type=1326 audit(1752276582.570:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2137.704722][ T30] audit: type=1326 audit(1752276582.570:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2137.729541][ T30] audit: type=1326 audit(1752276582.570:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2137.783387][ T30] audit: type=1326 audit(1752276582.570:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2137.810561][ T30] audit: type=1326 audit(1752276582.570:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e98e929 code=0x7ffc0000 [ 2137.834386][ T30] audit: type=1326 audit(1752276582.570:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2137.860307][T30915] input: syz0 as /devices/virtual/input/input142 [ 2137.988556][ T30] audit: type=1326 audit(1752276582.570:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0c0e92ab19 code=0x7ffc0000 [ 2138.020719][ T30] audit: type=1326 audit(1752276582.570:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.4.6852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e98e929 code=0x7ffc0000 [ 2138.053053][T30917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2138.357921][T11184] mos7840 8-1:0.225: required endpoints missing [ 2138.380082][T11184] usb 8-1: USB disconnect, device number 34 [ 2139.096774][T30945] fuse: Bad value for 'fd' [ 2139.130635][T30947] netlink: 'syz.5.6865': attribute type 6 has an invalid length. [ 2139.138397][T30947] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6865'. [ 2139.262357][T20962] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2139.421623][T20962] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2139.436288][T20962] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2139.464805][T20962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.478919][T20962] usb 2-1: config 0 descriptor?? [ 2139.520453][ T1221] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2139.817765][T30962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.826602][T30962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.932027][T30964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.966705][T30964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.986654][T20962] ath6kl: Failed to submit usb control message: -71 [ 2139.996037][T20962] ath6kl: unable to send the bmi data to the device: -71 [ 2140.004468][T20962] ath6kl: Unable to send get target info: -71 [ 2140.011144][ T1221] usb 6-1: Using ep0 maxpacket: 32 [ 2140.018399][T20962] ath6kl: Failed to init ath6kl core: -71 [ 2140.051813][T30965] kvm: pic: non byte write [ 2140.138380][ T1221] usb 6-1: config 0 has an invalid interface number: 225 but max is 0 [ 2140.150729][T20962] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2140.159237][ T1221] usb 6-1: config 0 has no interface number 0 [ 2140.174033][ T1221] usb 6-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 2140.183270][T20962] usb 2-1: USB disconnect, device number 76 [ 2140.189154][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.207435][ T1221] usb 6-1: Product: syz [ 2140.237443][ T1221] usb 6-1: Manufacturer: syz [ 2140.274313][ T1221] usb 6-1: SerialNumber: syz [ 2140.318702][ T1221] usb 6-1: config 0 descriptor?? [ 2140.454557][T30971] loop6: detected capacity change from 0 to 524287999 [ 2140.977458][T23810] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 2142.217581][ T1221] mos7840 6-1:0.225: required endpoints missing [ 2142.243339][ T1221] usb 6-1: USB disconnect, device number 87 [ 2142.630328][ T1221] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2142.760858][ T1221] usb 6-1: device descriptor read/64, error -71 [ 2142.890427][T20962] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2143.020646][ T1221] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2143.073131][T20962] usb 2-1: Using ep0 maxpacket: 32 [ 2143.105484][T20962] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2143.140447][T20962] usb 2-1: config 0 has no interface number 0 [ 2143.164827][T20962] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2143.183175][ T1221] usb 6-1: device descriptor read/64, error -71 [ 2143.199073][T20962] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2143.222062][T20962] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2143.265684][T20962] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2143.289642][T20962] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2143.307480][ T1221] usb usb6-port1: attempt power cycle [ 2143.328883][T20962] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2143.343190][T20962] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2143.353521][T20962] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2143.365653][T20962] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2143.378302][T20962] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2143.410046][T31025] netlink: 'syz.9.6889': attribute type 6 has an invalid length. [ 2143.443130][T20962] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2143.456304][T31025] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.6889'. [ 2143.473136][T20962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.498445][T20962] usb 2-1: Product: syz [ 2143.537946][T20962] usb 2-1: Manufacturer: syz [ 2143.574356][T20962] usb 2-1: SerialNumber: syz [ 2143.607484][T20962] usb 2-1: config 0 descriptor?? [ 2143.628789][T31002] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2143.637491][T31002] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2143.662975][T20962] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2143.671584][ T1221] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2143.681403][T20962] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2143.693697][T20962] scsi host1: microtekX6 [ 2143.701863][ T1221] usb 6-1: device descriptor read/8, error -71 [ 2143.752835][T31034] input: syz0 as /devices/virtual/input/input144 [ 2144.292981][ T1221] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2144.321573][ T1221] usb 6-1: device descriptor read/8, error -71 [ 2144.433721][ T1221] usb usb6-port1: unable to enumerate USB device [ 2144.925541][T19384] usb 2-1: USB disconnect, device number 77 [ 2146.170382][ T1221] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2146.315004][ T1221] usb 6-1: device descriptor read/64, error -71 [ 2146.391687][T31080] input: syz0 as /devices/virtual/input/input145 [ 2146.700326][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 2146.700344][ T30] audit: type=1400 audit(1752276591.550:1705): avc: denied { ioctl } for pid=31074 comm="syz.9.6904" path="socket:[145827]" dev="sockfs" ino=145827 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2146.880630][ T1221] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2147.220375][T19384] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2147.314995][T31099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6909'. [ 2147.323990][ T1221] usb 6-1: device descriptor read/64, error -71 [ 2147.360946][T19384] usb 2-1: device descriptor read/64, error -71 [ 2147.470576][ T1221] usb usb6-port1: attempt power cycle [ 2147.631058][T19384] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2147.920381][ T1221] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2147.953607][ T1221] usb 6-1: device descriptor read/8, error -71 [ 2148.051353][T19384] usb 2-1: device descriptor read/64, error -71 [ 2148.161996][T19384] usb usb2-port1: attempt power cycle [ 2148.315186][ T1221] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2148.360392][ T1221] usb 6-1: device descriptor read/8, error -71 [ 2148.482875][ T1221] usb usb6-port1: unable to enumerate USB device [ 2148.544014][T31120] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6916'. [ 2148.620631][T19384] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2148.652699][T19384] usb 2-1: device descriptor read/8, error -71 [ 2148.784162][T31124] fuse: Unknown parameter 'fd0x0000000000000004' [ 2148.903266][ T1221] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 2148.919403][ T1221] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2148.920595][T19384] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2149.001141][T19384] usb 2-1: device descriptor read/8, error -71 [ 2149.050351][T31129] netlink: 'syz.5.6920': attribute type 6 has an invalid length. [ 2149.058120][T31129] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6920'. [ 2149.121395][T19384] usb usb2-port1: unable to enumerate USB device [ 2149.345589][T31133] input: syz0 as /devices/virtual/input/input146 [ 2150.304480][T31151] netlink: 'syz.4.6925': attribute type 1 has an invalid length. [ 2150.374630][T31151] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2150.405257][T31151] bond6: (slave veth0_to_bond): making interface the new active one [ 2150.545024][T31151] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2150.672485][T31163] fuse: Unknown parameter 'fd0x0000000000000004' [ 2150.711676][ T5903] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 2150.877739][ T5903] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.005491][ T5903] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2151.034840][ T5903] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2151.044573][T20962] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2151.072198][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.123468][ T5903] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2151.156135][ T5903] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2151.200328][T20962] usb 6-1: device descriptor read/64, error -71 [ 2151.217052][T23138] udevd[23138]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2151.450454][T20962] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2151.605885][T20962] usb 6-1: device descriptor read/64, error -71 [ 2151.750046][T20962] usb usb6-port1: attempt power cycle [ 2152.170196][T20962] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2152.192541][T20962] usb 6-1: device descriptor read/8, error -71 [ 2152.770331][T20962] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2152.800819][T20962] usb 6-1: device descriptor read/8, error -71 [ 2152.923349][T20962] usb usb6-port1: unable to enumerate USB device [ 2153.010392][T19384] usb 8-1: USB disconnect, device number 35 [ 2153.101102][T31192] input: syz0 as /devices/virtual/input/input148 [ 2153.492299][T31199] vivid-000: disconnect [ 2153.834641][T31203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2154.079282][T31193] vivid-000: reconnect [ 2154.225394][T31206] bond7: entered promiscuous mode [ 2154.670655][T31209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.951455][T11184] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 2155.111252][T31209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.290310][T11184] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.308863][T31209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.432033][T11184] usb 8-1: config 0 has no interfaces? [ 