last executing test programs: 21m31.41783435s ago: executing program 1 (id=2): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x1, 0x32, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, 0x0, 0x0) r7 = userfaultfd(0x80801) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_io_uring_submit(r8, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 21m29.513024728s ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2005}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x428, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CAP_X2APIC_API(r5, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r6, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r6, 0x407, 0xc000) get_robust_list(0x0, 0x0, &(0x7f00000005c0)) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x8}}, 0x10) 21m26.718796716s ago: executing program 1 (id=10): r0 = socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000940)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000000240)=""/178, 0xb2) close(0xffffffffffffffff) userfaultfd(0x80801) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r6, 0x5}, 0x14}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040008) 21m23.351095241s ago: executing program 1 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce) ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000)) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="02aaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000000000000000000000aa2c000002", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000040)={0x3c}, 0x8) pipe2$9p(&(0x7f0000000240), 0x80000) 21m21.806373171s ago: executing program 1 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup2(r3, r4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x6) sendto$inet(r3, &(0x7f00000012c0)="11268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=""/173, 0xa6, 0xad, 0x1, 0xa2}, 0x28) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r5, 0x1, 0x1, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x62040, 0x100) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 21m18.029530156s ago: executing program 1 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x80) 21m2.440344178s ago: executing program 32 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140), 0x8) io_setup(0x0, &(0x7f0000000000)) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xe739, 0x1, 0x8000002, 0x1d4}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$nci(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000002d40)={0x48, 0x7, r7, 0x0, 0x10000, 0x0, 0x8, 0x28d662, 0x1096e}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004040}, 0x80) 18m51.312682395s ago: executing program 4 (id=203): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{0xfbfffffa}]}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) process_mrelease(0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) r10 = dup(r6) write$UHID_INPUT(r10, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 18m46.151892307s ago: executing program 4 (id=209): socket(0x1e, 0x80004, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8ef4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001a00)=0xffffffffffffff67, 0x5, 0x0) 18m38.425897243s ago: executing program 4 (id=221): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r2, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r2, &(0x7f000000e280), 0x58a, 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setresgid(0x0, 0xee01, 0xffffffffffffffff) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x240b42, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0xff, 0x0, 0x0, 0x0, 0x80000001, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) accept(r6, &(0x7f0000000080)=@hci, &(0x7f0000000000)=0x80) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000180)={r6, 0x3ff, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x800) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 18m31.492732257s ago: executing program 4 (id=228): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1}, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r7, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x1fffffff, 0x0, 0x1000010, 0x20000], [0x0, 0x40006, 0xfffffffc], [0x0, 0x10000000100002]}) sendto$packet(r5, &(0x7f0000000180)="0b031404e0ff640f020047540ff6a13bb1000e04", 0x14, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @multicast}) 18m29.197171641s ago: executing program 4 (id=230): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x15) close_range(r8, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, r6, 0xee01, 0x0) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 18m27.005557576s ago: executing program 4 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40000) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f000045f000/0x2000)=nil, 0x2000}}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x18, 0x4, 0xd}) r5 = socket$unix(0x1, 0x1, 0x0) setreuid(0xee01, 0xee01) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) listen(r5, 0x47) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x8400000000000000, 0x2, 0x0, 0x9, 0x10}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffa, 0x9, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000240)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 18m11.487242956s ago: executing program 33 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40000) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f000045f000/0x2000)=nil, 0x2000}}) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000200)={0x18, 0x4, 0xd}) r5 = socket$unix(0x1, 0x1, 0x0) setreuid(0xee01, 0xee01) r6 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) listen(r5, 0x47) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x8400000000000000, 0x2, 0x0, 0x9, 0x10}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffa, 0x9, 0x0, 0x0, 0x200}, 0x0, &(0x7f0000000240)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 12m20.085172869s ago: executing program 5 (id=703): r0 = socket$netlink(0x10, 0x3, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x1400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000001c0)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="24000000220001060014000000fe80000000"], 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x52}}, &(0x7f0000000480)='GPL\x00', 0x4}, 0x94) 12m17.946679679s ago: executing program 5 (id=706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, "8000"}, 0x0, 0x2, {}, 0x25}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, 0x0) ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 12m14.914716218s ago: executing program 5 (id=709): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) readv(r3, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04P\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|\x92\x13\x874\xe3\x01\xfd-?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/272, &(0x7f0000000240)='/\t\x00\x00\x00\x98', 0x0) tkill(r5, 0xb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000800)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000002f69fd61", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dfa2f8fffcffffff9500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x84, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x2, 0x5, 0x3}, 0xfffffffffffffd95, 0x0, 0x0, 0x5, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7], &(0x7f0000000940)=[{0x3e6, 0x5, 0x1, 0xa}, {0x4, 0x5, 0x7, 0x5}, {0x3, 0x2, 0xc, 0x1}, {0x5, 0x3, 0x0, 0xc}, {0x3, 0x1, 0x10, 0xb}], 0x10, 0xfffffffe}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 12m9.394352908s ago: executing program 5 (id=717): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) gettid() 12m4.545224821s ago: executing program 5 (id=721): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x9, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='rcu_utilization\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffff7}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev, 0x2, 0x0, 0x0, 0x7f}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf368656e065b08004500001c0000000000010900000000000000000112009078000000061ecb4b748e1a67cab043cff8704fa1e21f86d1ffdfc1d92529b7fbad45257272079009a716c26550f319ee931a95cbfc"], 0x0) write$UHID_INPUT(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) munmap(&(0x7f000055e000/0x3000)=nil, 0x3000) clock_settime(0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000400), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r0, 0x0, 0xfffffffffffffdc5, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) 12m2.293514733s ago: executing program 5 (id=724): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_setup(0x194e, &(0x7f0000000300)={0x0, 0x2401, 0x80, 0x5, 0x2b0}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000002fc0)={0x2020}, 0x2020) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 11m46.673845336s ago: executing program 34 (id=724): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) io_uring_setup(0x194e, &(0x7f0000000300)={0x0, 0x2401, 0x80, 0x5, 0x2b0}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f0000002fc0)={0x2020}, 0x2020) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 12.685762843s ago: executing program 7 (id=3323): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)=ANY=[@ANYBLOB="30000000000000000000000000000000000000800000000000000010f6ffffff03"], 0x0, 0x0, 0x0, 0x0}) 12.325356363s ago: executing program 6 (id=3325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x109000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.59216452s ago: executing program 7 (id=3327): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000020000000200000000000000000000000000000903000000070000000000000c000000000000000000"], 0x0, 0x50}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x37a0cb12cf32113e, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 11.513424406s ago: executing program 6 (id=3330): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x650ce4b086bd444b) 9.460587172s ago: executing program 7 (id=3335): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) syz_usb_connect(0x0, 0x7ca, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0xb, 0xc2, 0xca, 0x8, 0x22b8, 0x2d9a, 0xed44, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b8, 0x3, 0x3, 0x9, 0x40, 0x3, [{{0x9, 0x4, 0xad, 0xdd, 0xf, 0x8f, 0x4d, 0xfb, 0x82, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '|;'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x80, 0x8, 0x1}, {0x6, 0x24, 0x1a, 0x1, 0x15}, [@mdlm_detail={0xa9, 0x24, 0x13, 0x5, "1217625357b539effac5900094a813c57456a13002f4b0584bb37551621ca6fbd4f1b7d5b0307b39e8bc6a0031b447cb9d1795779b14a7ea35dcc21df1288dd0bf328103d96e2ad8462291762c12e49f8cc83aacc3d174159de150bf5c56bc924ef51da9927510c448a21dd852f664c59c59e2f71703b16764156753bae7c0fe0984eb0c42052cdbdd6956150fed7db10fd6e2c2fb0ec463402c5b0e21206ee4b128174b5c"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x8, 0x7, 0x9}}, {{0x9, 0x5, 0xa, 0x9, 0x8, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x5, 0x4, 0x9, [@generic={0x101, 0x6, "42ec192fe29f622cb723fc1335d0d970cac4cd346820736852c292cb969fe8446d0144ec1c1e314de8db24e7270c6e0399388874bbc84584908859f99da8bf81c0f57ce6cb3e2277d41eb983292d7741a8fa4690056603337df5852fe1a1cf96d835116ffd09a4916e3bf38c45875f6d294c05f0c00c3161c74f68d3c406decf363829dde2278b748894fb681529b896d7e0b5c2ef874398db663c27c90ce9d91021b47443f398fed55d6b0acb8258b0f2dc3e8ec0bd1e8e6485f7815a1b8731fce368becd426a8b9a8dcde2c5960a53e1a1a8459525a4c191272b5bc9ec3f924ec5f52bd46f8296474617306f20b5f0ac363f70747b9e64da8dbcf21a7ebc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xfc, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xf8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x6, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x2, 0xc6, [@generic={0x2b, 0xa, "f4f0269ccf4e52f0dd3993f688e2a9a463022404b902a19a799af5de64645aa954cb5fd0d703f43223"}, @generic={0xbe, 0x23, "78bce6107151ccc130a625644fc7f68ea6f2d52472484b46f58adf0793740110439c3699809b880a7ff29c78cc4ff0660c86c281b3e3b2950f0df1048aef4cb929e196d43850ba0816af9fadcceb4e2b942e7a520bab545d1275ca8bef648765494c942f667de6207229e2b696e0f2505b91bcb8f7d5aaf139dd6f6d6b457875fbe3a346bd2674a49fbd41b71dc8fc3815534ddc16209e32c37972b568f3ee55fdcfa669f59f6167e51d314f4dfef1a5110b43bd874607906750d1ef"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x5, 0xfc, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x0, 0xf8, [@generic={0x21, 0x21, "c77df52f8160777fad445806b806938d9ccde74eb32436ecc1b11f0afc69af"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x2, 0x5, [@generic={0x82, 0x3, "fd1d7a94aa95bbc5d498084fa0a929ddeb514d08b690a2d6b72efdfc88d3cd46328cb61fcaf44bc8e608333598388838e681367d491f0006bb261d02bc313aa44a6b663a8d033ea514bf73316453086cac90f2b2b7a3dc914c42362ba2422227651e73698e9ece9cc8ad167d000c267f828bd24a0f620ffae2afe667d9f7cba5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xfff9}]}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x45, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xf}, @generic={0x5e, 0x7, "f5053aa230048263d5dd9dcc91bd0deb827388dd9feab200844b59e22fa004f7242b4cbd8e30e6fe0d108cfa02d013266bcc4e903ded501d4689369add1c7de32dece57656ec6cfafc58179737d0d0c076bf5102d79761973591708a"}]}}, {{0x9, 0x5, 0x14, 0x10, 0x200, 0x7f, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf4, 0x4}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0x10, 0x2, 0x8, [@generic={0x47, 0x4, "d18ce85f5923bf810cb8fa540d578e46b29cd05ab4f9d86f6f1b4a277f39644165179daf7c97b28f9bba2ae8113081757b1efd67333bcfc254c71d50ef8d9229004533d8f1"}, @generic={0x1e, 0x22, "ee307f4276790de24935c619cb0478cd237e6d5ee24b73b24ca8dc30"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x20, 0xfc, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80}, @generic={0x45, 0x1, "c8e8820075ea35450de0ed5d030de8469069efe7309a8e00e3b91d031356f95e71daf82a1918ce323da548f9dffce4e62b430247bc8de920bf0f6ff654d983e7f6b831"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x7f, 0x2}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x8, 0xf, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9f, 0x1ff}, @generic={0x101, 0xd, "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"}]}}]}}, {{0x9, 0x4, 0xb8, 0x80, 0x4, 0xda, 0xa2, 0xc, 0x6, [@generic={0x5f, 0x23, "8b599bace3c9f1ce09f241ad889a8a698a595aaddb64beeaf73f9868b3a24afd870320e2a708b31338550fb1b5e8e569b7fca4fe6c85053e5bd6c819067ee7b1b4063ab8d85be63a1ec2eb91ba4054830ae20a797e3a9ce66f000c5bc6"}], [{{0x9, 0x5, 0x1, 0x0, 0x20, 0x0, 0xe3, 0x1}}, {{0x9, 0x5, 0xc, 0x1, 0x0, 0xdf, 0xd, 0xd8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0xbe, 0x1, 0x2, [@generic={0xed, 0x1, "c129f1e89ee50e18e2732339055d79582461e7e4344d45958fe54ff13a55f460dfa014050c75b480832c2ad469912dce64f0b2f6d0b4e34750840b309790640c88493658c9d9e31d8226842b14d7c4be2a50e73712eb4557c4a81adada49e978568ad91df667d1f12dbc11e45a8bd7bd23a1eeca8d095593b89ad23116c38470422373642e9b0984713b12238cd55d08e7bc6060da4b7b6af50a0373e0389af03eb411afdf4536e307bcab50b382ab4f3c94cb31a3af189fbc9f084971912b4428371a7f42b97f8f98bb6d86a7d807f3d71f645848139338c64155740b86e4d170e3b0248ef0227e6969be"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0xc, 0x7}}]}}, {{0x9, 0x4, 0x7e, 0x1, 0x0, 0x1d, 0x5c, 0x1a, 0x80}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x3, 0x1, 0x8, 0xfe}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42c}}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010100000d000000000000000000fc02000000000000000000000000000400000000000000ff000000bad3000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20010000000000000000000000000002ffffffff33000000ffffffff00000000000000000000000005000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000010000000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 9.028875331s ago: executing program 6 (id=3339): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 7.858006865s ago: executing program 3 (id=3342): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x1000000000000, {{0x3, 0x0, 0x7caef2bd5608ec51, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 7.741351367s ago: executing program 6 (id=3345): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x10001, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) 7.060622175s ago: executing program 7 (id=3348): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r0, &(0x7f000000e280), 0x58a, 0x42, 0x0) 4.505423536s ago: executing program 3 (id=3353): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.391940971s ago: executing program 2 (id=3356): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x2, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xd12d, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x24, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x200, 