f00000009c0)={&(0x7f0000000780)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 03:13:57 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "ede26fbd369b05396e04a111364ca1f2307891525c9121c820fd784db49d5078ac7fc3a7334478b511d827213d9930544624a3d14b0c455c1fe540fe147e64df"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="12", 0x1) keyctl$revoke(0x3, r0) 03:13:57 executing program 0: set_mempolicy(0x0, &(0x7f0000000040), 0x401) 03:13:57 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x0, &(0x7f00000048c0), 0x0, &(0x7f0000004bc0)={[], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) 03:13:57 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x1, &(0x7f00000048c0)=[{&(0x7f0000003540)='&', 0x1}], 0x0, &(0x7f0000004bc0)={[{@size={'size', 0x3d, [0x0]}}]}) 03:13:57 executing program 0: set_mempolicy(0x4003, &(0x7f0000000000)=0xffffffffffff6fc6, 0x7) [ 1040.523394][T31237] tmpfs: Bad value for 'size' [ 1040.532179][T31236] tmpfs: Unknown parameter 'fowner<18446744073709551615' 03:13:57 executing program 3: r0 = socket(0x23, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x1) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000200)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 03:13:57 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x20202) 03:13:57 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) 03:13:57 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x15, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:57 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 03:13:57 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000a00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 03:13:57 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x1d, r0, 0x0) keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, r0) 03:13:57 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "b679462b55865e2155f9080e00000000000010cdab29000a000000aed745004a63dc7bf060835ff1f7ddb3653c0d866a00"}, 0x48, r0) keyctl$revoke(0x3, r1) 03:13:58 executing program 0: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x2003) 03:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x40049409) 03:13:58 executing program 2: add_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x17, 0xfffffffffffffffe) 03:13:58 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "7bf888700e99a41fdc87d9dc25ac279d29e9e4cab981330da59a067ab4c6fcca200408c0037607be510023004781ea7b71f571195e1f939da695443a3993d68f"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x2}, 0xfffffffffffffffe) 03:13:58 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00', r0}, 0x10) 03:13:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x5, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x2}, 0x48) 03:13:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x150, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @empty}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_LABELS_MASK={0xc, 0x17, [0x7, 0x3]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x138}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_STATUS_MASK={0xc6}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x6}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}]}, 0x150}}, 0x0) 03:13:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/164) [ 1040.699125][T31269] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. 03:13:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x80a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) 03:13:58 executing program 1: keyctl$setperm(0xc, 0x0, 0x2) 03:13:58 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x15, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 03:13:58 executing program 2: syz_open_dev$vcsn(&(0x7f0000000040), 0x10000, 0x201) 03:13:58 executing program 0: socket(0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)={[{@size={'size', 0x3d, [0x74, 0xebe537e282e37716]}}]}) 03:13:58 executing program 3: set_mempolicy(0x4, 0x0, 0x0) io_setup(0x5, &(0x7f0000000000)) 03:13:58 executing program 1: keyctl$instantiate_iov(0x12, 0x0, 0x0, 0x0, 0x0) 03:13:58 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 03:13:58 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) 03:13:58 executing program 2: accept$unix(0xffffffffffffffff, &(0x7f0000004b40)=@abs, &(0x7f0000000180)=0x6e) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x100000001, 0x7, &(0x7f00000048c0)=[{&(0x7f0000003480)="ee99e7d8fc5734ace88d0bf7679282d61e7b04f638a6d13ff663762247cc586af452d85ec257e91e1fab6ff1b55f612fa7624550b67a83c7ed1784eaad91f29b403ceb08e93f305d7a45a92597df38de869def31085275f9a5812fc34379211fe55352d6efdec95047ba09ed244d0a6c72a8cf7b5cbc", 0x76, 0x7}, {&(0x7f0000003540)="2661f2c6e85ec5942849b3908303dd9d8f582782acacf93f6f44de406db5082af25f763593d021ffaf007517059b25c7770b343ac3663ad1994e8dfa03c5dae379b97785a623cb6d2cdafc173bb4718365f79148a7d5af0d3a2b56af4bb63218ba2ca8c7eb8c2a33aec9a5872a432ca197c2f367f48734390ce59e1eae649ab740f7fa06e10bb64be57821954ad245237f067489894f249060dfd0b93c44a598b3f692c19d9a6cc64b184595552de68f33edcbd5d159a3b8aecca7f4166ebf1caa59c641c2c92f5642b6a25632ec27596545c5c9feb98257e8ffb042b0089d0b0c5be4827b4a45d67c03c7210bf6e11a074e614e", 0xf4, 0x8}, {&(0x7f0000003640)="056285a2fe13bf384bc06dde8838a553e8ba5d383266bf2bbd1f18d9d95bfeee0810bd1483d1b0b4d95eff11c22b71b72d53ee58142d6eccab1a1cc7e52b59ae70eea936b6b015bbe62574a6700a739865ac46e287ad4014f2d94b80cf47aea196d1ab622b4c69da84f5eaf2748470302338e500a947e4adabe4aac1077701603fcebfd54222f3d502b47053d03a82", 0x8f}, {&(0x7f0000003700)="f6e2976e5b2edb5c938ea747c6a92a6fb69569effc36ed3d8e7d42b69159ec415069df4f2059", 0x26, 0xfff}, {&(0x7f0000003780)="cedb26e462e00039b2be530429b08e1fd4ea5618ff26c601d6bc356dffd02479e23ef1a39c688fe104d4e3b7f811b7e19cde391810897c7631e49da17833e110c4090443cd21647529d5983e6ad1529d027dec4b667e768fcd0c34356fd161253acf2f963cd7ae0f32dbdb381114f89162311ad48900baa4905c30a1e431e4c94f7190eded2a9ba65be33fb4ccc1b7777677456ae5", 0x95, 0x4}, {&(0x7f0000003880)="958360306a2f1404a9f94d74768975c4ed3e08230431", 0x16, 0x7ff}, {&(0x7f00000038c0)="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", 0xffc, 0x1}], 0x2000100, &(0x7f0000004bc0)={[{@mode={'mode', 0x3d, 0x10000}}], [{@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'huge=always'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'huge=always'}}, {@obj_type={'obj_type', 0x3d, 'nr_inodes'}}]}) 03:13:58 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "1fcbfcdba5602fdd693ce34672f4a67aa403ba39524cda36dd68f71c5d2c0083459cec244ff992aa24b02d53d4f991efd049f5354195cc44ec71f1738f3d5004"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0xb, r0, 0x0) [ 1040.820946][T31293] loop2: detected capacity change from 0 to 264192 [ 1040.826011][T31293] tmpfs: Unknown parameter 'fowner<00000000000000060929' [ 1040.827076][T31294] tmpfs: Bad value for 'size' 03:13:58 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)=""/26, 0x1a}}, 0x10) 03:13:58 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) [ 1040.859519][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1040.873135][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1040.877920][T12365] ldm_validate_partition_table(): Disk