2155.445786][T31209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.516503][T31209] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.536409][T11184] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2155.553478][T11184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.584828][T31209] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.638147][T31209] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.682700][T31209] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2155.708487][T11184] usb 8-1: Product: syz [ 2155.758177][T11184] usb 8-1: Manufacturer: syz [ 2155.795155][T11184] usb 8-1: SerialNumber: syz [ 2155.893448][T11184] usb 8-1: config 0 descriptor?? [ 2155.897446][T31234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6950'. [ 2156.174571][T31243] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6953'. [ 2156.993776][T31254] input: syz0 as /devices/virtual/input/input149 [ 2157.354956][ T1221] usb 8-1: USB disconnect, device number 36 [ 2157.904234][T31277] netlink: 'syz.9.6965': attribute type 6 has an invalid length. [ 2157.913178][T31277] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.6965'. [ 2158.145319][T31284] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6967'. [ 2158.765275][T31296] netlink: 'syz.1.6970': attribute type 1 has an invalid length. [ 2158.818749][T31296] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2158.924711][T31296] bond5: (slave veth15): Enslaving as an active interface with a down link [ 2158.956859][T31302] bond5: (slave veth0_to_bond): making interface the new active one [ 2159.024006][T31302] veth0_to_bond: entered promiscuous mode [ 2159.040140][T31302] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2160.081683][T31324] fuse: Unknown parameter 'use00000000000000000000000' [ 2160.137239][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.143612][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.980693][T11184] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2161.138534][T11184] usb 2-1: Using ep0 maxpacket: 8 [ 2161.148683][T11184] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2161.174802][T11184] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2161.306490][T11184] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2161.523780][T11184] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2161.613164][T11184] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2161.644813][T11184] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2161.659707][T11184] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 2161.676168][T11184] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2161.700750][T11184] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2161.720954][T11184] usb 2-1: string descriptor 0 read error: -22 [ 2161.734735][T11184] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2161.744214][T11184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.759125][T11184] adutux 2-1:168.0: interrupt endpoints not found [ 2161.981939][ T1221] usb 2-1: USB disconnect, device number 82 [ 2162.810769][ T5903] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2162.959165][T31372] kvm: kvm [31371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x20 [ 2162.990482][ T5903] usb 6-1: Using ep0 maxpacket: 16 [ 2162.997886][T31372] kvm: kvm [31371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 2163.006796][T31372] kvm: kvm [31371]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2163.019117][T31372] kvm: kvm [31371]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20 [ 2163.072883][ T5903] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2163.114190][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2163.135630][ T5903] usb 6-1: Product: syz [ 2163.146409][ T5903] usb 6-1: Manufacturer: syz [ 2163.155453][ T5903] usb 6-1: SerialNumber: syz [ 2163.187056][ T5903] usb 6-1: config 0 descriptor?? [ 2163.417662][T31368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6992'. [ 2163.426781][T31368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6992'. [ 2164.104883][T31401] netlink: 'syz.4.7004': attribute type 1 has an invalid length. [ 2164.133629][T31401] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2164.229539][T31403] bond6: (slave veth0_to_bond): Releasing active interface [ 2164.249829][T31403] bond8: (slave veth0_to_bond): making interface the new active one [ 2164.278757][T31403] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2164.450662][T11184] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2164.462021][T31415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2164.472547][T31412] loop6: detected capacity change from 0 to 524287999 [ 2164.487090][T23138] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 2164.514841][T31415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.640419][T11184] usb 2-1: Using ep0 maxpacket: 8 [ 2164.726326][T11184] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2164.737711][T11184] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2164.752540][T11184] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2164.907299][T11184] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2164.948289][T11184] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2164.959892][T11184] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2164.980060][T11184] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 2164.987741][T11184] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2164.999525][T11184] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2165.042021][T11184] usb 2-1: string descriptor 0 read error: -22 [ 2165.048385][T11184] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2165.057999][T11184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.119154][T11184] adutux 