0x7f, 0x9, 0x6, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10001, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xfffe, 0x3, 0x6, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x4f8f, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.218516464s ago: executing program 2 (id=3357): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x0, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f00000090c0)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000004fc0)=[{0xffffffffffffffff}], 0x1}, 0x1}], 0x2, 0x10001, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 4.217387534s ago: executing program 0 (id=3358): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000020000000200000000000000000000000000000903000000070000000000000c0000000000000000"], 0x0, 0x50}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x37a0cb12cf32113e, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 4.027983945s ago: executing program 2 (id=3359): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000020000000200000000000000000000000000000903000000070000000000000c000000000000000000"], 0x0, 0x50}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e657400000005000400"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x37a0cb12cf32113e, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) 3.90727115s ago: executing program 6 (id=3360): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.113396388s ago: executing program 7 (id=3361): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.112867188s ago: executing program 3 (id=3362): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setfsgid(0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x4000) r5 = socket(0x28, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x2000000) socket$igmp6(0xa, 0x3, 0x2) 2.759822452s ago: executing program 0 (id=3363): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000640)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.693256093s ago: executing program 3 (id=3364): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10fc}], 0x0, 0x0, 0x0}) 1.486188218s ago: executing program 2 (id=3365): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) chmod(&(0x7f0000000000)='./file0\x00', 0x4) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xa0031718502a10dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcf, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0x8001, 0x2339fdf8, 0x1000005, 0x8000, 0x200538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000080)='./file0\x00', 0x0) 1.334516059s ago: executing program 0 (id=3366): memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.249313097s ago: executing program 3 (id=3367): socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240020005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {0x0}], 0x2) 1.140585326s ago: executing program 2 (id=3368): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.025921609s ago: executing program 0 (id=3369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002d40)={0x1, 0x1}, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 273.63251ms ago: executing program 2 (id=3370): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x2000000, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 273.067756ms ago: executing program 3 (id=3371): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000001c0)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) 272.326877ms ago: executing program 0 (id=3372): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 252.514117ms ago: executing program 7 (id=3373): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xbfd1, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) 71.602535ms ago: executing program 6 (id=3374): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x80040, 0xe1, 0x14}, 0x18) 0s ago: executing program 0 (id=3375): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000020000000200000000000000000000000000000903000000070000000000000c000000000000000000"], 0x0, 0x50}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e657400000005000400"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000"], 0x6c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x37a0cb12cf32113e, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): 294967295 subj=_ pid=12438 comm="syz.0.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6b6b8e9a9 code=0x7ffc0000 [ 969.090167][T12455] Device name not specified. [ 969.090167][T12455] [ 970.252019][T12134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.273984][T12471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 971.204077][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 974.900093][T12500] pim6reg: entered allmulticast mode [ 977.241564][T12134] veth0_vlan: entered promiscuous mode [ 977.288243][T12134] veth1_vlan: entered promiscuous mode [ 977.407001][T12134] veth0_macvtap: entered promiscuous mode [ 978.383686][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1207'. [ 978.455093][T12533] syz.0.1206: attempt to access beyond end of device [ 978.455093][T12533] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 978.468371][T12533] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 979.151863][T12134] veth1_macvtap: entered promiscuous mode [ 979.844866][T12134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.858586][T12134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.872043][T12134] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.131783][T12134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.167884][T12134] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.195536][T12134] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.523108][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 981.552101][T12549] Cannot find add_set index 0 as target [ 982.293589][T12540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 983.791545][T12568] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 983.851290][T12568] netlink: 'syz.2.1213': attribute type 2 has an invalid length. [ 985.574556][T12578] bridge0: port 3(gretap0) entered blocking state [ 985.582193][T12578] bridge0: port 3(gretap0) entered disabled state [ 985.588911][T12578] gretap0: entered allmulticast mode [ 985.595942][T12578] gretap0: entered promiscuous mode [ 985.601896][T12578] bridge0: port 3(gretap0) entered blocking state [ 985.608607][T12578] bridge0: port 3(gretap0) entered forwarding state [ 987.290901][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 987.343337][ T9250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 987.355045][ T9250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 987.363793][ T9250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 987.407593][ T3003] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.418769][ T9250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 987.429666][ T9250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 987.865555][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1220'. [ 987.901549][ T3003] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.974002][T12592] lo speed is unknown, defaulting to 1000 [ 987.985484][T12605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 988.345918][ T3003] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.832140][ T3003] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.059171][ T5853] Bluetooth: hci0: command tx timeout [ 990.351235][ T3003] bridge_slave_1: left allmulticast mode [ 990.367254][ T3003] bridge_slave_1: left promiscuous mode [ 990.377662][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.420248][ T3003] bridge_slave_0: left allmulticast mode [ 990.432203][T12618] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 990.453656][ T3003] bridge_slave_0: left promiscuous mode [ 990.891490][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.719266][T12627] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 12627 comm: syz.0.1227) [ 992.158873][ T9250] Bluetooth: hci0: command tx timeout [ 992.172823][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 992.172836][ T30] audit: type=1800 audit(1752913363.046:94): pid=12627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1227" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=36304 res=0 errno=0 [ 992.368630][T12631] netlink: 'syz.6.1228': attribute type 4 has an invalid length. [ 994.205527][ T9250] Bluetooth: hci0: command tx timeout [ 995.353392][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 995.369844][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 995.380812][ T3003] bond0 (unregistering): Released all slaves [ 996.117651][T12656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1233'. [ 996.127071][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 996.276107][T12656] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 996.290524][ T9250] Bluetooth: hci0: command tx timeout [ 996.299692][ T3003] hsr_slave_0: left promiscuous mode [ 996.367504][T12656] evm: overlay not supported [ 996.658276][ T3003] hsr_slave_1: left promiscuous mode [ 996.665651][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.673837][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.684182][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.731904][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.934720][ T3003] veth1_macvtap: left promiscuous mode [ 996.940544][ T3003] veth0_macvtap: left promiscuous mode [ 996.946452][ T3003] veth1_vlan: left promiscuous mode [ 997.019130][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'. [ 999.889387][ T3003] veth0_vlan: left promiscuous mode [ 1004.766508][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 1004.822500][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 1005.415498][T12686] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1005.540041][ T30] audit: type=1800 audit(1752913376.836:95): pid=12688 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1241" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1005.560881][T12688] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1005.579180][T12688] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1005.599457][T12688] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1005.766246][T12694] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1007.303585][T12592] chnl_net:caif_netlink_parms(): no params data found [ 1010.846058][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 1012.868717][T12592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.891952][T12592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.907315][T12592] bridge_slave_0: entered allmulticast mode [ 1013.180920][T12592] bridge_slave_0: entered promiscuous mode [ 1013.197948][T12592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.219284][T12592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.201950][T12592] bridge_slave_1: entered allmulticast mode [ 1014.244137][T12592] bridge_slave_1: entered promiscuous mode [ 1016.542724][T12592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.761534][T12759] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1017.505453][T12592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.138035][T12759] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1018.270050][T12767] netlink: 'syz.2.1259': attribute type 6 has an invalid length. [ 1018.473350][T12592] team0: Port device team_slave_0 added [ 1018.628782][T12592] team0: Port device team_slave_1 added [ 1018.636603][ T8910] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1018.810505][T12767] syz.2.1259 (12767): attempted to duplicate a private mapping with mremap. This is not supported. [ 1019.651484][ T30] audit: type=1326 audit(1752913390.966:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12766 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1019.695396][ T8910] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1019.777808][ T30] audit: type=1326 audit(1752913390.966:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12766 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1019.829053][ T30] audit: type=1326 audit(1752913390.966:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12766 comm="syz.2.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1019.906378][T12779] : entered promiscuous mode [ 1020.086974][T12592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.143757][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.366974][T12592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.383123][T12782] fido_id[12782]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1020.416614][T12592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.445738][T12592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.832077][T12592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.141298][T12800] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1267'. [ 1022.150363][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1267'. [ 1022.161905][T12800] overlayfs: failed to clone upperpath [ 1022.915813][T12592] hsr_slave_0: entered promiscuous mode [ 1023.102910][T12592] hsr_slave_1: entered promiscuous mode [ 1023.118003][T12592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.126151][T12592] Cannot create hsr debugfs directory [ 1024.441738][T12822] xt_hashlimit: size too large, truncated to 1048576 [ 1026.006619][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 1027.129729][T12592] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1027.145675][T12592] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1027.163861][T12592] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1027.186716][T12592] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1027.485313][T12592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.533694][T12592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.564361][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 1027.586068][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.593211][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.655300][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.662469][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.801768][T12592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.015026][T12859] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1028.288732][T12592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.509188][T12869] input: syz1 as /devices/virtual/input/input14 [ 1029.921659][T12884] netlink: 304 bytes leftover after parsing attributes in process `syz.6.1287'. [ 1031.867202][T12592] veth0_vlan: entered promiscuous mode [ 1031.966161][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1292'. [ 1032.742056][T12592] veth1_vlan: entered promiscuous mode [ 1032.925676][T12592] veth0_macvtap: entered promiscuous mode [ 1032.983260][T12592] veth1_macvtap: entered promiscuous mode [ 1033.084458][T12592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.133811][T12592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.246142][T12592] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.333795][T12592] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.359447][T12592] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.795868][T12592] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.855502][T12920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1298'. [ 1035.425459][ T6774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.482820][ T6774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.717616][ T6771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.541587][ T6771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.777675][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1312'. [ 1038.786796][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1312'. [ 1039.509080][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1039.789219][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 1039.869980][ T43] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1039.879883][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.889418][ T43] usb 8-1: Product: syz [ 1039.907127][ T43] usb 8-1: Manufacturer: syz [ 1039.927312][ T43] usb 8-1: SerialNumber: syz [ 1039.947063][ T43] usb 8-1: config 0 descriptor?? [ 1040.052287][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1040.302678][ T43] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 1040.346028][ T43] sq905 8-1:0.0: probe with driver sq905 failed with error -71 [ 1040.409438][ T43] usb 8-1: USB disconnect, device number 2 [ 1043.455138][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1324'. [ 1044.894087][ T9250] Bluetooth: hci0: ISO packet too small [ 1046.709303][T13041] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1049.693913][T13051] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1050.021673][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 