read failed. [ 1040.882889][T12365] Dev loop2: unable to read RDB block 0 [ 1040.886105][T12365] loop2: unable to read partition table [ 1040.891016][T12365] loop2: partition table beyond EOD, truncated 03:13:58 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x0, &(0x7f00000048c0), 0x0, &(0x7f0000004bc0)={[{@size={'size', 0x3d, [0x0]}}]}) 03:13:58 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0xf, r0, 0x0) 03:13:58 executing program 1: keyctl$instantiate_iov(0xb, 0x0, 0x0, 0x0, 0x0) 03:13:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080), 0x2000008c) 03:13:58 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0xf, r0, 0x0) 03:13:58 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, 0x80) 03:13:58 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffff6fc6, 0x7) socket$packet(0x11, 0x3, 0x300) r0 = timerfd_create(0x0, 0x0) bpf$BPF_BTF_LOAD(0x4, 0x0, 0x7) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x7fff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) msgget(0x2, 0x34a) msgget$private(0x0, 0x50a) [ 1040.970829][T31310] tmpfs: Bad value for 'size' 03:13:58 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0xf, r0, 0x0) 03:13:58 executing program 3: add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 03:13:58 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 03:13:58 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffff6fc6, 0x7) socket$packet(0x11, 0x3, 0x300) r0 = timerfd_create(0x0, 0x0) bpf$BPF_BTF_LOAD(0x4, 0x0, 0x7) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x7fff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) msgget(0x2, 0x34a) msgget$private(0x0, 0x50a) 03:13:58 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0xf, r0, 0x0) 03:13:58 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000009c0)) 03:13:58 executing program 1: add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 03:13:58 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r1 = memfd_create(&(0x7f0000001380)='\x00', 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000013c0)={0x0, 0x2, [{r1}, {}]}) 03:13:58 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffff6fc6, 0x7) socket$packet(0x11, 0x3, 0x300) r0 = timerfd_create(0x0, 0x0) bpf$BPF_BTF_LOAD(0x4, 0x0, 0x7) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x7fff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) msgget(0x2, 0x34a) msgget$private(0x0, 0x50a) 03:13:58 executing program 1: kexec_load(0x0, 0x7, &(0x7f0000001680)=[{0x0}], 0x0) 03:13:58 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0xffffffffffff6fc6, 0x7) socket$packet(0x11, 0x3, 0x300) r0 = timerfd_create(0x0, 0x0) bpf$BPF_BTF_LOAD(0x4, 0x0, 0x7) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x7fff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) msgget(0x2, 0x34a) msgget$private(0x0, 0x50a) 03:13:58 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 03:13:58 executing program 0: memfd_create(0x0, 0xef7bfb5616421d18) 03:13:58 executing program 3: set_mempolicy(0x1, &(0x7f0000000080)=0x2, 0x1000) 03:13:58 executing program 1: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) 03:13:58 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 03:13:58 executing program 3: msgrcv(0x0, 0x0, 0x74, 0x0, 0x15b15e3c9e054df1) 03:13:58 executing program 0: syz_open_dev$evdev(&(0x7f0000000200), 0xffffffffffffffff, 0x608000) 03:13:58 executing program 2: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000100), 0x0, 0x0, 0x2000000}], 0x0) 03:13:58 executing program 3: request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0) 03:13:58 executing program 1: accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x3, &(0x7f00000048c0)=[{0x0}, {0x0, 0x0, 0xfff}, {0x0}], 0x2000100, &(0x7f0000004bc0)={[{@mode}, {@size={'size', 0x3d, [0x0, 0x0]}}], [{@subj_type={'subj_type', 0x3d, 'huge=always'}}]}) 03:13:58 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x4, r0, 0x2000000) [ 1041.215571][T31355] loop1: detected capacity change from 0 to 15 [ 1041.223442][T31355] tmpfs: Bad value for 'size' 03:13:58 executing program 3: keyctl$search(0x14, 0x0, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0) 03:13:58 executing program 0: io_setup(0x1d, &(0x7f0000000380)=0x0) io_destroy(r0) io_setup(0x1, &(0x7f00000003c0)=0x0) io_destroy(r1) 03:13:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:58 executing program 1: mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 03:13:58 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x46000, 0x0) 03:13:58 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe811}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x1, 0x914a}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1]}, 0x80) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_print_times', 0x4003, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x1bc, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9caa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcdd4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcada}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc83a}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x2c080}, 0x4800) syz_open_dev$vcsu(&(0x7f0000000e00), 0x59, 0x20080) 03:13:58 executing program 1: kexec_load(0x0, 0x1, &(0x7f0000001680)=[{0x0}], 0x1) 03:13:58 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x0) 03:13:58 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0x10, 0x0, 0x0, &(0x7f0000001000)) 03:13:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 03:13:58 executing program 1: syz_mount_image$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:13:58 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x7, r0, 0x0) 03:13:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, 0x0}, 0x80) 03:13:58 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "b679462b55865e2155f9a8a64d794fddae7627d3b546ea73abac15d45aaed702004a63dc7b6a00"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 03:13:58 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, r0) 03:13:58 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x16, r0, 0x0) 03:13:58 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0xc01047d0, &(0x7f0000000140)=ANY=[]) 03:13:58 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000003440)='./file1\x00', 0x0, 0x6, &(0x7f00000048c0)=[{&(0x7f0000003480)="ee99e7d8fc5734ace88d0bf7679282d61e7b04f638a6d13ff663762247cc586af452d85ec257e91e1fab6ff1b55f612fa7624550b67a83c7ed1784eaad91f29b403ceb08e93f305d7a45a92597df38de869def31085275f9a5812fc34379211fe55352d6efdec95047ba09ed244d0a6c72a8cf7b5cbc47bfdf", 0x79, 0x7}, {&(0x7f0000003540)="2661f2c6e85ec5942849b3908303dd9d8f582782acacf93f6f44de406db5082af25f763593d021ffaf007517059b25c7770b343ac3663ad1994e8dfa03c5dae379b97785a623cb6d2cdafc173bb4718365f79148a7d5af0d3a2b56af4bb63218ba2ca8c7eb8c2a33aec9a5872a432ca197c2f367f48734390ce59e1eae649ab740f7fa06e10bb64be57821954ad245237f067489894f249060dfd0b93c44a598b3f692c19d9a6cc64b184595552de68f33edcbd5d159a3b8aecca7f4166ebf1caa59c641c2c92f5642b6a25632ec27596545c5c9feb98257e8ffb042b0089d0b0c5be4827b4a45d67c03c7210bf6e11a074e614e", 