2-1:168.0: interrupt endpoints not found [ 2165.356058][ T5903] usb 2-1: USB disconnect, device number 83 [ 2165.985413][ T5902] usb 6-1: USB disconnect, device number 100 [ 2166.770598][ T5903] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2167.066326][T31440] bond3: entered promiscuous mode [ 2167.141428][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 2167.150194][ T5903] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26232, setting to 64 [ 2167.167580][ T5903] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2167.184334][T31440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.198322][ T5903] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2167.210668][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2167.220185][ T5903] usb 2-1: Product: syz [ 2167.224418][ T5903] usb 2-1: Manufacturer: syz [ 2167.228987][ T5903] usb 2-1: SerialNumber: syz [ 2167.238958][ T5903] appletouch 2-1:1.0: Could not find int-in endpoint [ 2167.247113][ T5903] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 2167.257345][ T5903] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 2167.290904][T31440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.346248][T31440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.423033][T31440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.451592][ T5903] usb 2-1: USB disconnect, device number 84 [ 2167.553928][T31440] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.576105][T31440] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.594176][T31440] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.608885][T31440] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2167.674992][T31447] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7020'. [ 2168.357482][T31466] netlink: 'syz.9.7025': attribute type 6 has an invalid length. [ 2168.377887][T31466] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.7025'. [ 2169.858008][T31483] bond8: entered promiscuous mode [ 2169.880678][T31482] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.956558][T31482] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.007254][T31482] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.063090][T31482] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.138737][T31482] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.153583][T31482] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.168585][T31482] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.181482][T31482] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.190192][ T5902] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2170.369737][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 2170.411754][ T5902] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 2170.438465][ T5902] usb 2-1: config 0 has no interface number 0 [ 2170.454116][ T5902] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 2170.953538][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.962037][ T5902] usb 2-1: Product: syz [ 2170.966483][ T5902] usb 2-1: Manufacturer: syz [ 2170.978551][ T5902] usb 2-1: SerialNumber: syz [ 2171.027926][ T5902] usb 2-1: config 0 descriptor?? [ 2171.053201][ T5902] net1080 2-1:0.183: probe with driver net1080 failed with error -22 [ 2171.791260][ T1087] veth0_to_bond: left promiscuous mode [ 2172.242982][ T5903] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 2172.434380][ T5903] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2172.444902][ T5903] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2172.460961][ T5903] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2172.470579][ T5903] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.493182][ T5903] usb 8-1: config 0 descriptor?? [ 2172.542862][ T5903] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2173.009554][ T1552] usb 2-1: USB disconnect, device number 85 [ 2173.530604][T31549] bond9: entered promiscuous mode [ 2173.602641][T31555] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.746642][T31555] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.832758][T31555] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.874423][T31555] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.477272][T31555] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.545262][T31555] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.636910][T31555] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2174.714166][T31555] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2175.144403][T19384] usb 8-1: USB disconnect, device number 37 [ 2175.899833][T31581] input: syz0 as /devices/virtual/input/input151 [ 2176.210375][T20962] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2176.371247][T20962] usb 2-1: Using ep0 maxpacket: 32 [ 2176.421706][T20962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 2176.433168][T20962] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 2176.451537][T20962] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2176.473112][T20962] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2176.492724][T20962] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2176.502752][T20962] usb 2-1: Product: syz [ 2176.506948][T20962] usb 2-1: Manufacturer: syz [ 2176.575447][T20962] usb 2-1: SerialNumber: syz [ 2176.682863][T20962] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input153 [ 2176.928801][T20962] usb 2-1: USB disconnect, device number 86 [ 2177.058795][T20962] appletouch 2-1:1.0: input: appletouch disconnected [ 