1052.116759][T13077] Cannot find del_set index 0 as target [ 1052.129698][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'. [ 1053.472932][T13090] @: renamed from bond_slave_0 (while UP) [ 1053.900907][T13096] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1347'. [ 1055.879465][T13112] netlink: 'syz.3.1355': attribute type 11 has an invalid length. [ 1057.186383][ T43] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1057.669211][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 1057.701208][ T43] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.724431][ T43] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1057.737468][ T43] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1057.756506][ T43] usb 8-1: Product: syz [ 1057.766259][ T43] usb 8-1: Manufacturer: syz [ 1057.781573][ T43] usb 8-1: SerialNumber: syz [ 1057.804154][ T43] usb 8-1: config 0 descriptor?? [ 1057.817260][ T43] hub 8-1:0.0: bad descriptor, ignoring hub [ 1057.839591][ T43] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1058.571703][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 1058.580871][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 1059.160653][ T43] usb 8-1: USB disconnect, device number 3 [ 1061.839842][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1382'. [ 1061.997001][T13190] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1383' sets config #-1 [ 1062.239105][T13198] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1063.177307][T13216] netlink: 'syz.6.1393': attribute type 1 has an invalid length. [ 1064.114239][T13216] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1064.652919][T13214] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1064.933776][T13233] xt_HMARK: spi-set and port-set can't be combined [ 1066.169243][T13256] i2c i2c-0: Invalid block write size 34 [ 1066.176478][T13256] netlink: 'syz.7.1412': attribute type 1 has an invalid length. [ 1066.379105][T13256] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1067.431939][T13276] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1416'. [ 1068.460246][T13279] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1069.862706][ T8910] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1070.029247][ T8910] usb 8-1: Using ep0 maxpacket: 16 [ 1070.057880][ T8910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1070.079106][ T8910] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1070.079140][ T8910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.079161][ T8910] usb 8-1: Product: syz [ 1070.079177][ T8910] usb 8-1: Manufacturer: syz [ 1070.079192][ T8910] usb 8-1: SerialNumber: syz [ 1070.087294][ T8910] usb 8-1: config 0 descriptor?? [ 1070.101328][ T8910] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1070.121466][ T8910] usb 8-1: Detected FT232R [ 1070.503861][ T8910] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1070.521461][ T8910] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1070.551437][ T8910] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1070.588424][ T8910] usb 8-1: USB disconnect, device number 4 [ 1070.635629][ T8910] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1070.687304][ T8910] ftdi_sio 8-1:0.0: device disconnected [ 1071.265791][T13321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.720368][T13352] Cannot find add_set index 0 as target [ 1074.926860][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1465'. [ 1075.162630][T13393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1465'. [ 1075.389671][T13397] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1467'. [ 1075.425295][T13397] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1467'. [ 1075.455264][T13397] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1467'. [ 1075.944692][T13415] xt_hashlimit: size too large, truncated to 1048576 [ 1077.220285][ T9054] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1077.588157][ T9054] usb 4-1: Using ep0 maxpacket: 8 [ 1078.600326][T13454] nftables ruleset with unbound set [ 1078.690037][ T9054] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1078.699990][ T9054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.708602][ T9054] usb 4-1: Product: syz [ 1078.713030][ T9054] usb 4-1: Manufacturer: syz [ 1078.717670][ T9054] usb 4-1: SerialNumber: syz [ 1078.735491][ T9054] usb 4-1: config 0 descriptor?? [ 1078.950534][ T9054] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1079.174363][T13473] tipc: Enabling of bearer rejected, failed to enable media [ 1079.442888][T13481] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1079.503918][ T9054] usb write operation failed. (-71) [ 1080.265246][ T9054] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1080.640101][ T9054] dvbdev: DVB: registering new adapter (Terratec H7) [ 1080.647276][ T9054] usb 4-1: media controller created [ 1080.669765][ T9054] usb read operation failed. (-71) [ 1080.675600][ T9054] usb write operation failed. (-71) [ 1080.693320][ T9054] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1080.711956][ T9054] usb 4-1: USB disconnect, device number 11 [ 1080.942717][T13478] xt_hashlimit: size too large, truncated to 1048576 [ 1083.561317][ T5904] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1084.729004][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 1084.738287][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1085.263349][ T5904] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 1085.307983][ T5904] usb 4-1: config 8 has no interface number 0 [ 1085.453052][ T5904] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1085.477995][ T5904] usb 4-1: string descriptor 0 read error: -22 [ 1085.484786][ T5904] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1085.494043][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.454498][ T5904] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 1087.391180][ T5904] usb 4-1: USB disconnect, device number 12 [ 1088.019114][ T5904] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1088.199254][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 1088.299695][ T9054] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1088.330314][ T5904] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 1088.348360][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1088.359893][ T5904] usb 4-1: Product: syz [ 1088.364214][ T5904] usb 4-1: Manufacturer: syz [ 1088.372031][ T5904] usb 4-1: SerialNumber: syz [ 1088.448608][ T5904] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1088.489147][ T9054] usb 8-1: Using ep0 maxpacket: 16 [ 1088.540115][ T5904] r8152-cfgselector 4-1: config 0 descriptor?? [ 1088.619063][ T9054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1088.711198][ T9054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1088.894124][ T9054] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1088.929413][ T9054] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1088.942721][ T9054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.970459][ T9054] usb 8-1: config 0 descriptor?? [ 1089.025114][ T9054] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input15 [ 1089.663187][ T6297] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 1089.664637][ T9054] usb 8-1: USB disconnect, device number 5 [ 1089.670492][ C1] pxrc 8-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1090.374767][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 1090.549094][ T9054] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1091.368085][ T9054] usb 8-1: Using ep0 maxpacket: 8 [ 1091.379480][ T9054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.404004][ T9054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.418977][ T9054] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1091.432484][ T9054] usb 8-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1091.441942][ T9054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.479422][ T9054] usb 8-1: config 0 descriptor?? [ 1091.693332][T13642] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1091.761409][T13642] overlayfs: missing 'lowerdir' [ 1092.192240][ T9054] logitech 0003:046D:C293.0002: bogus close delimiter [ 1092.303554][ T9054] logitech 0003:046D:C293.0002: item 0 1 2 10 parsing failed [ 1092.386677][ T9054] logitech 0003:046D:C293.0002: parse failed [ 1092.399458][ T9054] logitech 0003:046D:C293.0002: probe with driver logitech failed with error -22 [ 1092.482725][ T9054] usb 8-1: USB disconnect, device number 6 [ 1093.260582][T13689] tipc: Enabled bearer , priority 0 [ 1093.326078][ T30] audit: type=1326 audit(1752913464.606:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1094.210086][ T30] audit: type=1326 audit(1752913464.686:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13686 comm="syz.2.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1094.289175][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1587'. [ 1094.312869][T13703] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1094.729727][ T8910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1094.819992][ T6297] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1094.904245][ T8910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.915405][ T8910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.926659][ T8910] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1094.936125][ T8910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.950168][ T8910] usb 4-1: config 0 descriptor?? [ 1095.008815][ T6297] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1095.020185][ T6297] usb 8-1: config 0 has no interface number 0 [ 1095.026832][ T6297] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1095.036923][ T6297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.070585][ T6297] usb 8-1: config 0 descriptor?? [ 1095.104392][ T6297] usb 8-1: selecting invalid altsetting 1 [ 1095.127780][ T6297] dvb_ttusb_budget: ttusb_init_controller: error [ 1095.135554][ T6297] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1096.153929][ T8910] aquacomputer_d5next 0003:0C70:F014.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 1096.210951][ T6297] DVB: Unable to find symbol cx22700_attach() [ 1096.369227][ T8910] usb 4-1: USB disconnect, device number 14 [ 1096.414775][ T6297] DVB: Unable to find symbol tda10046_attach() [ 1096.481429][ T6297] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1097.481453][ T6297] usb 8-1: USB disconnect, device number 7 [ 1098.230072][T13742] fido_id[13742]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1099.788688][T13792] IPv6: NLM_F_CREATE should be specified when creating new route [ 1103.317528][T13826] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1104.191963][T13836] tipc: Started in network mode [ 1104.197105][T13836] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1104.217431][T13836] tipc: Enabled bearer , priority 10 [ 1105.361530][ T8910] tipc: Node number set to 8432298 [ 1105.407913][T13851] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1106.140986][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 1106.402120][T13867] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1106.449210][T13872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 1110.509088][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1676'. [ 1112.541486][T13955] sp0: Synchronizing with TNC [ 1112.655273][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 1114.480405][ T6297] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1114.639026][ T6297] usb 4-1: Using ep0 maxpacket: 16 [ 1114.661639][ T6297] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1114.673266][ T6297] usb 4-1: config 0 has no interface number 0 [ 1114.690835][ T6297] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.730601][ T6297] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.749046][ T6297] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1114.762313][ T6297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.814487][ T6297] usb 4-1: config 0 descriptor?? [ 1115.905218][ T6297] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 1115.936965][ T6297] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 1115.950565][ T6297] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 1115.966359][ T6297] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 1115.976564][ T6297] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 1115.998656][ T6297] usb 4-1: USB disconnect, device number 15 [ 1116.317529][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1702'. [ 1119.175650][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'. [ 1120.619188][ T6297] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1120.999114][ T6297] usb 8-1: Using ep0 maxpacket: 16 [ 1121.014791][ T6297] usb 8-1: config 166 has an invalid interface number: 177 but max is 1 [ 1121.136294][ T6297] usb 8-1: config 166 has an invalid interface number: 34 but max is 1 [ 1121.251077][ T6297] usb 8-1: config 166 has no interface number 0 [ 1121.342963][ T6297] usb 8-1: config 166 has no interface number 1 [ 1121.429400][ T6297] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1121.629538][ T6297] usb 8-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1121.689176][ T6297] usb 8-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1121.719891][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 1121.729183][ T6297] usb 8-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1121.789017][ T6297] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1121.822058][ T6297] usb 8-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1121.848701][ T6297] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1121.869013][ T6297] usb 8-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1121.890858][ T6297] usb 8-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1121.931575][ T6297] usb 8-1: config 166 interface 177 has no altsetting 0 [ 1121.969182][ T6297] usb 8-1: config 166 interface 34 has no altsetting 0 [ 1121.982194][ T6297] usb 8-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1121.991896][ T6297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.005658][ T6297] usb 8-1: Product: syz [ 1122.014630][ T6297] usb 8-1: Manufacturer: syz [ 1122.026916][ T6297] usb 8-1: SerialNumber: syz [ 1122.611649][T14100] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1123.085772][ T6297] ums-realtek 8-1:166.177: USB Mass Storage device detected [ 1123.271324][ T6297] ums-realtek 8-1:166.34: USB Mass Storage device detected [ 1123.393398][ T6297] ums-realtek 8-1:166.34: probe with driver ums-realtek failed with error -5 [ 1123.447070][T14122] 2g,{: renamed from lo [ 1123.533993][ T6297] usb 8-1: Found UVC 0.00 device syz (0bda:0138) [ 1123.552190][ T6297] usb 8-1: No valid video chain found. [ 1123.574548][ T6297] usb 8-1: USB disconnect, device number 8 [ 1125.769972][ T5904] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1126.001224][ T5904] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1126.029094][ T5904] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1126.049916][ T5904] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1126.064998][ T5904] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1126.128372][ T5904] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1126.169002][ T5904] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1126.193323][ T5904] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1126.419247][ T5904] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1126.428989][ T5904] usb 4-1: Product: syz [ 1126.433223][ T5904] usb 4-1: Manufacturer: syz [ 1126.437955][ T5904] usb 4-1: SerialNumber: syz [ 1126.459149][ T5904] usb 4-1: config 0 descriptor?? [ 1126.466136][T14162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1126.479077][ T5904] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1126.517904][ T5904] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1127.788226][T14205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1127.847503][T14208] bond0: option resend_igmp: invalid value (1349619868) [ 1127.879790][T14208] bond0: option resend_igmp: allowed values 0 - 255 [ 1128.099228][T14214] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1128.935911][ T9054] usb 4-1: USB disconnect, device number 16 [ 1129.006159][ T9054] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1129.449242][ T9054] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1129.484034][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1790'. [ 1129.497824][T14240] nbd: couldn't find device at index 131080 [ 1129.619202][ T9054] usb 4-1: Using ep0 maxpacket: 32 [ 1129.634303][ T9054] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1129.646773][ T9054] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1129.665065][ T9054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.675327][ T9054] usb 4-1: Product: syz [ 1129.684584][ T9054] usb 4-1: Manufacturer: syz [ 1129.690370][ T9054] usb 4-1: SerialNumber: syz [ 1129.715057][ T9054] usb 4-1: config 0 descriptor?? [ 1130.048697][ T30] audit: type=1400 audit(1752913501.356:101): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14258 comm="syz.7.1799" dest=20002 [ 1130.161648][ T9054] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1130.378709][ T9054] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1130.536143][ T9054] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 1130.855165][ T9054] usb 4-1: USB disconnect, device number 17 [ 1131.068563][T14270] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1132.779873][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1810'. [ 1135.616636][T14326] exFAT-fs (nullb0): invalid boot record signature [ 1135.657765][T14326] exFAT-fs (nullb0): failed to read boot sector [ 1135.686522][T14328] macsec1: entered allmulticast mode [ 1135.692030][T14328] hsr0: entered allmulticast mode [ 1135.697295][T14328] hsr_slave_0: entered allmulticast mode [ 1135.705813][T14328] hsr_slave_1: entered allmulticast mode [ 1135.712205][T14326] exFAT-fs (nullb0): failed to recognize exfat type [ 1135.769587][T14328] hsr0: left allmulticast mode [ 1135.775133][T14328] hsr_slave_0: left allmulticast mode [ 1135.793643][T14328] hsr_slave_1: left allmulticast mode [ 1137.271164][T14368] netlink: 'syz.6.1842': attribute type 1 has an invalid length. [ 1137.424904][T14368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1138.718648][T14388] lo speed is unknown, defaulting to 1000 [ 1140.126771][T14420] netlink: 'syz.2.1863': attribute type 1 has an invalid length. [ 1140.202189][T14420] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1141.606467][T14447] loop7: detected capacity change from 0 to 7 [ 1141.622842][T13126] Dev loop7: unable to read RDB block 7 [ 1141.633370][T13126] loop7: unable to read partition table [ 1141.641016][T13126] loop7: partition table beyond EOD, truncated [ 1141.663922][T14447] Dev loop7: unable to read RDB block 7 [ 1141.675862][T14447] loop7: unable to read partition table [ 1141.709418][T14447] loop7: partition table beyond EOD, truncated [ 1141.725303][T14447] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 1142.024089][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1873'. [ 1145.686156][T14516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1892'. [ 1147.367911][T14536] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1147.812362][T14546] tap0: tun_chr_ioctl cmd 1074025677 [ 1147.832484][T14546] tap0: linktype set to 0 [ 1150.995378][T14590] Bluetooth: MGMT ver 1.23 [ 1151.429339][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1923'. [ 1152.729411][ T6297] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1153.069182][ T6297] usb 8-1: Using ep0 maxpacket: 32 [ 1153.286947][ T6297] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1153.305334][ T6297] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.339700][ T6297] usb 8-1: config 0 descriptor?? [ 1153.559202][ T6297] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1153.594846][ T6297] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1153.630573][ T6297] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1153.649358][ T6297] usb 8-1: media controller created [ 1153.738165][ T6297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.855292][ T6297] az6027: usb out operation failed. (-71) [ 1153.879306][ T6297] az6027: usb out operation failed. (-71) [ 1153.895002][ T6297] stb0899_attach: Driver disabled by Kconfig [ 1153.908744][ T6297] az6027: no front-end attached [ 1153.908744][ T6297] [ 1153.921194][ T6297] az6027: usb out operation failed. (-71) [ 1153.930727][ T6297] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1153.942700][ T6297] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 1153.964250][ T1068] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1154.015476][ T6297] dvb-usb: schedule remote query interval to 400 msecs. [ 1154.031907][ T6297] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1154.066208][ T6297] usb 8-1: USB disconnect, device number 9 [ 1154.283452][T14646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1951'. [ 1154.299291][ T1068] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1154.656151][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1154.782639][T14647] netlink: 'syz.6.1952': attribute type 1 has an invalid length. [ 1154.785823][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1154.808812][ T6297] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1154.831380][ T1068] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1154.853751][ T1068] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1154.863348][ T1068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.214800][ T1068] usb 4-1: config 0 descriptor?? [ 1155.269702][T14647] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1155.437992][T14657] fuseblk: Bad value for 'fd' [ 1156.332577][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.349161][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.492729][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.500420][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.507867][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.531831][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.543902][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.570384][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.578032][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.601961][T14668] nullb0: AHDI p1 [ 1156.638995][ T1068] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 1156.700099][ T1068] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1156.788119][ T1068] usb 4-1: USB disconnect, device number 18 [ 1158.674572][T14675] fido_id[14675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1158.755439][T14700] netlink: 'syz.2.1967': attribute type 1 has an invalid length. [ 1159.025722][T14700] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1159.214719][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1971'. [ 1161.759152][ T6297] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1161.921570][ T6297] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1161.939322][ T6297] usb 4-1: config 0 has no interface number 0 [ 1161.965078][ T6297] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1162.005380][ T6297] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1162.026706][ T6297] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1162.060277][ T6297] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1162.079114][ T6297] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1162.099705][ T6297] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1162.128163][ T6297] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1162.164342][ T6297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.219539][ T6297] usb 4-1: config 0 descriptor?? [ 1162.245891][T14757] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1162.254468][T14757] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1162.281608][ T6297] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1163.072307][ T1068] usb 4-1: USB disconnect, device number 19 [ 1163.116945][ T1068] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1164.362262][ T1068] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1164.731767][ T1068] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1164.758530][ T1068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.954355][T14801] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1165.232052][ T1068] usb 4-1: config 0 descriptor?? [ 1165.467465][ T1068] cp210x 4-1:0.0: cp210x converter detected [ 1165.879849][ T1068] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1166.123565][T14816] lo speed is unknown, defaulting to 1000 [ 1166.139661][ T1068] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1166.343665][ T1068] usb 4-1: USB disconnect, device number 20 [ 1166.365946][ T1068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1166.389087][ T5904] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1166.427570][ T1068] cp210x 4-1:0.0: device disconnected [ 1166.561615][ T5904] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.592351][ T5904] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1166.608035][ T5904] usb 8-1: config 1 has no interface number 0 [ 1166.629522][ T5904] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.649387][ T5904] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1166.658515][ T5904] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1166.700952][ T5904] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1166.726219][ T5904] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.736367][ T5904] usb 8-1: Product: syz [ 1166.741002][ T5904] usb 8-1: Manufacturer: syz [ 1166.745820][ T5904] usb 8-1: SerialNumber: syz [ 1167.591479][ T5904] cdc_ncm 8-1:1.1: bind() failure [ 1167.796800][ T5904] usb 8-1: USB disconnect, device number 10 [ 1168.031250][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 1169.095654][T14882] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 1172.345115][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 1172.410332][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2048'. [ 1172.449346][T14930] macvlan2: entered promiscuous mode [ 1172.469810][T14930] bond0: entered promiscuous mode [ 1172.490304][T14930] bond_slave_0: entered promiscuous mode [ 1172.649610][T14930] bond_slave_1: entered promiscuous mode [ 1172.650361][T14936] 9pnet_fd: Insufficient options for proto=fd [ 1172.655681][T14930] bridge_slave_1: entered promiscuous mode [ 1172.678599][T14930] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1174.616952][T14947] team0 (unregistering): Port device team_slave_0 removed [ 1174.631808][T14947] team0 (unregistering): Port device team_slave_1 removed [ 1174.706138][T14948] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1174.717563][T14948] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1174.767795][T14948] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1175.053767][T14986] sp0: Synchronizing with TNC [ 1175.199280][ T5904] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1175.274459][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 1175.370017][ T5904] usb 8-1: Using ep0 maxpacket: 16 [ 1175.528284][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1175.740921][ T5904] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1175.883620][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.983721][ T5904] usb 8-1: config 0 descriptor?? [ 1176.453475][ T5904] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1176.674217][T15009] random: crng reseeded on system resumption [ 1176.732176][T15009] Restarting kernel threads ... [ 1176.754035][T15009] Done restarting kernel threads. [ 1176.759591][ T9250] Bluetooth: hci0: command 0x0405 tx timeout [ 1176.900885][ T5904] usb 8-1: USB disconnect, device number 11 [ 1177.179339][ T6297] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1177.312744][T15023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 1178.168946][ T6297] usb 4-1: Using ep0 maxpacket: 32 [ 1178.181263][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1178.193044][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1178.207103][ T6297] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1178.218925][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1178.233165][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1178.250067][ T6297] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1178.270443][ T6297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.289269][ T6297] usb 4-1: Product: syz [ 1178.297119][ T6297] usb 4-1: Manufacturer: syz [ 1178.308910][ T6297] usb 4-1: SerialNumber: syz [ 1178.333799][ T6297] usb 4-1: config 0 descriptor?? [ 1178.343193][T15015] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1178.396808][ T6297] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 1178.429105][ T5192] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1178.486702][ T5192] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1178.519426][ T5192] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1178.544513][ T5192] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1178.631716][T15015] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1178.702856][ T6297] usb 4-1: USB disconnect, device number 21 [ 1178.840254][ T9250] Bluetooth: hci0: command 0x0405 tx timeout [ 1179.048522][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2094'. [ 1179.732124][T15057] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2107'. [ 1179.902082][T15059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 1180.877394][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2108'. [ 1180.920921][ T9250] Bluetooth: hci0: command 0x0405 tx timeout [ 1181.988955][ T5904] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1182.159273][ T5904] usb 4-1: Using ep0 maxpacket: 8 [ 1182.179158][ T5904] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1182.187525][ T5904] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1182.262378][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1182.275219][ T5904] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1182.293349][ T5904] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1182.306857][ T5904] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1182.327654][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.132190][ T5904] usb 4-1: usb_control_msg returned -32 [ 1183.678175][ T5904] usbtmc 4-1:16.0: can't read capabilities [ 1184.029310][T15114] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 1184.049833][ T1068] usb 4-1: USB disconnect, device number 22 [ 1186.668148][T15152] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1187.280049][ T1068] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1187.582636][ T1068] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1187.616258][ T1068] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.670794][ T1068] usb 8-1: config 0 descriptor?? [ 1187.691505][ T1068] cp210x 8-1:0.0: cp210x converter detected [ 1188.478641][ T1068] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1188.533105][ T1068] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1189.231506][ T1068] usb 8-1: USB disconnect, device number 12 [ 1189.343077][ T1068] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1189.372958][ T1068] cp210x 8-1:0.0: device disconnected [ 1190.119274][T15207] i2c i2c-0: Invalid block write size 34 [ 1190.134139][T15207] netlink: 'syz.7.2167': attribute type 1 has an invalid length. [ 1191.038772][T15207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1191.789704][ T6297] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1192.339298][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1192.473098][ T6297] usb 4-1: device descriptor read/64, error -32 [ 1192.495076][ T30] audit: type=1326 audit(1752913563.806:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1192.596383][ T30] audit: type=1326 audit(1752913563.806:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1192.677275][ T30] audit: type=1326 audit(1752913563.806:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1192.700685][ T30] audit: type=1326 audit(1752913563.806:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1192.723871][ T30] audit: type=1326 audit(1752913563.806:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1192.760042][ T6297] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1192.852689][ T30] audit: type=1326 audit(1752913563.806:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1192.933094][ T6297] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1192.951903][ T30] audit: type=1326 audit(1752913563.806:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1192.976826][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.999491][ T30] audit: type=1326 audit(1752913563.806:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1193.023172][ T6297] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1193.032584][ T6297] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1193.046103][ T6297] usb 4-1: Manufacturer: syz [ 1193.060154][ T6297] usb 4-1: config 0 descriptor?? [ 1193.085014][ T30] audit: type=1326 audit(1752913563.806:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1193.152010][ T30] audit: type=1326 audit(1752913563.806:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15230 comm="syz.2.