0xf4, 0x8}, {0x0, 0x0, 0x2}, {&(0x7f0000003700)="f6e2976e5b2edb5c938ea747c6a92a6fb69569effc36ed3d8e7d42b69159ec415069df4f", 0x24}, {&(0x7f0000003780)="cedb26e462e00039b2be530429b08e1fd4ea5618ff26c601d6bc356dffd02479e23ef1a39c688fe104d4e3b7f811b7e19cde391810897c7631e49da17833e110c4090443cd21647529d598", 0x4b, 0x4}, {0x0, 0x0, 0x7ff}], 0x2000100, &(0x7f0000004bc0)={[{@mode={'mode', 0x3d, 0x10000}}, {@size={'size', 0x3d, [0x36, 0x74, 0xebe537e282e37716, 0x6b, 0x39, 0x67, 0x70]}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'huge=always'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'huge=always'}}, {@obj_type={'obj_type', 0x3d, 'nr_inodes'}}]}) 03:13:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8, 0x0, 0x0, 0x80a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) [ 1041.525078][T31397] loop2: detected capacity change from 0 to 7 03:13:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) 03:13:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x5452) 03:13:58 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) 03:13:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4}, {0x14, 0x4, @empty}}}]}]}, 0x44}}, 0x0) [ 1041.542666][ T3132] Dev loop2: unable to read RDB block 7 [ 1041.546362][ T3132] loop2: unable to read partition table 03:13:58 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000002dc0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) [ 1041.550631][ T3132] loop2: partition table beyond EOD, truncated 03:13:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x26f, 0x9, 0x9, 0x1}, 0x48) 03:13:58 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x2000000}], 0x0) 03:13:58 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000240)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:58 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000) stat(&(0x7f0000000200)='./file0\x00', 0x0) 03:13:58 executing program 2: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x14, &(0x7f00000001c0)=r0, 0x4) 03:13:58 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$set_timeout(0xf, r2, 0x9) 03:13:58 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) keyctl$setperm(0xb, r0, 0x0) 03:13:59 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)={[], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) 03:13:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x0, 0x0, 0x8}, 0x48) [ 1041.659965][T31424] tmpfs: Unknown parameter 'fowner<18446744073709551615' 03:13:59 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x2000000}], 0x0) 03:13:59 executing program 1: mount$9p_fd(0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000740)) 03:13:59 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) 03:13:59 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:13:59 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009df3"]) 03:13:59 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/166) 03:13:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000100)=""/7, &(0x7f0000000140)=0x7) 03:13:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0) 03:13:59 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x2000000}], 0x0) 03:13:59 executing program 1: add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0xf, r0, 0x0) 03:13:59 executing program 3: keyctl$instantiate_iov(0x7, 0x0, 0x0, 0x0, 0x0) 03:13:59 executing program 2: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) read$msr(r0, &(0x7f00000000c0)=""/4096, 0x1000) 03:13:59 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "b679462b55865e2155f9a8a64d794fddae7627d3b546ea73abac15d45aaed702004a63dc7b6a00"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$revoke(0x7, r0) 03:13:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x50, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4}, {0x14, 0x4, @empty}}}]}]}, 0x50}}, 0x0) 03:13:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x80) 03:13:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x101, 0x0, 0x0, {0xf}, [@CTA_MARK_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0) 03:13:59 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x2000000}], 0x0) 03:13:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x0) 03:13:59 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1041032) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) 03:13:59 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 03:13:59 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 03:13:59 executing program 2: semctl$GETVAL(0x0, 0x2, 0xc, 0x0) 03:13:59 executing program 1: bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) set_mempolicy(0x0, &(0x7f0000000040), 0x3a3a) 03:13:59 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c1142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) close(r2) open(&(0x7f00000002c0)='./bus\x00', 0x14d842, 0x0) sendfile(r2, r2, 0x0, 0x201000) 03:13:59 executing program 3: accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x0, 0x2, &(0x7f00000048c0)=[{&(0x7f0000003480)="ee99e7d8fc5734ace88d0bf7679282d61e7b04f638a6d13ff663762247cc586af452d85ec257e91e1fab6ff1b55f612fa7", 0x31, 0x7}, {0x0, 0x0, 0xfff}], 0x2000100, &(0x7f0000004bc0)={[{@mode={'mode', 0x3d, 0x10000}}, {@size={'size', 0x3d, [0x32, 0x0, 0x74, 0x6b, 0x39, 0x0, 0x67, 0x0]}}], [{@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'huge=always'}}, {@smackfshat={'smackfshat', 0x3d, 'huge=always'}}, {@obj_type={'obj_type', 0x3d, 'nr_inodes'}}]}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 03:13:59 executing program 2: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 03:13:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_MARK={0x8}]}, 0x1c}}, 0x0) 03:13:59 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000048c0)=[{&(0x7f0000003480)="ee99e7d8fc5734ac", 0x8}], 0x0, 0x0) [ 1042.361415][T31477] loop3: detected capacity change from 0 to 15 03:13:59 executing program 2: getcwd(&(0x7f0000000000)=""/212, 0xd4) 03:13:59 executing program 0: setresuid(0xffffffffffffffff, 0xee00, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 03:13:59 executing program 2: openat$sysfs(0xffffffffffffff9c, 0x0, 0x408000, 0x0) 03:13:59 executing program 0: keyctl$instantiate_iov(0xe, 0x0, 0x0, 0x0, 0x0) 03:13:59 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002101000000000121252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000014200)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0x8b000}], 0x0, &(0x7f0000014d00)) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)) 03:13:59 executing program 2: set_mempolicy(0x3, &(0x7f0000000040)=0x400, 0x8000) 03:13:59 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) 03:13:59 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004bc0)={[{@size}]}) [ 1042.465403][T31496] tmpfs: Bad value for 'size' 03:13:59 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 03:13:59 executing program 2: set_mempolicy(0x1, &(0x7f0000000000)=0x8, 0x7) [ 1042.475323][T31498] loop3: detected capacity change from 0 to 2224 [ 1042.478359][T12365] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1042.486525][T12365] Buffer I/O