2177.299433][T31603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2177.320460][T31603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.676318][T31609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7065'. [ 2177.780475][T20962] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2177.940354][T20962] usb 8-1: Using ep0 maxpacket: 16 [ 2178.006218][T20962] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2178.016039][T20962] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2178.123852][T20962] usb 8-1: Product: syz [ 2178.128536][T20962] usb 8-1: Manufacturer: syz [ 2178.135095][T20962] usb 8-1: SerialNumber: syz [ 2178.215498][T20962] usb 8-1: config 0 descriptor?? [ 2178.490096][T31607] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7064'. [ 2178.507669][T31607] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7064'. [ 2180.258293][T31636] macvtap1: mtu less than device minimum [ 2181.175484][T11184] usb 8-1: USB disconnect, device number 38 [ 2181.231050][T20962] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2181.297120][T31654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.309502][T31654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.420331][T20962] usb 6-1: Using ep0 maxpacket: 32 [ 2181.429270][T20962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 2181.450512][T20962] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 2181.464280][T20962] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2181.484025][T20962] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 2181.494321][T20962] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 2181.506855][T20962] usb 6-1: Product: syz [ 2181.512191][T20962] usb 6-1: Manufacturer: syz [ 2181.518007][T20962] usb 6-1: SerialNumber: syz [ 2181.538191][T20962] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input154 [ 2181.739695][T20962] usb 6-1: USB disconnect, device number 101 [ 2181.751260][T20962] appletouch 6-1:1.0: input: appletouch disconnected [ 2181.994835][T31662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7081'. [ 2182.135599][T31666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7083'. [ 2183.291437][T31689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.314943][T31689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.883755][T20962] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2183.938543][T31698] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7093'. [ 2184.040851][T20962] usb 6-1: Using ep0 maxpacket: 8 [ 2184.048170][T20962] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2184.253968][T31708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.272356][T20962] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2184.272931][T31708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2184.370309][T20962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2184.381343][T20962] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2184.430374][T19384] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2184.461210][T20962] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2184.474486][T20962] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2184.490438][T20962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.612622][T19384] usb 2-1: Using ep0 maxpacket: 32 [ 2184.621689][T19384] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 2184.629867][T19384] usb 2-1: config 0 has no interface number 0 [ 2184.652647][T19384] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2184.664096][T19384] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2184.682277][T19384] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 2184.710010][T19384] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 2184.721872][T20962] usb 6-1: GET_CAPABILITIES returned 0 [ 2184.727356][T20962] usbtmc 6-1:16.0: can't read capabilities [ 2184.738261][T19384] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 2184.793761][T19384] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2184.831853][T19384] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2184.852918][T19384] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 2184.943206][T31691] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 2184.953144][T20962] usb 6-1: USB disconnect, device number 102 [ 2185.003213][T19384] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 2185.023018][T19384] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2185.046073][T19384] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 2185.055275][T19384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.063869][T19384] usb 2-1: Product: syz [ 2185.075376][T19384] usb 2-1: Manufacturer: syz [ 2185.080664][T19384] usb 2-1: SerialNumber: syz [ 2185.142893][T19384] usb 2-1: config 0 descriptor?? [ 2185.182870][T31706] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2185.301486][T31706] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2185.317060][T19384] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 2185.326293][T19384] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 2185.412421][T19384] scsi host1: microtekX6 [ 2186.429066][T20962] usb 2-1: USB disconnect, device number 87 [ 2186.504521][T31741] netlink: 148 bytes leftover after parsing attributes in process `syz.7.7106'. [ 2186.865796][T31746] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7108'. [ 2187.050412][T20962] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2187.201770][T20962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.227292][T20962] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2187.242168][T20962] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2187.253495][T20962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.267367][T20962] usb 