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7dc252ab89 code=0x7ffc0000 [ 1193.281514][T15224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.321008][T15224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.648943][ T6297] rc_core: IR keymap rc-hauppauge not found [ 1193.654930][ T6297] Registered IR keymap rc-empty [ 1193.673813][ T6297] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1193.822465][ T6297] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 1194.548284][ T6297] usb 4-1: USB disconnect, device number 24 [ 1194.989088][ T9054] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1195.161284][ T9054] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1195.177787][ T9054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.190301][T15285] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2193'. [ 1195.194119][ T9054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.214518][ T9054] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1195.237707][ T9054] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1195.254631][ T9054] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1195.273177][ T9054] usb 8-1: Manufacturer: syz [ 1195.290669][ T9054] usb 8-1: config 0 descriptor?? [ 1195.629972][ T6297] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1195.732241][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2199'. [ 1195.743138][ T9054] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 1195.779533][ T9054] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1195.816233][ T6297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.841498][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1195.888904][ T6297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1195.924850][ T6297] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1195.973421][ T6297] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1195.992857][ T6297] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1196.025570][ T6297] usb 4-1: Manufacturer: syz [ 1196.055159][ T6297] usb 4-1: config 0 descriptor?? [ 1196.074197][ T9054] usb 8-1: USB disconnect, device number 13 [ 1196.566882][T15315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2205'. [ 1196.769960][ T6297] rc_core: IR keymap rc-hauppauge not found [ 1196.783430][ T6297] Registered IR keymap rc-empty [ 1196.793505][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1196.849333][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1196.902726][ T6297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1196.975539][ T6297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 1197.014993][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.059980][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.089552][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.129426][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.180954][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.232915][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.271142][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.359109][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.389392][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.429484][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.449251][ T9054] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1197.450587][ T6297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1197.516391][ T6297] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1197.536391][ T6297] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1197.562776][ T6297] usb 4-1: USB disconnect, device number 25 [ 1197.638908][ T9054] usb 8-1: Using ep0 maxpacket: 8 [ 1197.670470][ T9054] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1197.694861][ T9054] usb 8-1: config 0 has no interface number 0 [ 1197.714565][ T9054] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1197.752074][ T9054] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1197.780683][ T9054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.818081][ T9054] usb 8-1: config 0 descriptor?? [ 1197.865803][ T9054] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1198.150834][T15351] tipc: New replicast peer: 0.0.0.0 [ 1198.167089][T15351] tipc: Enabled bearer , priority 0 [ 1198.183895][T15351] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 1198.343282][ T9054] usb 8-1: USB disconnect, device number 14 [ 1199.173005][T15379] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1199.187430][T15379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1199.279257][ T6297] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1199.446371][ T6297] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1199.457445][ T6297] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1199.473096][ T6297] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1199.482348][ T6297] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1199.501442][ T6297] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1199.522118][ T6297] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1199.553840][ T6297] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1199.566649][ T6297] usb 8-1: Product: syz [ 1199.571356][ T6297] usb 8-1: Manufacturer: syz [ 1199.589920][ T6297] cdc_wdm 8-1:1.0: skipping garbage [ 1199.595773][ T6297] cdc_wdm 8-1:1.0: skipping garbage [ 1199.611931][ T6297] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1199.624817][ T6297] cdc_wdm 8-1:1.0: Unknown control protocol [ 1199.989061][ T9054] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1200.159355][ T9054] usb 4-1: Using ep0 maxpacket: 32 [ 1200.166536][ T9054] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1200.189190][ T9054] usb 4-1: config 0 has no interface number 0 [ 1200.195378][ T9054] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.216746][ T9054] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1200.233092][ T9054] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1200.252516][ T9054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.269135][ T9054] usb 4-1: Product: syz [ 1200.278957][ T9054] usb 4-1: Manufacturer: syz [ 1200.283778][ T9054] usb 4-1: SerialNumber: syz [ 1200.307502][ T9054] usb 4-1: config 0 descriptor?? [ 1200.463298][ T43] usb 8-1: USB disconnect, device number 15 [ 1201.164912][ T9054] appletouch 4-1:0.85: Geyser mode initialized. [ 1201.187853][ T9054] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input21 [ 1201.325453][ T6297] kernel write not supported for file /390/clear_refs (pid: 6297 comm: kworker/0:11) [ 1201.401289][ T9054] usb 4-1: USB disconnect, device number 26 [ 1201.438053][ T9054] appletouch 4-1:0.85: input: appletouch disconnected [ 1202.584723][T15452] syzkaller1: entered promiscuous mode [ 1202.595600][T15452] syzkaller1: entered allmulticast mode [ 1203.799113][ T6300] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1203.921963][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2264'. [ 1204.014815][ T6300] usb 8-1: Using ep0 maxpacket: 8 [ 1204.119666][ T6300] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 1204.174169][ T6300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.209387][ T6300] usb 8-1: Product: syz [ 1204.213629][ T6300] usb 8-1: Manufacturer: syz [ 1204.228512][ T6300] usb 8-1: SerialNumber: syz [ 1204.250943][ T6300] usb 8-1: config 0 descriptor?? [ 1204.330847][ T6300] gspca_main: sq905-2.14.0 probing 2770:9120 [ 1204.420349][ T1068] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1204.591907][ T1068] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1205.000861][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1205.012034][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1205.022426][ T1068] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1205.035597][ T1068] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1205.045449][ T1068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.059756][ T1068] usb 4-1: config 0 descriptor?? [ 1205.527468][ T1068] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1205.606389][ T6300] gspca_sq905: bulk read fail (-22) len 0/4 [ 1205.620969][ T6300] sq905 8-1:0.0: probe with driver sq905 failed with error -5 [ 1205.851118][ T9054] usb 8-1: USB disconnect, device number 16 [ 1206.406083][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2273'. [ 1206.686861][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 1206.686882][ T30] audit: type=1800 audit(1752913577.996:195): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2282" name="nullb0" dev="tmpfs" ino=2735 res=0 errno=0 [ 1206.935057][T15510] pim6reg1: entered promiscuous mode [ 1206.945063][T15510] pim6reg1: entered allmulticast mode [ 1207.388563][T15432] Set syz1 is full, maxelem 65536 reached [ 1208.074118][T15524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2292'. [ 1208.283939][ T43] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 1208.339748][ T43] usb 4-1: device reset changed ep0 maxpacket size! [ 1208.393182][ T9054] usb 4-1: USB disconnect, device number 27 [ 1208.589402][ T9054] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1208.764513][ T9054] usb 4-1: Using ep0 maxpacket: 32 [ 1208.789872][ T9054] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1208.818046][ T9054] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1208.830170][ T9054] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1208.853879][T15554] syz.7.2303: attempt to access beyond end of device [ 1208.853879][T15554] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1208.874367][T15554] syz.7.2303: attempt to access beyond end of device [ 1208.874367][T15554] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1208.887920][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1208.923557][T15554] syz.7.2303: attempt to access beyond end of device [ 1208.923557][T15554] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1208.942640][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1208.957405][T15554] syz.7.2303: attempt to access beyond end of device [ 1208.957405][T15554] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1208.976267][T15554] syz.7.2303: attempt to access beyond end of device [ 1208.976267][T15554] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1208.995663][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1209.007391][T15554] syz.7.2303: attempt to access beyond end of device [ 1209.007391][T15554] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1209.042954][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1209.055702][ T9054] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1209.065002][T15554] syz.7.2303: attempt to access beyond end of device [ 1209.065002][T15554] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1209.077851][ T9054] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1209.086299][ T9054] usb 4-1: Product: syz [ 1209.090717][ T9054] usb 4-1: Manufacturer: syz [ 1209.095372][ T9054] usb 4-1: SerialNumber: syz [ 1209.101597][T15554] syz.7.2303: attempt to access beyond end of device [ 1209.101597][T15554] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1209.117612][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 1209.120765][ T9054] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 1209.136422][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1209.162244][T15554] syz.7.2303: attempt to access beyond end of device [ 1209.162244][T15554] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1209.181446][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1209.209764][T15554] syz.7.2303: attempt to access beyond end of device [ 1209.209764][T15554] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1209.246600][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1209.264088][T15554] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1209.291988][T15554] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1209.406618][ T9054] usb 4-1: USB disconnect, device number 28 [ 1209.412942][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1209.489556][ T9054] appletouch 4-1:1.0: input: appletouch disconnected [ 1209.686146][T15565] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 1209.944880][T15575] team_slave_1: entered promiscuous mode [ 1213.415736][T15633] netlink: 'syz.0.2334': attribute type 4 has an invalid length. [ 1213.630502][ T1068] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1213.819726][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1213.869558][ T1068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.918872][ T1068] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1213.981192][T15635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2335'. [ 1213.984109][ T1068] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.140884][ T1068] usb 4-1: config 0 descriptor?? [ 1214.381150][T15660] netlink: 'syz.6.2347': attribute type 2 has an invalid length. [ 1214.574718][ T1068] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1214.672846][ T1068] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 1214.753406][ T1068] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1215.009539][ T43] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1215.153518][ T9054] usb 4-1: USB disconnect, device number 29 [ 1215.182345][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1215.195680][ T9054] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 1215.213240][ T43] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1215.250936][ T43] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1215.268991][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.283410][ T43] usb 8-1: Product: syz [ 1215.287759][ T43] usb 8-1: Manufacturer: syz [ 1215.295234][ T43] usb 8-1: SerialNumber: syz [ 1215.310546][ T43] usb 8-1: config 0 descriptor?? [ 1215.319944][T15672] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1215.327819][T15672] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1215.462605][T15701] veth0_to_team: entered promiscuous mode [ 1215.468702][T15701] veth0_to_team: entered allmulticast mode [ 1215.543551][T15672] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1215.552295][T15672] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1216.134699][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1216.669580][ T43] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1216.948383][ T43] usb 8-1: USB disconnect, device number 17 [ 1217.017053][T15718] input: syz1 as /devices/virtual/input/input24 [ 1217.092790][T15722] 9pnet_fd: Insufficient options for proto=fd [ 1217.220461][T15726] tipc: Started in network mode [ 1217.233811][T15726] tipc: Node identity 4, cluster identity 4711 [ 1217.247732][T15726] tipc: Node number set to 4 [ 1217.280163][T15729] loop8: detected capacity change from 0 to 7 [ 1217.293496][T15729] Dev loop8: unable to read RDB block 7 [ 1217.303382][T15729] loop8: unable to read partition table [ 1217.310179][T15729] loop8: partition table beyond EOD, truncated [ 1217.316935][T15729] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1217.316935][T15729] ) failed (rc=-5) [ 1218.018926][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1218.261165][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.411001][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1218.594948][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1218.686390][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1218.728918][ T5904] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 1218.748355][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.763871][ T5904] usb 4-1: config 0 descriptor?? [ 1219.208412][ T5904] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 1219.299444][ T5904] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input25 [ 1219.407485][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.444970][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.479099][ T43] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1219.581166][ T5904] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1219.630226][ T5904] usb 4-1: USB disconnect, device number 30 [ 1219.670567][ T43] usb 8-1: Using ep0 maxpacket: 8 [ 1219.739191][ T43] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1219.812257][ T43] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.850806][ T43] usb 8-1: Product: syz [ 1219.857742][ T43] usb 8-1: Manufacturer: syz [ 1219.874363][ T43] usb 8-1: SerialNumber: syz [ 1219.996387][ T43] usb 8-1: config 0 descriptor?? [ 1220.392390][ T43] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1220.587352][T15764] fido_id[15764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1221.809534][ T43] usb write operation failed. (-71) [ 1221.849443][ T43] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1221.895481][ T43] dvbdev: DVB: registering new adapter (Terratec H7) [ 1221.912746][ T43] usb 8-1: media controller created [ 1221.945584][ T43] usb read operation failed. (-71) [ 1221.964811][ T43] usb write operation failed. (-71) [ 1221.997114][ T43] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1222.017064][ T43] usb 8-1: USB disconnect, device number 18 [ 1222.336602][T15813] veth0: entered promiscuous mode [ 1222.347755][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2409'. [ 1224.110338][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1227.335880][ T6300] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1227.509178][ T6300] usb 8-1: Using ep0 maxpacket: 16 [ 1227.530542][ T6300] usb 8-1: too many configurations: 60, using maximum allowed: 8 [ 1227.563474][ T6300] usb 8-1: config 0 has no interfaces? [ 1227.570522][ T6300] usb 8-1: config 0 has no interfaces? [ 1227.578154][ T6300] usb 8-1: config 0 has no interfaces? [ 1227.585502][ T6300] usb 8-1: config 0 has no interfaces? [ 1227.600336][ T6300] usb 8-1: config 0 has no interfaces? [ 1227.607610][ T6300] usb 8-1: config 0 has no interfaces? [ 1227.683065][T15892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2434'. [ 1227.998231][T15890] netlink: 'syz.3.2436': attribute type 4 has an invalid length. [ 1228.407476][ T6300] usb 8-1: config 0 has no interfaces? [ 1228.416300][ T6300] usb 8-1: config 0 has no interfaces? [ 1228.425550][ T6300] usb 8-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1228.434997][ T6300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1228.443393][ T6300] usb 8-1: Product: syz [ 1228.447595][ T6300] usb 8-1: Manufacturer: syz [ 1228.452290][ T6300] usb 8-1: SerialNumber: syz [ 1228.469611][ T6300] usb 8-1: config 0 descriptor?? [ 1228.816251][ T6300] usb 8-1: USB disconnect, device number 19 [ 1229.836170][T15927] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1230.479054][ T6300] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1230.639715][ T6300] usb 8-1: Using ep0 maxpacket: 32 [ 1230.646504][ T6300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.659853][ T6300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.671592][ T6300] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1230.690869][ T6300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.730763][ T6300] usb 8-1: config 0 descriptor?? [ 1231.112444][ T6300] hub 8-1:0.0: USB hub found [ 1231.302994][ T6300] hub 8-1:0.0: 1 port detected [ 1231.769458][T15199] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1231.917295][ T6300] hub 8-1:0.0: activate --> -90 [ 1231.933918][T15199] usb 4-1: Using ep0 maxpacket: 8 [ 1231.948035][T15199] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1231.963969][T15199] usb 4-1: config 179 has no interface number 0 [ 1231.971696][T15199] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1231.984828][T15199] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1231.996995][T15199] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1232.024929][T15199] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1232.045992][T15199] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1232.097949][T15199] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1232.107527][T15199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.144034][T15956] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1232.315057][T15969] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2467'. [ 1232.328655][ T5904] usb 8-1: USB disconnect, device number 20 [ 1232.472337][T15199] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input26 [ 1232.549709][ T6300] usb 8-1-port1: config error [ 1232.664877][ T43] usb 4-1: USB disconnect, device number 31 [ 1232.664921][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1232.679889][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1233.459260][ T6300] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1233.613880][ T6300] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1233.632226][ T6300] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1233.648738][ T6300] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1233.670137][ T6300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.688623][T15993] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1233.716003][ T6300] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1233.939457][ T6300] usb 8-1: USB disconnect, device number 21 [ 1235.694914][ T6301] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1236.011832][ T6301] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1236.124933][ T6301] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.291162][ T6301] usb 8-1: Product: syz [ 1236.308301][ T6301] usb 8-1: Manufacturer: syz [ 1236.317221][ T6301] usb 8-1: SerialNumber: syz [ 1236.334984][ T6301] usb 8-1: config 0 descriptor?? [ 1237.568648][ T6301] usb 8-1: Firmware: major: 0, minor: 13, hardware type: ATUSB (0) [ 1237.585707][ T6301] usb 8-1: Read permanent extended address 06:9a:24:c1:58:66:66:cb from device [ 1237.826216][ T6301] usb 8-1: USB disconnect, device number 22 [ 1239.310012][T16089] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1241.106331][T16102] input: syz1 as /devices/virtual/input/input27 [ 1242.662532][T16136] lo speed is unknown, defaulting to 1000 [ 1243.690703][T16153] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1243.740636][T16153] netlink: 75 bytes leftover after parsing attributes in process `syz.3.2538'. [ 1245.806119][T16190] netlink: 'syz.2.2552': attribute type 29 has an invalid length. [ 1245.806795][T16192] netlink: 'syz.6.2553': attribute type 1 has an invalid length. [ 1245.909336][T16198] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1246.004527][T16192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1246.064691][T16190] netlink: 'syz.2.2552': attribute type 29 has an invalid length. [ 1248.023601][T16229] netlink: 'syz.0.2568': attribute type 1 has an invalid length. [ 1248.168113][T16229] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1248.522470][T16252] fuse: Bad value for 'fd' [ 1249.288982][T15199] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1249.455858][T15199] usb 8-1: Using ep0 maxpacket: 8 [ 1250.216520][T15199] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1250.266886][T15199] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1250.277158][T15199] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200 [ 1250.332545][T16274] netlink: 'syz.6.2583': attribute type 1 has an invalid length. [ 1250.340722][T15199] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1250.363308][T15199] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1250.377568][T15199] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.469338][T16282] loop2: detected capacity change from 0 to 7 [ 1250.502787][T16274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1250.512068][T16285] netlink: 'syz.0.2588': attribute type 64 has an invalid length. [ 1250.518022][T16282] Dev loop2: unable to read RDB block 7 [ 1250.520620][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2588'. [ 1251.209196][T16282] loop2: AHDI p2 p3 p4 [ 1251.222872][T16282] loop2: partition table partially beyond EOD, truncated [ 1251.232734][T15199] usb 8-1: usb_control_msg returned -71 [ 1251.249349][T15199] usbtmc 8-1:16.0: can't read capabilities [ 1251.294887][T16282] loop2: p2 size 150995456 extends beyond EOD, truncated [ 1251.295386][T15199] usb 8-1: USB disconnect, device number 23 [ 1251.381087][T16282] loop2: p3 size 4211081215 extends beyond EOD, truncated [ 1251.567691][T13291] udevd[13291]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1251.586368][T13126] udevd[13126]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1253.746497][T16329] netlink: 'syz.6.2607': attribute type 1 has an invalid length. [ 1253.902862][T16329] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1254.308166][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1254.512677][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.182009][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.217633][ T43] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1255.247692][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1255.260294][T16359] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 1255.283178][ T43] usb 4-1: SerialNumber: syz [ 1256.216163][ T43] usb 4-1: 0:2 : does not exist [ 1256.258708][T16359] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1256.472621][ T43] usb 4-1: USB disconnect, device number 32 [ 1256.809032][T15819] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1257.026876][T15819] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1257.037616][T15819] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1257.083483][T15819] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1257.113418][T15819] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.319961][T16399] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1257.327976][T16399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1257.372067][T15819] usb 8-1: usb_control_msg returned -32 [ 1257.378022][T15819] usbtmc 8-1:16.0: can't read capabilities [ 1257.723540][T16407] loop4: detected capacity change from 0 to 7 [ 1257.766682][T16407] Dev loop4: unable to read RDB block 7 [ 1257.796236][T16407] loop4: AHDI p3 p4 [ 1257.813606][T16407] loop4: partition table partially beyond EOD, truncated [ 1257.838538][T16407] loop4: p3 size 4227858431 extends beyond EOD, truncated [ 1257.931653][ T5904] usb 8-1: USB disconnect, device number 24 [ 1257.984481][ T30] audit: type=1326 audit(1752913629.286:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16412 comm="syz.0.2638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6b6b8e9a9 code=0x0 [ 1258.029265][T16416] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 1258.039803][T13126] udevd[13126]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 1258.597582][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'. [ 1258.659127][T16436] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1258.781898][T16436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2647'. [ 1258.936942][T16448] netlink: 'syz.2.2651': attribute type 1 has an invalid length. [ 1259.826427][T16448] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1260.130594][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 1261.013977][T16481] overlayfs: failed to clone upperpath [ 1261.073564][T16484] overlayfs: failed to clone upperpath [ 1262.068988][T15819] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1262.106927][T16494] xt_CT: No such helper "snmp" [ 1262.245181][T15819] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1262.272795][T15819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.283224][T15819] usb 4-1: Product: syz [ 1262.287446][T15819] usb 4-1: Manufacturer: syz [ 1262.293193][T15819] usb 4-1: SerialNumber: syz [ 1262.303572][T15819] usb 4-1: config 0 descriptor?? [ 1264.025804][T15819] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 1264.179073][T15819] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 1264.224098][T15819] usb 4-1: USB disconnect, device number 33 [ 1264.323510][T15819] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 1264.433328][T16542] ipvlan2: entered promiscuous mode [ 1264.510160][T15819] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 1265.249719][T16579] overlayfs: failed to clone upperpath [ 1265.288158][T16549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1267.122452][ T9250] Bluetooth: hci0: command 0x0405 tx timeout [ 1267.597156][T16639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2728'. [ 1269.433020][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 1270.825928][T16690] overlay: filesystem on ./file1 not supported [ 1274.048575][T16719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 1274.675245][T16721] fuse: Bad value for 'fd' [ 1275.447535][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 1277.146790][T16752] loop2: detected capacity change from 0 to 7 [ 1277.174217][T16752] Dev loop2: unable to read RDB block 7 [ 1277.203944][T16752] loop2: unable to read partition table [ 1277.450901][T16752] loop2: partition table beyond EOD, truncated [ 1277.459126][T16752] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1278.370100][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2770'. [ 1278.759139][T16766] netlink: 'syz.6.2771': attribute type 1 has an invalid length. [ 1279.026332][T16766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1279.122475][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2772'. [ 1280.638580][T16799] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1280.903387][T15199] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1281.191482][T15199] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1281.223089][T15199] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1281.301304][T15199] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1281.363735][T15199] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1281.396573][T15199] usb 8-1: Manufacturer: syz [ 1281.437711][T15199] usb 8-1: config 0 descriptor?? [ 1283.268909][T15199] rc_core: IR keymap rc-hauppauge not found [ 1283.291670][T15199] Registered IR keymap rc-empty [ 1283.337250][T15199] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1283.354960][T15819] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1283.377648][T16820] tipc: Enabled bearer , priority 0 [ 1283.405467][T15199] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input28 [ 1283.423887][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2785'. [ 1283.455777][T15819] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1283.546283][ C0] igorplugusb 8-1:0.0: Error: urb status = -32 [ 1283.782015][T16828] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1284.189594][T15199] usb 8-1: USB disconnect, device number 25 [ 1285.984708][T16862] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1288.734532][T16914] snd_dummy snd_dummy.0: control 0:129:-2:syz0:5 is already present [ 1288.890059][T15199] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1289.069428][T15199] usb 4-1: Using ep0 maxpacket: 32 [ 1289.123308][T15199] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1289.183965][T15199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.320858][T15199] usb 4-1: config 0 descriptor?? [ 1289.610820][T15199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1289.660477][T15199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1290.215484][T15199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1290.257480][T15199] usb 4-1: media controller created [ 1290.350653][T15199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1290.772133][ T30] audit: type=1326 audit(1752913662.086:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16937 comm="syz.2.2834" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x0 [ 1291.118894][T15199] stb0899_attach: Driver disabled by Kconfig [ 1291.131908][T15199] az6027: no front-end attached [ 1291.131908][T15199] [ 1291.154697][T15199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1291.179447][T15199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 1291.230441][T15199] dvb-usb: schedule remote query interval to 400 msecs. [ 1291.255303][T15199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1291.396206][T15199] usb 4-1: USB disconnect, device number 34 [ 1291.538115][T15199] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1292.074107][T16961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 1292.732207][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 1292.762903][T16966] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2845'. [ 1292.807702][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 1292.826976][T16966] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.836003][T16966] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.845285][T16966] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1292.862805][T16968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2845'. [ 1293.388909][T15199] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1293.533787][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2851'. [ 1294.318925][T15199] usb 4-1: Using ep0 maxpacket: 32 [ 1294.336825][T15199] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 1294.365134][T15199] usb 4-1: config 0 has no interface number 0 [ 1294.388980][T15199] usb 4-1: config 0 interface 230 has no altsetting 0 [ 1294.420924][T15199] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1294.448993][T15199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.487781][T15199] usb 4-1: Product: syz [ 1294.508883][T15199] usb 4-1: Manufacturer: syz [ 1294.513561][T15199] usb 4-1: SerialNumber: syz [ 1294.557529][T15199] usb 4-1: config 0 descriptor?? [ 1294.619177][T15199] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 1294.643380][T15199] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1295.248957][ T6300] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1295.433132][ T6300] usb 8-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1295.452847][ T6300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.489475][ T6300] usb 8-1: config 0 descriptor?? [ 1295.739823][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 1296.444699][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'. [ 1296.987307][T17031] overlayfs: failed to clone upperpath [ 1297.016893][T17031] overlayfs: failed to clone upperpath [ 1297.115619][T15199] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 1297.148267][T15199] usb 4-1: USB disconnect, device number 35 [ 1297.490158][T17053] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.2874'. [ 1297.586135][ T6300] pegasus 8-1:0.0: can't reset MAC [ 1297.600915][ T6300] pegasus 8-1:0.0: probe with driver pegasus failed with error -5 [ 1297.614185][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1297.639043][ T6300] usb 8-1: USB disconnect, device number 26 [ 1298.014178][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2877'. [ 1299.939766][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2892'. [ 1300.549929][T17105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.614430][T17105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.668894][T17105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.676388][T17105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.768445][T17107] block nbd7: shutting down sockets [ 1300.833466][T17112] block nbd7: NBD_DISCONNECT [ 1300.856340][T17109] lo speed is unknown, defaulting to 1000 [ 1300.862378][T17112] block nbd7: Send disconnect failed -32 [ 1301.166011][T17120] pim6reg1: entered promiscuous mode [ 1301.179126][T17120] pim6reg1: entered allmulticast mode [ 1301.605463][T17132] fuse: Bad value for 'fd' [ 1302.552946][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 1305.000462][T17190] overlayfs: failed to clone upperpath [ 1305.242382][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2926'. [ 1305.965786][ T30] audit: type=1326 audit(1752913677.276:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17197 comm="syz.0.2928" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6b6b8e9a9 code=0x0 [ 1306.462667][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2929'. [ 1307.121845][T15199] page_pool_release_retry() stalled pool shutdown: id 99, 1 inflight 60 sec [ 1307.649139][T17237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 1307.858256][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2939'. [ 1308.869883][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1310.184056][T17261] 9pnet_fd: Insufficient options for proto=fd [ 1310.321602][T17265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1310.411157][T17269] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1310.452110][T17269] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 1310.863324][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 1311.721963][T17288] overlayfs: failed to clone upperpath [ 1311.976990][T17295] netlink: 'syz.2.2964': attribute type 1 has an invalid length. [ 1312.206586][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2958'. [ 1312.241583][T17295] bond13: entered promiscuous mode [ 1312.326928][T17295] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1312.677014][T17299] bond13: (slave dummy0): making interface the new active one [ 1312.705274][T17299] dummy0: entered promiscuous mode [ 1312.739224][T17299] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 1313.550711][ T6300] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1313.910003][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1314.452608][ T6300] usb 4-1: config 0 has no interfaces? [ 1314.458190][ T6300] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1314.474349][ T6300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.485843][ T6300] usb 4-1: config 0 descriptor?? [ 1314.709052][ T6300] usb 4-1: USB disconnect, device number 36 [ 1314.887582][T17334] bond13: (slave dummy0): Releasing active interface [ 1314.895498][T17334] dummy0: left promiscuous mode [ 1314.924133][T17337] fuse: Bad value for 'fd' [ 1314.932682][T17334] batman_adv: batadv0: Adding interface: dummy0 [ 1314.953876][T17334] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.030700][T17334] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1315.399702][T17349] overlayfs: failed to clone upperpath [ 1315.630856][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'. [ 1316.680808][T17366] 9pnet_fd: Insufficient options for proto=fd [ 1316.920198][T17374] netlink: 'syz.6.2993': attribute type 12 has an invalid length. [ 1316.928101][T17374] netlink: 'syz.6.2993': attribute type 29 has an invalid length. [ 1316.967210][T17374] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2993'. [ 1316.990335][T17374] netlink: 'syz.6.2993': attribute type 1 has an invalid length. [ 1317.440586][T15199] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 1317.613592][T15199] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1317.639166][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1317.672780][T15199] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1317.715923][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1317.756024][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1317.791300][T15199] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1317.801317][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1317.828824][T15199] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1317.859401][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1317.880166][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1317.911949][T15199] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1317.925602][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1317.948106][T15199] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1318.009276][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1318.034441][T15199] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1318.063073][T15199] usb 4-1: string descriptor 0 read error: -22 [ 1318.070172][T15199] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1318.077136][T17408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'. [ 1318.089621][T15199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.164427][T15199] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1319.831498][ T5904] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1319.990990][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1320.003500][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1320.015416][ T5904] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1320.025972][ T5904] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1320.039632][ T5904] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1320.048889][ T5904] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.059366][ T5904] usb 8-1: config 0 descriptor?? [ 1320.214106][T17512] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1320.228543][T17512] bridge0: port 3(gretap0) entered disabled state [ 1320.235642][T17512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.243527][T17512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.332813][T17516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1320.446004][T15199] usb 4-1: USB disconnect, device number 37 [ 1320.491983][ T5904] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 1320.569024][ T5904] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1320.728271][T17528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3033'. [ 1320.988840][T15199] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1321.159074][T15199] usb 4-1: Using ep0 maxpacket: 8 [ 1321.176259][T15199] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.196718][T17538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1321.294322][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1321.808662][T15199] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1321.948572][T15199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.960965][T15199] usb 4-1: config 0 descriptor?? [ 1321.981577][T15199] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1322.073276][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1322.118021][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1322.137513][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1322.138279][T17548] overlayfs: failed to clone upperpath [ 1322.153734][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1322.188899][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1322.198852][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3037'. [ 1322.669372][ T6301] usb 8-1: USB disconnect, device number 27 [ 1323.155412][ T30] audit: type=1326 audit(1752913694.466:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17567 comm="syz.2.3049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dc258e9a9 code=0x0 [ 1324.069062][T15199] gspca_vc032x: reg_w err -71 [ 1324.074007][T15199] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 1324.093124][T15199] usb 4-1: USB disconnect, device number 38 [ 1324.370015][ T6300] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1324.541874][ T6300] usb 8-1: Using ep0 maxpacket: 16 [ 1324.561978][ T6300] usb 8-1: config 0 has no interfaces? [ 1324.578262][ T6300] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1324.601098][ T6300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.635602][ T6300] usb 8-1: Product: syz [ 1324.663653][ T6300] usb 8-1: Manufacturer: syz [ 1324.675400][ T6300] usb 8-1: SerialNumber: syz [ 1324.701909][ T6300] usb 8-1: config 0 descriptor?? [ 1324.974444][ T6300] usb 8-1: USB disconnect, device number 28 [ 1325.066964][T17598] overlayfs: failed to clone upperpath [ 1325.903891][T17608] __nla_validate_parse: 45 callbacks suppressed [ 1325.903914][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3062'. [ 1327.040638][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3069'. [ 1327.914806][T17637] netlink: 'syz.7.3073': attribute type 3 has an invalid length. [ 1327.957708][T17637] netlink: 201372 bytes leftover after parsing attributes in process `syz.7.3073'. [ 1328.083054][T17642] netlink: 'syz.0.3075': attribute type 4 has an invalid length. [ 1328.109058][T17642] netlink: 'syz.0.3075': attribute type 4 has an invalid length. [ 1328.139069][ T6301] lo speed is unknown, defaulting to 1000 [ 1328.145395][ T6301] syz0: Port: 1 Link ACTIVE [ 1329.158527][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3078'. [ 1329.680712][ T6301] lo speed is unknown, defaulting to 1000 [ 1329.727422][ T6301] syz0: Port: 1 Link DOWN [ 1331.730095][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3091'. [ 1332.515008][T17701] netlink: 'syz.6.3096': attribute type 1 has an invalid length. [ 1335.401619][T17725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1335.860964][T17733] 9pnet_fd: Insufficient options for proto=fd [ 1336.643991][T17690] netlink: 'syz.3.3093': attribute type 12 has an invalid length. [ 1336.652913][T17690] netlink: 'syz.3.3093': attribute type 29 has an invalid length. [ 1336.661227][T17690] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1336.670740][T17690] netlink: 'syz.3.3093': attribute type 2 has an invalid length. [ 1336.678498][T17690] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3093'. [ 1336.709778][T17701] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1337.146107][T17759] overlayfs: failed to clone upperpath [ 1337.501618][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 1338.231120][T17770] overlayfs: failed to clone upperpath [ 1338.349314][ T9054] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1338.429957][T17778] overlayfs: failed to clone upperpath [ 1338.536750][ T9054] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1338.551713][ T9054] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.556647][T17784] overlayfs: failed to clone upperpath [ 1338.592942][ T9054] usb 8-1: Product: syz [ 1338.613173][ T9054] usb 8-1: Manufacturer: syz [ 1338.618003][ T9054] usb 8-1: SerialNumber: syz [ 1338.627622][T17786] netlink: zone id is out of range [ 1338.635469][T17786] netlink: zone id is out of range [ 1338.640647][T17786] netlink: zone id is out of range [ 1338.664205][T17786] netlink: set zone limit has 4 unknown bytes [ 1338.730714][ T9054] usb 8-1: config 0 descriptor?? [ 1338.741952][ T9054] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1339.674957][ T6300] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1339.837080][ T6300] usb 4-1: Using ep0 maxpacket: 16 [ 1339.847683][ T6300] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1339.864660][ T6300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1339.879902][ T6300] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1339.890461][ T6300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.908844][ T6300] usb 4-1: Product: syz [ 1339.919008][ T6300] usb 4-1: Manufacturer: syz [ 1339.935303][ T6300] usb 4-1: SerialNumber: syz [ 1339.974397][ T6300] usb 4-1: config 0 descriptor?? [ 1339.994141][ T6300] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1340.018846][ T6300] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1340.302111][T17832] bridge_slave_0: left allmulticast mode [ 1340.308168][T17832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.378873][T15819] usb 8-1: USB disconnect, device number 29 [ 1340.468006][T17837] overlayfs: failed to clone upperpath [ 1340.561969][T17834] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3150'. [ 1340.616394][ T6300] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1340.649622][ T6300] em28xx 4-1:0.0: Config register raw data: 0x3b [ 1340.666343][ T6300] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1340.678452][ T6300] em28xx 4-1:0.0: No AC97 audio processor [ 1340.728518][T17844] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3154'. [ 1340.728795][ T30] audit: type=1326 audit(1752913712.026:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1340.776697][ T30] audit: type=1326 audit(1752913712.026:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1340.803531][ T30] audit: type=1326 audit(1752913712.036:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1340.903774][ T30] audit: type=1326 audit(1752913712.036:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1340.930417][ T30] audit: type=1326 audit(1752913712.036:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1340.978375][ T30] audit: type=1326 audit(1752913712.086:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1341.015079][ T30] audit: type=1326 audit(1752913712.086:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1341.055922][ T30] audit: type=1326 audit(1752913712.086:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1341.267388][ T30] audit: type=1326 audit(1752913712.086:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7dc258e9a9 code=0x7ffc0000 [ 1341.298392][ T30] audit: type=1326 audit(1752913712.116:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.2.