error on dev loop3, logical block 0, async page read 03:13:59 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)='3', 0x1, r0) 03:13:59 executing program 0: openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) [ 1042.503220][T12365] loop3: unable to read partition table 03:13:59 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002101000000000121252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000014200)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0x8b000}], 0x0, &(0x7f0000014d00)) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)) 03:13:59 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000002d00), 0x20c0, 0x0) 03:13:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan1\x00'}) 03:13:59 executing program 1: setresuid(0xffffffffffffffff, 0xee00, 0x0) ioprio_set$uid(0x0, 0x0, 0x2000) 03:13:59 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:59 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002101000000000121252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000014200)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0x8b000}], 0x0, &(0x7f0000014d00)) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)) 03:13:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000700)={&(0x7f00000005c0), 0xfffffe4f, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) [ 1042.586446][T31522] loop3: detected capacity change from 0 to 2224 03:13:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000700)='devices.deny\x00', 0x2, 0x0) 03:13:59 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x8, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:13:59 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 03:14:00 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002101000000000121252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000014200)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0x8b000}], 0x0, &(0x7f0000014d00)) statx(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000007c0)) 03:14:00 executing program 1: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x100000001, 0x2, &(0x7f00000048c0)=[{&(0x7f0000003540)='&', 0x1, 0x8}, {&(0x7f0000003780), 0x0, 0x4}], 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 03:14:00 executing program 2: accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x100000001, 0x6, &(0x7f00000048c0)=[{&(0x7f0000003480)="ee99e7d8fc5734ace88d0bf7679282d61e7b04f638a6d13ff663762247cc586af452d85ec257e91e1fab6ff1b55f612fa7624550b67a83c7ed1784eaad91f29b403ceb08e93f305d7a45a92597df38de869def31085275f9a5812fc34379211fe55352d6efdec95047ba09ed244d0a6c72a8cf7b5cbc47bfdfb7514d10fb2bf01b", 0x81, 0x7}, {&(0x7f0000003540)="2661f2c6e85ec5942849b3908303dd9d8f582782acacf93f6f44de406db5082af25f763593d021ffaf007517059b25c7770b343ac3663ad1994e8dfa03c5dae379b97785a623cb6d2cdafc173bb4718365f79148a7d5af0d3a2b56af4bb63218ba2ca8c7eb8c2a33aec9a5872a432ca197c2f367f48734390ce59e1eae649ab740f7fa06e10bb64be57821954ad245237f067489894f249060dfd0b93c44a598b3f692c19d9a6cc64b184595552de68f33edcbd5d159a3b8aecca7f4166ebf1caa59c641c2c92f5642b6a25632ec27596545c5c9feb98257e8ffb042b0089d0b0c5be4827b4a45d67c03c7210bf6e11a074e614e", 0xf4, 0x8}, {&(0x7f0000003640)="056285a2fe13bf384bc06dde8838a553e8ba5d383266bf2bbd1f18d9d95bfeee0810bd1483d1b0b4d95eff11c22b71b72d53ee58142d6eccab1a1cc7e52b59ae70eea936b6b015bbe62574a6700a739865ac46e287ad4014f2d94b80cf47aea196d1ab622b4c69da84f5eaf2748470302338e500a947e4adabe4aac1077701603fcebfd54222f3d502b47053d03a8228f0723b2ff95deb50ede3876acb6e454c997381333f", 0xa5, 0x2}, {&(0x7f0000003700)="f6e2976e5b2edb5c938ea747c6a92a6fb69569effc36ed3d8e7d42b69159ec415069df4f", 0x24, 0xfff}, {&(0x7f0000003780)="cedb26e462e00039b2be530429b08e1fd4ea5618ff26c601d6bc356dffd02479e23ef1a39c688fe104d4e3b7f811b7e19cde391810897c7631e49da17833e110c4090443cd21647529d5983e6ad1529d027dec4b667e768fcd0c34356fd161253acf2f963cd7ae0f32dbdb381114f89162311ad48900baa4905c30a1e431e4c94f7190eded2a9ba65be33fb4ccc1b7777677456ae5", 0x95, 0x4}, {&(0x7f0000003880)="958360306a2f1404a9f94d74768975c4ed3e08230431", 0x16, 0x7ff}], 0x2000100, &(0x7f0000004bc0)={[{@mode={'mode', 0x3d, 0x10000}}, {@size={'size', 0x3d, [0x32, 0x36, 0x74, 0xebe537e282e37716, 0x6b, 0x39, 0x74, 0x67, 0x70]}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'huge=always'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'tmpfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'huge=always'}}, {@obj_type={'obj_type', 0x3d, 'nr_inodes'}}]}) 03:14:00 executing program 0: sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) [ 1042.646287][T31531] loop3: detected capacity change from 0 to 2224 [ 1042.650466][T31532] loop1: detected capacity change from 0 to 264192 [ 1042.656515][T31534] loop2: detected capacity change from 0 to 264192 03:14:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1042.671456][T31534] tmpfs: Bad value for 'size' 03:14:00 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x9, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x80) 03:14:00 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000048c0)=[{0x0}], 0x0, 0x0) 03:14:00 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000180)="df87", 0xfffff, r0) 03:14:00 executing program 3: socket(0x0, 0x10, 0x0) 03:14:00 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="77a2d46418c4442fc51a50f2945705358f71a0373529618e4c2b5b97318f503881385a6158b017cdb6b19401bc7f67a6072d093e6be1ad54f64425aa3965527c8bb3dd343075c643f02c19277fffa39ea01e0cf2df807522b90405b85347138b25282c9fc817c945b7d268c7924fc3f28fd5c76702950a", 0x77, r0) 03:14:00 executing program 2: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 03:14:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) 03:14:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x26f, 0x9, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 1042.737252][T31548] trusted_key: encrypted_key: master key parameter '>kTD%9eR|40uC,' ߀u"SG%(,EhǒOg [ 1042.737252][T31548] ' is invalid 03:14:00 executing program 0: keyctl$instantiate_iov(0x9, 0x0, 0x0, 0x0, 0x0) 03:14:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) 03:14:00 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "86599fa43e2f8b1fb6c2de5889d4068051f74d1261c5f07e5bd5bba84b65ff8e84fad55025250e6b51bd9b2f75e7517af6a9ba2fad0105fa452b2f758066d5c1"}, 0x48, r0) keyctl$describe(0x6, r1, &(0x7f0000000300)=""/26, 0x1a) 03:14:00 executing program 2: mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, 0x0) 03:14:00 executing program 0: socket$inet(0x2, 0x0, 0x3ff) 03:14:00 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "86599fa43e2f8b1fb6c2de5889d4068051f74d1261c5f07e5bd5bba84b65ff8e84fad55025250e6b51bd9b2f75e7517af6a9ba2fad0105fa452b2f758066d5c1"}, 0x48, r0) keyctl$describe(0x6, r1, &(0x7f0000000300)=""/26, 0x1a) 03:14:00 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80800) 03:14:00 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) 03:14:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='block_bio_remap\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000002280)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 03:14:00 