2-1: config 0 descriptor?? [ 2187.276234][T20962] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2187.740511][ T1552] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2187.922223][ T1552] usb 6-1: Using ep0 maxpacket: 8 [ 2187.934657][ T1552] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2187.946796][ T1552] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2187.969476][ T1552] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2187.992380][ T1552] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2188.029365][ T1552] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2188.073050][T31769] fuse: Unknown parameter '0x0000000000000003' [ 2188.140024][ T1552] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2188.185357][ T1552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.469651][ T1552] usb 6-1: usb_control_msg returned -71 [ 2188.486356][ T1552] usbtmc 6-1:16.0: can't read capabilities [ 2188.541667][ T1552] usb 6-1: USB disconnect, device number 103 [ 2189.563845][ T1552] usb 2-1: USB disconnect, device number 88 [ 2190.894726][T31804] netlink: 'syz.1.7125': attribute type 6 has an invalid length. [ 2190.952706][T31804] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7125'. [ 2190.978420][T31807] fuse: Unknown parameter '0x0000000000000003' [ 2191.611575][T20962] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2192.423752][T20962] usb 8-1: Using ep0 maxpacket: 8 [ 2192.435383][T20962] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2192.458999][T20962] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2192.470088][T20962] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2192.552646][T20962] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2192.597287][T20962] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2192.662811][T20962] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2192.672632][T20962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.543358][T20962] usb 8-1: usb_control_msg returned -71 [ 2193.548987][T20962] usbtmc 8-1:16.0: can't read capabilities [ 2193.559043][T20962] usb 8-1: USB disconnect, device number 39 [ 2194.298813][T31848] fuse: Unknown parameter '0x0000000000000003' [ 2197.537937][T31892] netlink: 'syz.1.7150': attribute type 6 has an invalid length. [ 2197.559138][T31892] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.7150'. [ 2199.575650][T20962] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2199.751531][T20962] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2199.762031][T20962] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2199.778340][T20962] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2199.796923][T20962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.817434][T20962] usb 2-1: config 0 descriptor?? [ 2199.894628][T20962] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2200.264626][T23136] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2200.276032][T23136] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2200.286424][T23136] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2200.295961][T23136] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2200.305009][T23136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2200.329829][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2200.337230][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2200.357040][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2200.365630][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2200.373976][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2200.443686][ T31] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 2200.457844][ T31] Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2200.515834][ T30] audit: type=1400 audit(1752276645.520:1706): avc: denied { write } for pid=5815 comm="syz-executor" path="pipe:[3721]" dev="pipefs" ino=3721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2200.560176][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2200.673424][ T31] task:kworker/0:1 state:D stack:22680 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2200.698939][ T31] Workqueue: usb_hub_wq hub_event [ 2200.709624][ T31] Call Trace: [ 2200.716281][ T31] [ 2200.722634][ T31] __schedule+0x116a/0x5de0 [ 2200.732642][ T31] ? __pfx___schedule+0x10/0x10 [ 2200.741862][ T31] ? find_held_lock+0x2b/0x80 [ 2200.751977][ T31] ? schedule+0x2d7/0x3a0 [ 2200.759612][ T31] schedule+0xe7/0x3a0 [ 2200.768241][ T31] schedule_timeout+0x257/0x290 [ 2200.783689][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2200.791314][ T31] ? mark_held_locks+0x49/0x80 [ 2200.801750][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2200.813465][ T31] __wait_for_common+0x2fc/0x4e0 [ 2200.850454][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2200.865841][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 2200.882080][ T31] ? __pfx_device_del+0x10/0x10 [ 2200.890949][ T31] ? kobject_put+0xab/0x5a0 [ 2200.895486][ T31] i2c_del_adapter+0x546/0x6f0 [ 2200.918318][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 2200.923821][ T31] ? kfree+0x2b4/0x4d0 [ 2200.927882][ T31] ? media_device_cleanup+0x53/0x80 [ 2200.933171][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 2200.938654][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 2200.950295][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 2200.955251][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 