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7dc258e9e3 code=0x7ffc0000 [ 1341.411213][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3158'. [ 1342.153478][ T5904] usb 4-1: USB disconnect, device number 39 [ 1343.088113][T17885] lo speed is unknown, defaulting to 1000 [ 1345.236304][T17929] ALSA: mixer_oss: invalid OSS volume '' [ 1345.258964][T17929] ALSA: mixer_oss: invalid OSS volume 'ͪ"QfF+&)17' [ 1346.653233][T17952] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3193'. [ 1346.687470][T17950] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3193'. [ 1347.088834][T15199] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 1347.251221][T15199] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1347.267894][T15199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.287360][T15199] usb 4-1: config 0 descriptor?? [ 1347.647664][T17975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3205'. [ 1348.288952][ T6300] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1348.458980][ T6300] usb 8-1: Using ep0 maxpacket: 32 [ 1348.483705][ T6300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1348.507111][ T6300] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1348.536739][ T6300] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1348.555335][ T6300] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1348.564665][ T6300] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.594745][ T6300] usb 8-1: config 0 descriptor?? [ 1349.154962][ T6300] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000E/input/input30 [ 1349.562748][T18008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3216'. [ 1350.181255][ T6300] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000E/input/input31 [ 1350.345688][ T6300] kye 0003:0458:5011.000E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 1350.382474][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3217'. [ 1350.649115][T15199] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1350.679220][T15199] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1350.714833][T15199] asix 4-1:0.0: probe with driver asix failed with error -71 [ 1350.753103][T15199] usb 4-1: USB disconnect, device number 40 [ 1350.778332][T18019] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 1351.298989][ T6300] usb 8-1: USB disconnect, device number 30 [ 1352.715543][T18075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3228'. [ 1353.452674][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3229'. [ 1353.690993][T18085] netlink: 'syz.0.3232': attribute type 12 has an invalid length. [ 1353.737853][T18085] netlink: 'syz.0.3232': attribute type 29 has an invalid length. [ 1353.786110][T18085] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3232'. [ 1353.803369][T18085] netlink: 'syz.0.3232': attribute type 2 has an invalid length. [ 1354.162576][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1356.167223][T18121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3242'. [ 1358.590800][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3252'. [ 1359.577039][T18150] xt_CT: No such helper "syz1" [ 1359.730557][ T6300] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1359.966203][T18157] netlink: 'syz.0.3256': attribute type 39 has an invalid length. [ 1360.013548][ T6300] usb 8-1: config 0 has no interfaces? [ 1360.044957][ T6300] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1360.054860][ T6300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.073586][ T6300] usb 8-1: Product: syz [ 1360.078128][ T6300] usb 8-1: Manufacturer: syz [ 1360.084146][ T6300] usb 8-1: SerialNumber: syz [ 1360.098374][ T6300] usb 8-1: config 0 descriptor?? [ 1360.384440][T18151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.394015][T18151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.557391][T18161] overlayfs: failed to clone upperpath [ 1360.706764][T18165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3260'. [ 1362.095565][ T6301] usb 8-1: USB disconnect, device number 31 [ 1363.106647][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3272'. [ 1364.549084][ T6300] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1364.566782][T18217] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 1364.624138][T18217] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1364.637707][T18221] erspan0: entered allmulticast mode [ 1364.665659][T18221] bond13: (slave erspan0): making interface the new active one [ 1364.708869][ T6300] usb 4-1: Using ep0 maxpacket: 16 [ 1364.720799][ T6300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1364.735401][T18221] bond13: (slave erspan0): Enslaving as an active interface with an up link [ 1364.741228][ T6300] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1364.753393][ T6300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.764095][ T6300] usb 4-1: Product: syz [ 1364.768329][ T6300] usb 4-1: Manufacturer: syz [ 1364.776988][ T6300] usb 4-1: SerialNumber: syz [ 1364.810345][ T6300] usb 4-1: config 0 descriptor?? [ 1364.832261][ T6300] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1364.863761][ T6300] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1364.870676][T18227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3281'. [ 1366.294164][ T6300] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1366.462041][T18252] netlink: 'syz.2.3291': attribute type 20 has an invalid length. [ 1366.521625][ T6301] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1366.684043][T18259] overlayfs: failed to clone upperpath [ 1366.848947][ T6301] usb 8-1: Using ep0 maxpacket: 16 [ 1366.859595][ T6301] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.899622][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'. [ 1366.950872][ T6301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1367.084037][ T6301] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1367.291579][ T6301] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1367.499759][ T6301] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.556700][ T6301] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1367.598943][ T6300] em28xx 4-1:0.0: board has no eeprom [ 1367.613914][ T6301] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1367.666348][ T6301] usb 8-1: Manufacturer: syz [ 1367.690331][ T6300] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1367.700432][ T6301] usb 8-1: config 0 descriptor?? [ 1367.708607][ T6300] em28xx 4-1:0.0: dvb set to bulk mode. [ 1367.718892][T15199] em28xx 4-1:0.0: Binding DVB extension [ 1367.747853][ T6300] usb 4-1: USB disconnect, device number 41 [ 1367.780417][ T6300] em28xx 4-1:0.0: Disconnecting em28xx [ 1367.926096][T15199] em28xx 4-1:0.0: Registering input extension [ 1367.958487][ T6300] em28xx 4-1:0.0: Closing input extension [ 1367.990743][T18278] overlayfs: failed to clone upperpath [ 1368.041942][ T6301] rc_core: IR keymap rc-hauppauge not found [ 1368.048013][ T6300] em28xx 4-1:0.0: Freeing device [ 1368.084641][ T6301] Registered IR keymap rc-empty [ 1368.107544][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1368.172549][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1368.211023][ T6301] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1368.429354][ T6301] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input32 [ 1368.459038][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1368.471000][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 1368.471020][ T30] audit: type=1326 audit(1752913739.786:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.6.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f142238e9a9 code=0x7fc00000 [ 1368.518606][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1368.693801][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1368.944964][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.218859][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.238940][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.246387][ T30] audit: type=1326 audit(1752913740.536:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18289 comm="syz.6.3307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f142238e9a9 code=0x7fc00000 [ 1369.289113][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.330018][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.519062][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.699456][ T6301] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1369.725567][T18309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1370.505104][ T6301] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1370.514305][ T6301] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1370.530719][ T6301] usb 8-1: USB disconnect, device number 32 [ 1370.694631][T18310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3311'. [ 1371.694216][T18329] netlink: zone id is out of range [ 1371.699893][T18329] netlink: del zone limit has 4 unknown bytes [ 1373.658959][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3327'. [ 1374.744820][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'. [ 1375.390947][ T6301] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1375.608927][ T6301] usb 8-1: Using ep0 maxpacket: 8 [ 1375.622798][ T6301] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1375.800009][ T6301] usb 8-1: config 3 has an invalid interface number: 173 but max is 2 [ 1375.808346][ T6301] usb 8-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 1375.818575][ T6301] usb 8-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 1375.827575][ T6301] usb 8-1: config 3 has no interface number 0 [ 1375.834046][ T6301] usb 8-1: config 3 interface 173 altsetting 221 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 1375.854040][ T6301] usb 8-1: config 3 interface 173 has no altsetting 0 [ 1375.999781][ T6301] usb 8-1: string descriptor 0 read error: -22 [ 1376.014601][ T6301] usb 8-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=ed.44 [ 1376.026437][ T6301] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.618165][ T6301] usb 8-1: USB disconnect, device number 33 [ 1377.319040][T18416] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1377.332628][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1380.694326][T18445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'. [ 1381.763983][T18456] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1381.777961][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3359'. [ 1384.346002][T18479] overlayfs: failed to clone upperpath [ 1384.513625][T18489] [ 1384.516027][T18489] ====================================================== [ 1384.523245][T18489] WARNING: possible circular locking dependency detected [ 1384.530385][T18489] 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 Not tainted [ 1384.537615][T18489] ------------------------------------------------------ [ 1384.544665][T18489] syz.7.3373/18489 is trying to acquire lock: [ 1384.550755][T18489] ffff888055deb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.560103][T18489] [ 1384.560103][T18489] but task is already holding lock: [ 1384.567487][T18489] ffff888032f42468 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x1e6/0x1000 [ 1384.577162][T18489] [ 1384.577162][T18489] which lock already depends on the new lock. [ 1384.577162][T18489] [ 1384.587585][T18489] [ 1384.587585][T18489] the existing dependency chain (in reverse order) is: [ 1384.596623][T18489] [ 1384.596623][T18489] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1384.604041][T18489] lock_acquire+0x120/0x360 [ 1384.609198][T18489] __mutex_lock+0x182/0xe80 [ 1384.614257][T18489] anon_pipe_write+0x16a/0x1360 [ 1384.619657][T18489] __kernel_write_iter+0x3e9/0x860 [ 1384.625314][T18489] __kernel_write+0xef/0x150 [ 1384.630531][T18489] autofs_notify_daemon+0x748/0xe50 [ 1384.636268][T18489] autofs_wait+0x11dc/0x1870 [ 1384.641385][T18489] autofs_mount_wait+0x16b/0x330 [ 1384.646933][T18489] autofs_d_automount+0x393/0x720 [ 1384.652478][T18489] __traverse_mounts+0x305/0x5b0 [ 1384.657940][T18489] step_into+0x534/0xf30 [ 1384.662714][T18489] link_path_walk+0x77b/0xea0 [ 1384.667917][T18489] path_lookupat+0x97/0x430 [ 1384.672950][T18489] filename_lookup+0x212/0x570 [ 1384.678240][T18489] user_path_at+0x3a/0x60 [ 1384.683099][T18489] bpf_obj_get_user+0xa9/0x430 [ 1384.688389][T18489] __sys_bpf+0x71e/0x860 [ 1384.693161][T18489] __x64_sys_bpf+0x7c/0x90 [ 1384.698106][T18489] do_syscall_64+0xfa/0x3b0 [ 1384.703132][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.709550][T18489] [ 1384.709550][T18489] -> #1 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1384.717303][T18489] lock_acquire+0x120/0x360 [ 1384.722335][T18489] __mutex_lock+0x182/0xe80 [ 1384.727469][T18489] autofs_notify_daemon+0x735/0xe50 [ 1384.733222][T18489] autofs_wait+0x11dc/0x1870 [ 1384.738347][T18489] autofs_mount_wait+0x16b/0x330 [ 1384.743816][T18489] autofs_d_automount+0x393/0x720 [ 1384.749371][T18489] __traverse_mounts+0x305/0x5b0 [ 1384.754839][T18489] step_into+0x534/0xf30 [ 1384.759617][T18489] path_lookupat+0x163/0x430 [ 1384.764748][T18489] filename_lookup+0x212/0x570 [ 1384.770039][T18489] kern_path+0x35/0x50 [ 1384.774640][T18489] lookup_bdev+0xc0/0x280 [ 1384.779497][T18489] resume_store+0x169/0x460 [ 1384.784527][T18489] kernfs_fop_write_iter+0x375/0x4f0 [ 1384.790420][T18489] vfs_write+0x548/0xa90 [ 1384.795189][T18489] ksys_write+0x145/0x250 [ 1384.800039][T18489] do_syscall_64+0xfa/0x3b0 [ 1384.805156][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.811587][T18489] [ 1384.811587][T18489] -> #0 (&of->mutex){+.+.}-{4:4}: [ 1384.818810][T18489] validate_chain+0xb9b/0x2140 [ 1384.824098][T18489] __lock_acquire+0xab9/0xd20 [ 1384.829383][T18489] lock_acquire+0x120/0x360 [ 1384.834424][T18489] __mutex_lock+0x182/0xe80 [ 1384.839457][T18489] kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.845322][T18489] iter_file_splice_write+0x93a/0x1000 [ 1384.851310][T18489] do_splice+0xc76/0x1660 [ 1384.856249][T18489] __se_sys_splice+0x2e1/0x460 [ 1384.861538][T18489] do_syscall_64+0xfa/0x3b0 [ 1384.866576][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.872997][T18489] [ 1384.872997][T18489] other info that might help us debug this: [ 1384.872997][T18489] [ 1384.883325][T18489] Chain exists of: [ 1384.883325][T18489] &of->mutex --> &sbi->pipe_mutex --> &pipe->mutex [ 1384.883325][T18489] [ 1384.895793][T18489] Possible unsafe locking scenario: [ 1384.895793][T18489] [ 1384.903354][T18489] CPU0 CPU1 [ 1384.908834][T18489] ---- ---- [ 1384.914236][T18489] lock(&pipe->mutex); [ 1384.918701][T18489] lock(&sbi->pipe_mutex); [ 1384.925760][T18489] lock(&pipe->mutex); [ 1384.932454][T18489] lock(&of->mutex); [ 1384.936449][T18489] [ 1384.936449][T18489] *** DEADLOCK *** [ 1384.936449][T18489] [ 1384.944628][T18489] 2 locks held by syz.7.3373/18489: [ 1384.949830][T18489] #0: ffff888035594428 (sb_writers#7){.+.+}-{0:0}, at: do_splice+0xbff/0x1660 [ 1384.958823][T18489] #1: ffff888032f42468 (&pipe->mutex){+.+.}-{4:4}, at: iter_file_splice_write+0x1e6/0x1000 [ 1384.968946][T18489] [ 1384.968946][T18489] stack backtrace: [ 1384.975014][T18489] CPU: 1 UID: 0 PID: 18489 Comm: syz.7.3373 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 1384.975033][T18489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1384.975043][T18489] Call Trace: [ 1384.975049][T18489] [ 1384.975055][T18489] dump_stack_lvl+0x189/0x250 [ 1384.975076][T18489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.975092][T18489] ? __pfx__printk+0x10/0x10 [ 1384.975110][T18489] ? print_lock_name+0xde/0x100 [ 1384.975128][T18489] print_circular_bug+0x2ee/0x310 [ 1384.975148][T18489] check_noncircular+0x134/0x160 [ 1384.975167][T18489] validate_chain+0xb9b/0x2140 [ 1384.975187][T18489] ? look_up_lock_class+0x74/0x170 [ 1384.975202][T18489] ? register_lock_class+0x51/0x320 [ 1384.975225][T18489] __lock_acquire+0xab9/0xd20 [ 1384.975241][T18489] ? kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.975261][T18489] lock_acquire+0x120/0x360 [ 1384.975273][T18489] ? kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.975299][T18489] __mutex_lock+0x182/0xe80 [ 1384.975313][T18489] ? kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.975334][T18489] ? _copy_from_iter+0xa33/0x16f0 [ 1384.975352][T18489] ? kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.975373][T18489] ? __pfx___mutex_lock+0x10/0x10 [ 1384.975388][T18489] ? __pfx__copy_from_iter+0x10/0x10 [ 1384.975405][T18489] ? rcu_is_watching+0x15/0xb0 [ 1384.975421][T18489] ? trace_kmalloc+0x1f/0xd0 [ 1384.975434][T18489] ? kernfs_fop_write_iter+0x158/0x4f0 [ 1384.975456][T18489] kernfs_fop_write_iter+0x1e0/0x4f0 [ 1384.975480][T18489] iter_file_splice_write+0x93a/0x1000 [ 1384.975504][T18489] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1384.975519][T18489] ? rcu_read_lock_any_held+0xb3/0x120 [ 1384.975541][T18489] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1384.975555][T18489] do_splice+0xc76/0x1660 [ 1384.975577][T18489] ? __pfx_do_splice+0x10/0x10 [ 1384.975594][T18489] __se_sys_splice+0x2e1/0x460 [ 1384.975611][T18489] ? __pfx___se_sys_splice+0x10/0x10 [ 1384.975628][T18489] ? __x64_sys_splice+0x21/0xf0 [ 1384.975643][T18489] do_syscall_64+0xfa/0x3b0 [ 1384.975659][T18489] ? lockdep_hardirqs_on+0x9c/0x150 [ 1384.975672][T18489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.975686][T18489] ? clear_bhb_loop+0x60/0xb0 [ 1384.975703][T18489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.975724][T18489] RIP: 0033:0x7f7acbd8e9a9 [ 1384.975738][T18489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.975751][T18489] RSP: 002b:00007f7accb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1384.975766][T18489] RAX: ffffffffffffffda RBX: 00007f7acbfb6080 RCX: 00007f7acbd8e9a9 [ 1384.975777][T18489] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 1384.975786][T18489] RBP: 00007f7acbe10d69 R08: 000000000000bfd1 R09: 0000000000000000 [ 1384.975796][T18489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.975805][T18489] R13: 0000000000000001 R14: 00007f7acbfb6080 R15: 00007ffceec07138 [ 1384.975821][T18489] [ 1385.988193][T18502] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3375'. [ 1386.000602][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'.