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "86599fa43e2f8b1fb6c2de5889d4068051f74d1261c5f07e5bd5bba84b65ff8e84fad55025250e6b51bd9b2f75e7517af6a9ba2fad0105fa452b2f758066d5c1"}, 0x48, r0) keyctl$describe(0x6, r1, &(0x7f0000000300)=""/26, 0x1a) 03:14:00 executing program 1: set_mempolicy(0x2, &(0x7f0000000040)=0x200000044, 0x7) socket$packet(0x11, 0x3, 0x300) 03:14:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x18, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 03:14:00 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "86599fa43e2f8b1fb6c2de5889d4068051f74d1261c5f07e5bd5bba84b65ff8e84fad55025250e6b51bd9b2f75e7517af6a9ba2fad0105fa452b2f758066d5c1"}, 0x48, r0) keyctl$describe(0x6, r1, &(0x7f0000000300)=""/26, 0x1a) 03:14:00 executing program 1: socket(0x10, 0x3, 0x6fb902c) 03:14:00 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000200)={r1, 0x0, 0x0, 0x4000}) 03:14:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000010105cbb4639867dd3c9aef43"], 0x50}}, 0x0) [ 1042.931987][T31586] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 03:14:00 executing program 3: setresuid(0xffffffffffffffff, 0xee00, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) 03:14:00 executing program 1: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000003440)='./file1\x00', 0x0, 0x0, &(0x7f00000048c0), 0x0, &(0x7f0000004bc0)={[{@mode}], [{@fowner_lt={'fowner<', 0xee01}}, {@smackfshat={'smackfshat', 0x3d, 'huge=always'}}]}) 03:14:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='block_bio_remap\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000002280)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 03:14:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x5450) [ 1042.988273][T31591] tmpfs: Unknown parameter 'fowner<00000000000000060929' 03:14:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7fffffffffffffff) 03:14:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 03:14:00 executing program 1: syz_open_dev$vcsu(&(0x7f0000000580), 0x6, 0x0) 03:14:00 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x0) 03:14:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000022c0)=ANY=[@ANYBLOB="620af8ff25200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415bd1966118b64f751a0f241b072e90080008002d7560593a286cecc93e64c227c95aa0b7845e6b607130c89f18c0c1089d8b853289d01aa27ae82e61b0f9223684198e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364145835108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e68242aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec5c473892b6613bfb52286bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000009711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b000020435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad806725925eff2f560b9ef4e45a845fffe97ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870c1f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b54b8f1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a66083b013ccecff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ece0ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f3014216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bca404abde7750898b1bd627e87306703be8672d70d1ab570752e734326206c168b6fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da20fed05a8fe6468bc5c010b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225f030000000000000047d6b70ebc6603261a4d02b4d95cb63a672908f994d43f893808bad959719c0000000000378a921c7f7f6914bee24c7e8000f2c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e000000000000037010632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127cf72748a028daf5fc4d4e6d5265bec44219ee8fbfe86f441c724fa7b3d1ff0555e63ad00a1c7f9f9af10154f1e109dc3f7dd87ea308a1fb5a983490c6c93610864623613dabec4c0b64461d21f807515d8fadec636c99aa95ff895c25aad5ac0993a65c7668ca2b6d46edbad410df7390d27ec8199259b8e3dd36de9b35ce25d39686f2470afb1b1db18221841cee6e5531280d65f1d28886e0f06856a5ca37a91ea6e19977c517b10fb66858a05b03084d1f3bd5542d2796a33cfe545be3dc03d302e4839492cdc7694142e48f23271787d3a2360996ca3c9b18000000000700000000000000000000004882ce2e7a68512b23b0ab1f7a6c960b00000000008301f41079f3e6fd3712b03be0b3d428c1ac47e9c8048a83b193924abe8320fcc7037b188fcb5cc42b9dcfcac100dd843d97640b4a73f912af7efa60f3ba27caf3d49894d8bd36ba71444dce21cf1f15a0adbc4d242c245cc25cd20878d90b2c986601243c3c7b016ee5f4e6908c9daba81a7a11c794bbf75406d933dd6548e40be94cdc53d052afdf665634975e2b48e45d750e7b4fbcfaa7c0a47c97619fd500120f418d480000000000000000000033e26a99accd"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='block_bio_remap\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000002280)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 03:14:00 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) 03:14:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0xc008ae88, 0x0) 03:14:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000d40)={&(0x7f0000000ac0), 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0) 03:14:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)=[0x0, 0x3b5]) 03:14:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='block_bio_remap\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f0000002280)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) 03:14:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:00 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x0) 03:14:00 executing program 3: futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 03:14:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x5fd}], 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='shortname=win95,time_offset=0x0000000000000181,iocharset=cp932,iocharset=default,check=normal,shortname=winnt,shortname=lower']) [ 1043.296090][T31623] loop3: detected capacity change from 0 to 5 [ 1043.299205][ T3132] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 03:14:00 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x0) 03:14:00 executing program 2: set_mempolicy(0x4003, &(0x7f0000000000)=0xffffffffffff6fc6, 0x7) io_setup(0x7ae, &(0x7f0000000280)) [ 1043.334938][ T3132] Buffer I/O error on dev loop3, logical block 0, async page read 03:14:00 executing program 0: kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0}], 0x0) [ 1043.354960][ T3132] Dev loop3: unable to read RDB block 5 [ 1043.360368][ T3132] loop3: unable to read partition table [ 1043.365417][ T3132] loop3: partition table beyond EOD, truncated [ 1043.382888][T31623] FAT-fs (loop3): Directory bread(block 5) failed [ 1043.389644][T31623] FAT-fs (loop3): Directory bread(block 6) failed 03:14:00 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa}, @generic={0x3, 0x10, 0x3}, @ext_cap={0x7}]}}) [ 1043.728275][T27262] usb 5-1: new high-speed USB device number 21 using dummy_hcd 03:14:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:01 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000700)={0x28, 0x0, 0x0, @hyper}, 0x10) 03:14:01 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x214000, 0x0) 03:14:01 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) 03:14:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1043.873270][T31645] loop2: detected capacity