2200.960854][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2200.970338][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2200.980436][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 2200.986060][ T31] usb_probe_interface+0x303/0x9c0 [ 2200.992031][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 2201.000915][ T31] really_probe+0x23e/0xa90 [ 2201.010312][ T31] __driver_probe_device+0x1de/0x440 [ 2201.015598][ T31] driver_probe_device+0x4c/0x1b0 [ 2201.020944][ T31] __device_attach_driver+0x1df/0x310 [ 2201.030305][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2201.036223][ T31] bus_for_each_drv+0x156/0x1e0 [ 2201.041403][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2201.050317][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2201.060426][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2201.066236][ T31] __device_attach+0x1e4/0x4b0 [ 2201.082650][ T31] ? __pfx___device_attach+0x10/0x10 [ 2201.087939][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 2201.102340][ T31] bus_probe_device+0x17f/0x1c0 [ 2201.107188][ T31] device_add+0x1148/0x1a70 [ 2201.121982][ T31] ? __pfx_device_add+0x10/0x10 [ 2201.130295][ T31] ? usb_cache_string+0xf2/0x150 [ 2201.135220][ T31] usb_set_configuration+0x1187/0x1e20 [ 2201.141026][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 2201.150338][ T31] usb_generic_driver_probe+0xb1/0x110 [ 2201.160453][ T31] usb_probe_device+0xef/0x3e0 [ 2201.165214][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 2201.170669][ T31] really_probe+0x23e/0xa90 [ 2201.180536][ T31] __driver_probe_device+0x1de/0x440 [ 2201.185843][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 2201.191401][ T31] driver_probe_device+0x4c/0x1b0 [ 2201.200527][ T31] __device_attach_driver+0x1df/0x310 [ 2201.210314][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 2201.216209][ T31] bus_for_each_drv+0x156/0x1e0 [ 2201.221666][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 2201.227051][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2201.233252][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2201.240806][ T31] __device_attach+0x1e4/0x4b0 [ 2201.250304][ T31] ? __pfx___device_attach+0x10/0x10 [ 2201.255598][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 2201.261132][ T31] bus_probe_device+0x17f/0x1c0 [ 2201.270301][ T31] device_add+0x1148/0x1a70 [ 2201.280430][ T31] ? __pfx_device_add+0x10/0x10 [ 2201.285269][ T31] ? usb_new_device+0xb6c/0x1a20 [ 2201.290183][ T31] usb_new_device+0xd07/0x1a20 [ 2201.295045][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 2201.300048][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 2201.310575][ T31] ? mark_held_locks+0x49/0x80 [ 2201.315365][ T31] hub_event+0x2eb7/0x4fa0 [ 2201.320449][ T31] ? __pfx_hub_event+0x10/0x10 [ 2201.325208][ T31] ? ioread8+0xa0/0xa0 [ 2201.329258][ T31] ? rcu_is_watching+0x12/0xc0 [ 2201.340570][ T31] process_one_work+0x9cf/0x1b70 [ 2201.350270][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 2201.355549][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2201.361247][ T31] ? assign_work+0x1a0/0x250 [ 2201.365841][ T31] worker_thread+0x6c8/0xf10 [ 2201.370748][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2201.380521][ T31] kthread+0x3c5/0x780 [ 2201.384576][ T31] ? __pfx_kthread+0x10/0x10 [ 2201.389139][ T31] ? rcu_is_watching+0x12/0xc0 [ 2201.400567][ T31] ? __pfx_kthread+0x10/0x10 [ 2201.410291][ T31] ret_from_fork+0x5d7/0x6f0 [ 2201.414879][ T31] ? __pfx_kthread+0x10/0x10 [ 2201.419440][ T31] ret_from_fork_asm+0x1a/0x30 [ 2201.430417][ T31] [ 2201.480823][ T31] [ 2201.480823][ T31] Showing all locks held in the system: [ 2201.488549][ T31] 5 locks held by kworker/0:1/10: [ 2201.520631][ T31] #0: ffff888022abb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2201.580570][ T31] #1: ffffc900000f7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2201.620562][ T31] #2: ffff888144794198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 2201.629493][ T31] #3: ffff888032226198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 2201.680572][ T31] #4: ffff88802986b160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 2201.689872][ T31] 1 lock held by khungtaskd/31: [ 2201.760618][ T31] #0: ffffffff8e5c4e80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 2201.810984][ T31] 2 locks held by getty/5594: [ 2201.815701][ T31] #0: ffff88803262b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2201.858212][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 2201.890385][ T31] 2 locks held by kworker/0:2/17104: [ 2201.895710][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2201.950326][ T31] #1: ffffc90004537d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2201.960065][ T31] 3 locks held by kworker/u8:14/17326: [ 2202.000539][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 2202.011802][ T31] #1: ffffc900038cfd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 2202.030933][ T31] #2: ffffffff90362b28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 2202.040455][ T31] 2 locks held by syz.9.6366/29330: [ 2202.045632][ T31] #0: ffffffff90362b28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2202.061694][ T31] #1: ffffffff8e5d0478 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 2202.081746][ T31] 1 lock held by syz.1.7159/31925: [ 2202.086862][ T31] #0: ffffffff90362b28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2202.101727][ T31] 1 lock held by syz.5.7160/31929: [ 2202.106825][ T31] #0: ffffffff90362b28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2202.123820][ T31] 2 locks held by syz-executor/31933: [ 