change from 0 to 4 [ 1043.889709][T31645] Dev loop2: unable to read RDB block 4 [ 1043.899382][T31645] loop2: unable to read partition table [ 1043.917353][T31645] loop2: partition table beyond EOD, truncated [ 1043.949727][T31645] EXT4-fs (loop2): invalid first ino: 0 [ 1043.968733][T27262] usb 5-1: Using ep0 maxpacket: 32 [ 1044.000190][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1044.016781][T12365] Buffer I/O error on dev loop2, logical block 0, async page read 03:14:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1044.079282][T31648] loop2: detected capacity change from 0 to 4 [ 1044.085048][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1044.096695][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1044.113647][T12365] Dev loop2: unable to read RDB block 4 [ 1044.124271][T12365] loop2: unable to read partition table [ 1044.136452][T12365] loop2: partition table beyond EOD, truncated [ 1044.147305][T31648] EXT4-fs (loop2): invalid first ino: 0 [ 1044.178778][T27262] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.198949][T27262] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.215356][T27262] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1044.222095][T27262] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1044.230105][T27262] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1044.237773][T27262] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1044.448386][T27262] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.455140][T27262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.461705][T27262] usb 5-1: Product: syz [ 1044.465005][T27262] usb 5-1: Manufacturer: syz [ 1044.468692][T27262] usb 5-1: SerialNumber: syz [ 1044.788853][T27262] cdc_ncm 5-1:1.0: bind() failure [ 1044.805184][T27262] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1044.812691][T27262] cdc_ncm 5-1:1.1: bind() failure [ 1044.825163][T27262] usb 5-1: USB disconnect, device number 21 03:14:02 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x3, [@ss_cap={0xa}, @generic={0x3, 0x10, 0x3}, @ext_cap={0x7}]}}) 03:14:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) 03:14:02 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001000000010904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 03:14:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1045.299837][T31656] loop2: detected capacity change from 0 to 4 [ 1045.306467][T31656] Dev loop2: unable to read RDB block 4 [ 1045.318341][T31656] loop2: unable to read partition table [ 1045.322160][T31656] loop2: partition table beyond EOD, truncated [ 1045.329674][T31656] EXT4-fs (loop2): invalid first ino: 0 03:14:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1045.457275][T31661] loop2: detected capacity change from 0 to 4 [ 1045.471607][T31661] Dev loop2: unable to read RDB block 4 [ 1045.482975][T31661] loop2: unable to read partition table [ 1045.490970][T31661] loop2: partition table beyond EOD, truncated [ 1045.498008][T31661] EXT4-fs (loop2): invalid first ino: 0 03:14:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1045.568356][ T3759] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1045.578312][T27262] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1045.611081][T31664] loop2: detected capacity change from 0 to 4 [ 1045.623406][ T3132] Dev loop2: unable to read RDB block 4 03:14:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1045.636674][ T3132] loop2: unable to read partition table [ 1045.641772][ T3132] loop2: partition table beyond EOD, truncated [ 1045.660051][T31666] loop2: detected capacity change from 0 to 4 [ 1045.678865][T12365] Dev loop2: unable to read RDB block 4 [ 1045.683487][T12365] loop2: unable to read partition table 03:14:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1045.698564][T12365] loop2: partition table beyond EOD, truncated [ 1045.808328][ T3759] usb 5-1: Using ep0 maxpacket: 32 [ 1045.849127][T27262] usb 8-1: Using ep0 maxpacket: 8 [ 1045.989349][T27262] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.997069][T27262] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1046.003995][T27262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.016910][T27262] usb 8-1: config 0 descriptor?? [ 1046.020696][ T3759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.031083][ T3759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.039526][ T3759] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1046.047822][ T3759] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1046.055674][ T3759] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1046.060131][T27262] iowarrior 8-1:0.0: no interrupt-in endpoint found [ 1046.063802][ T3759] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1046.248498][ T3759] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1046.256440][ T3759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.260967][T27262] usb 8-1: USB disconnect, device number 36 [ 1046.264137][ T3759] usb 5-1: Product: syz [ 1046.273347][ T3759] usb 5-1: Manufacturer: syz [ 1046.277354][ T3759] usb 5-1: SerialNumber: syz [ 1046.558375][ T3759] cdc_ncm 5-1:1.0: bind() failure [ 1046.569249][ T3759] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1046.574072][ T3759] cdc_ncm 5-1:1.1: bind() failure [ 1046.587120][ T3759] usb 5-1: USB disconnect, device number 22 03:14:04 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) 03:14:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) 03:14:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:04 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {}, {@allow_other}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x35, 0x62, 0x0, 0x33, 0x63, 0x31, 0x33]}}}, {@pcr}]}}) [ 1047.042872][T31671] loop2: detected capacity change from 0 to 4 [ 1047.044956][T31672] fuse: Unknown parameter 'fsuuid' 03:14:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)={[{@dmode}]}) 03:14:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) [ 1047.065094][ T39] audit: type=1400 audit(1661310844.427:644): avc: denied { ioctl } for pid=31675 comm="syz-executor.0" path="socket:[117886]" dev="sockfs" ino=117886 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1047.122743][T31678] ISOFS: Unable to identify CD-ROM format. 03:14:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 03:14:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) [ 1047.173390][T31685] loop2: detected capacity change from 0 to 4 [ 1047.174057][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 03:14:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 1047.187550][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1047.200611][T31687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=31687 comm=syz-executor.0 03:14:04 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000480)={[{@dmode}]}) [ 1047.221930][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1047.234744][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1047.242621][T12365] ldm_validate_partition_table(): Disk read failed. [ 1047.248789][T12365] Dev loop2: unable to read RDB block 0 [ 1047.253029][T12365] loop2: unable to read partition table [ 1047.258976][T12365] loop2: partition table beyond EOD, truncated [ 1047.318784][T31689] ISOFS: Unable to identify CD-ROM format. 03:14:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000002740)) 03:14:04 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904"], 0x0) 03:14:04 executing program 3: syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) [ 1047.603041][T31695] loop2: detected capacity change from 0 to 4 03:14:04 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)) 03:14:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)) 03:14:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)) [ 1047.898273][ T4799] usb 5-1: new high-speed USB device number 23 using dummy_hcd 03:14:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000002740)) [ 1048.184070][T31711] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1048.318672][ T4799] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.326464][ T4799] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1048.334359][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.411325][ T4799] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1048.611861][ T3758] usb 5-1: USB disconnect, device number 23 03:14:06 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder1\x00'}) 03:14:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000002740)) 03:14:06 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1049.144228][T31719] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:06 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$netlink(r0, 0x0, &(0x7f0000000040)=0x1000000) 03:14:06 executing program 0: syz_emit_ethernet(0x1249, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa2381000c0086dd"], 0x0) 03:14:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000002740)) 03:14:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x0, 0x0, "dc42bd1ab3110891"}) [ 1049.277470][T31732] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x0, 0x0, "dc42bd1ab3110891"}) 03:14:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000002740)) [ 1049.460078][T31738] loop2: detected capacity change from 0 to 4 [ 1049.480016][T31738] Dev loop2: unable to read RDB block 4 [ 1049.484257][T31738] loop2: unable to read partition table [ 1049.491514][T31738] loop2: partition table beyond EOD, truncated [ 1049.510968][T31738] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2004005c, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="dc", 0x1}], 0x1}}], 0x1, 0x60cd814) close(r0) 03:14:07 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 03:14:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000002740)) 03:14:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1049.884433][T31742] loop2: detected capacity change from 0 to 4 03:14:07 executing program 0: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) [ 1049.895659][T31742] Dev loop2: unable to read RDB block 4 [ 1049.900863][T31742] loop2: unable to read partition table [ 1049.904894][T31742] loop2: partition table beyond EOD, truncated [ 1049.912666][T31742] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:07 executing program 0: mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)) 03:14:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x8, [@random="cc8663227d81", @multicast, @local, @local, @local, @link_local, @empty, @local]}) 03:14:07 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001480)=ANY=[]) 03:14:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000002740)) [ 1050.015611][T31757] loop2: detected capacity change from 0 to 4 03:14:07 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010000000109040000"], 0x0) [ 1050.024157][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.030400][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.039347][T12365] Dev loop2: unable to read RDB block 4 [ 1050.043154][T12365] loop2: unable to read partition table [ 1050.049281][T12365] loop2: partition table beyond EOD, truncated [ 1050.054972][T31757] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03b0010) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 1050.308521][ T3759] usb 5-1: new high-speed USB device number 24 using dummy_hcd 03:14:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540), 0x0, 0x400}], 0x0, &(0x7f0000002740)) [ 1050.502070][T31765] loop2: detected capacity change from 0 to 4 [ 1050.510364][T31765] Dev loop2: unable to read RDB block 4 [ 1050.515084][T31765] loop2: unable to read partition table [ 1050.525248][T31765] loop2: partition table beyond EOD, truncated [ 1050.532265][T31765] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1050.549052][ T3759] usb 5-1: Using ep0 maxpacket: 8 03:14:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540), 0x0, 0x400}], 0x0, &(0x7f0000002740)) [ 1050.653152][T31770] loop2: detected capacity change from 0 to 4 [ 1050.664629][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.672632][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.678935][ T3759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.680782][T12365] Dev loop2: unable to read RDB block 4 [ 1050.692724][ T3759] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1050.692941][T12365] loop2: unable to read partition table [ 1050.700398][ T3759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.705938][T12365] loop2: partition table beyond EOD, truncated [ 1050.719418][T31770] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1050.734333][ T3759] usb 5-1: config 0 descriptor?? 03:14:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540), 0x0, 0x400}], 0x0, &(0x7f0000002740)) [ 1050.788892][T31772] loop2: detected capacity change from 0 to 4 [ 1050.789395][ T3759] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 1050.791123][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.791160][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.791229][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.791258][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.791332][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.791359][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.791415][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.791432][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.791469][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.791487][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.791501][T12365] ldm_validate_partition_table(): Disk read failed. [ 1050.791553][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1050.791570][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1050.791687][T12365] Dev loop2: unable to read RDB block 0 [ 1050.791887][T12365] loop2: unable to read partition table [ 1050.792368][T12365] loop2: partition table beyond EOD, truncated 03:14:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f00000000000000020000000200000000800000008000", 0x27, 0x400}], 0x0, &(0x7f0000002740)) [ 1050.905718][T31772] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1050.969425][T31774] loop2: detected capacity change from 0 to 4 [ 1050.974643][T12365] ldm_validate_partition_table(): Disk read failed. 