2202.129183][ T31] #0: ffffffff9034cad0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 2202.141713][ T31] #1: ffffffff90362b28 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 2202.163581][ T31] 1 lock held by syz.4.7163/31941: [ 2202.168694][ T31] #0: ffffffff90362b28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 2202.181714][ T31] [ 2202.194935][ T31] ============================================= [ 2202.194935][ T31] [ 2202.211678][ T31] NMI backtrace for cpu 1 [ 2202.211696][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 2202.211727][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2202.211737][ T31] Call Trace: [ 2202.211744][ T31] [ 2202.211751][ T31] dump_stack_lvl+0x116/0x1f0 [ 2202.211779][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2202.211798][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2202.211821][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2202.211848][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2202.211868][ T31] watchdog+0xf70/0x12c0 [ 2202.211891][ T31] ? __pfx_watchdog+0x10/0x10 [ 2202.211909][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2202.211934][ T31] ? __kthread_parkme+0x19e/0x250 [ 2202.211959][ T31] ? __pfx_watchdog+0x10/0x10 [ 2202.211977][ T31] kthread+0x3c5/0x780 [ 2202.211994][ T31] ? __pfx_kthread+0x10/0x10 [ 2202.212013][ T31] ? rcu_is_watching+0x12/0xc0 [ 2202.212035][ T31] ? __pfx_kthread+0x10/0x10 [ 2202.212053][ T31] ret_from_fork+0x5d7/0x6f0 [ 2202.212076][ T31] ? __pfx_kthread+0x10/0x10 [ 2202.212093][ T31] ret_from_fork_asm+0x1a/0x30 [ 2202.212123][ T31] [ 2202.212130][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2202.340535][ C0] NMI backtrace for cpu 0 [ 2202.340549][ C0] CPU: 0 UID: 0 PID: 17104 Comm: kworker/0:2 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 2202.340567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2202.340576][ C0] Workqueue: events nsim_dev_hwstats_traffic_work [ 2202.340595][ C0] RIP: 0010:check_preemption_disabled+0x2d/0xe0 [ 2202.340618][ C0] Code: 53 48 83 ec 08 65 8b 1d 25 6c 48 08 65 8b 05 1a 6c 48 08 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c <58> f6 c4 02 74 ea 48 89 fd 65 48 8b 05 da 6b 48 08 f6 40 2f 04 74 [ 2202.340631][ C0] RSP: 0018:ffffc90004537bb8 EFLAGS: 00000046 [ 2202.340641][ C0] RAX: 0000000080000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 2202.340650][ C0] RDX: 0000000000000000 RSI: ffffffff8df25993 RDI: ffffffff8c158f60 [ 2202.340659][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2202.340667][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 2202.340675][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2202.340684][ C0] FS: 0000000000000000(0000) GS:ffff888124715000(0000) knlGS:0000000000000000 [ 2202.340698][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2202.340707][ C0] CR2: 0000200000c9c030 CR3: 000000006a779000 CR4: 00000000003526f0 [ 2202.340716][ C0] DR0: 0000000000000007 DR1: 000000000000009b DR2: 00040000ffffffff [ 2202.340724][ C0] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2202.340732][ C0] Call Trace: [ 2202.340737][ C0] [ 2202.340742][ C0] ? __kasan_check_byte+0x13/0x50 [ 2202.340763][ C0] lock_acquire+0x140/0x350 [ 2202.340777][ C0] ? rcu_is_watching+0x12/0xc0 [ 2202.340795][ C0] ? process_one_work+0x12a2/0x1b70 [ 2202.340809][ C0] process_one_work+0x12f9/0x1b70 [ 2202.340822][ C0] ? process_one_work+0x12a2/0x1b70 [ 2202.340839][ C0] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 2202.340853][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2202.340870][ C0] ? assign_work+0x1a0/0x250 [ 2202.340884][ C0] worker_thread+0x6c8/0xf10 [ 2202.340901][ C0] ? __kthread_parkme+0x19e/0x250 [ 2202.340919][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2202.340933][ C0] kthread+0x3c5/0x780 [ 2202.340946][ C0] ? __pfx_kthread+0x10/0x10 [ 2202.340964][ C0] ? rcu_is_watching+0x12/0xc0 [ 2202.340979][ C0] ? __pfx_kthread+0x10/0x10 [ 2202.340992][ C0] ret_from_fork+0x5d7/0x6f0 [ 2202.341011][ C0] ? __pfx_kthread+0x10/0x10 [ 2202.341023][ C0] ret_from_fork_asm+0x1a/0x30 [ 2202.341044][ C0] [ 2202.341579][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2202.593416][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 2202.605201][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2202.615237][ T31] Call Trace: [ 2202.618509][ T31] [ 2202.621424][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2202.626006][ T31] panic+0x71c/0x800 [ 2202.629890][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 2202.635773][ T31] ? __pfx_panic+0x10/0x10 [ 2202.640176][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2202.645545][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2202.651524][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2202.656899][ T31] ? watchdog+0xdda/0x12c0 [ 2202.661320][ T31] ? watchdog+0xdcd/0x12c0 [ 2202.665737][ T31] watchdog+0xdeb/0x12c0 [ 2202.669978][ T31] ? __pfx_watchdog+0x10/0x10 [ 2202.674641][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2202.679844][ T31] ? __kthread_parkme+0x19e/0x250 [ 2202.684858][ T31] ? __pfx_watchdog+0x10/0x10 [ 2202.689518][ T31] kthread+0x3c5/0x780 [ 2202.693570][ T31] ? __pfx_kthread+0x10/0x10 [ 2202.698145][ T31] ? rcu_is_watching+0x12/0xc0 [ 2202.702910][ T31] ? __pfx_kthread+0x10/0x10 [ 2202.707483][ T31] ret_from_fork+0x5d7/0x6f0 [ 2202.712060][ T31] ? __pfx_kthread+0x10/0x10 [ 2202.716630][ T31] ret_from_fork_asm+0x1a/0x30 [ 2202.721403][ T31] [ 2202.724652][ T31] Kernel Offset: disabled [ 2202.728978][ T31] Rebooting in 86400 seconds..