03:14:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03b0010) sendfile(r1, r0, 0x0, 0x8000000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) [ 1050.984222][T12365] Dev loop2: unable to read RDB block 4 [ 1050.995805][T24995] usb 5-1: USB disconnect, device number 24 [ 1051.001108][T12365] loop2: unable to read partition table [ 1051.004877][T12365] loop2: partition table beyond EOD, truncated [ 1051.009733][T31774] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:08 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f00000000000000020000000200000000800000008000", 0x27, 0x400}], 0x0, &(0x7f0000002740)) 03:14:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1051.524344][T31781] loop2: detected capacity change from 0 to 4 [ 1051.532373][T31781] Dev loop2: unable to read RDB block 4 [ 1051.538310][T31781] loop2: unable to read partition table [ 1051.543258][T31781] loop2: partition table beyond EOD, truncated [ 1051.567438][T31781] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f00000000000000020000000200000000800000008000", 0x27, 0x400}], 0x0, &(0x7f0000002740)) [ 1051.716483][T31787] loop2: detected capacity change from 0 to 4 [ 1051.726973][T12365] Dev loop2: unable to read RDB block 4 [ 1051.732022][T12365] loop2: unable to read partition table [ 1051.736180][T12365] loop2: partition table beyond EOD, truncated [ 1051.745428][T31787] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 1051.828297][ T4799] usb 5-1: new high-speed USB device number 25 using dummy_hcd 03:14:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000002740)) [ 1051.868899][T31789] loop2: detected capacity change from 0 to 4 [ 1051.875793][T12365] ldm_validate_partition_table(): Disk read failed. [ 1051.881777][T12365] Dev loop2: unable to read RDB block 0 [ 1051.885628][T12365] loop2: unable to read partition table [ 1051.908443][T12365] loop2: partition table beyond EOD, truncated [ 1051.917299][T31789] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:14:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000002740)) [ 1052.020525][T31794] loop2: detected capacity change from 0 to 4 [ 1052.027675][T31794] Dev loop2: unable to read RDB block 4 [ 1052.034856][T31794] loop2: unable to read partition table [ 1052.039956][T31794] loop2: partition table beyond EOD, truncated [ 1052.047021][T31794] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1052.218859][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1052.226213][ T4799] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1052.233454][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1052.240497][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.269268][T31784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1053.842601][T25534] usb 5-1: USB disconnect, device number 25 03:14:12 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:14:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000002740)) 03:14:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1054.865941][T31800] loop2: detected capacity change from 0 to 4 [ 1054.875534][T31800] Dev loop2: unable to read RDB block 4 [ 1054.885696][T31800] loop2: unable to read partition table [ 1054.899481][T31800] loop2: partition table beyond EOD, truncated [ 1054.909696][T31800] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:12 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f", 0x44, 0x400}], 0x0, &(0x7f0000002740)) [ 1055.027790][T31809] loop2: detected capacity change from 0 to 4 [ 1055.033772][T31809] Dev loop2: unable to read RDB block 4 [ 1055.038011][T31809] loop2: unable to read partition table [ 1055.042167][T31809] loop2: partition table beyond EOD, truncated [ 1055.052026][T31809] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f", 0x44, 0x400}], 0x0, &(0x7f0000002740)) [ 1055.090023][T31811] loop2: detected capacity change from 0 to 4 [ 1055.096906][T31811] Dev loop2: unable to read RDB block 4 [ 1055.101926][T31811] loop2: unable to read partition table [ 1055.106566][T31811] loop2: partition table beyond EOD, truncated [ 1055.118691][T31811] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f", 0x44, 0x400}], 0x0, &(0x7f0000002740)) [ 1055.209899][T31813] loop2: detected capacity change from 0 to 4 [ 1055.217209][T31813] Dev loop2: unable to read RDB block 4 [ 1055.221938][T31813] loop2: unable to read partition table [ 1055.229278][T27262] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1055.230478][T31813] loop2: partition table beyond EOD, truncated [ 1055.252230][T31813] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1055.280524][T25534] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1055.638413][T27262] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1055.647535][T27262] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1055.654593][T27262] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1055.662668][T27262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.688649][T25534] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1055.698073][T25534] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1055.698606][T31807] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1055.708732][T25534] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1055.714660][T25534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.748755][T31804] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1057.537942][T23597] usb 5-1: USB disconnect, device number 26 [ 1057.546167][T24995] usb 8-1: USB disconnect, device number 37 03:14:15 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000", 0x49, 0x400}], 0x0, &(0x7f0000002740)) 03:14:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:15 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1058.116921][T31818] loop2: detected capacity change from 0 to 4 [ 1058.130595][T31818] Dev loop2: unable to read RDB block 4 [ 1058.138769][T31818] loop2: unable to read partition table [ 1058.143522][T31818] loop2: partition table beyond EOD, truncated [ 1058.151407][T31818] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000", 0x49, 0x400}], 0x0, &(0x7f0000002740)) [ 1058.256208][T31825] loop2: detected capacity change from 0 to 4 [ 1058.264219][T31825] Dev loop2: unable to read RDB block 4 [ 1058.269808][T31825] loop2: unable to read partition table [ 1058.274620][T31825] loop2: partition table beyond EOD, truncated [ 1058.280994][T31825] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000", 0x49, 0x400}], 0x0, &(0x7f0000002740)) [ 1058.408253][T23597] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1058.408884][T25530] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1058.409418][T31827] loop2: detected capacity change from 0 to 4 [ 1058.411821][T12365] Dev loop2: unable to read RDB block 4 [ 1058.411849][T12365] loop2: unable to read partition table [ 1058.411948][T12365] loop2: partition table beyond EOD, truncated [ 1058.425434][T31827] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f00000000000000", 0x4b, 0x400}], 0x0, &(0x7f0000002740)) [ 1058.523181][T31829] loop2: detected capacity change from 0 to 4 [ 1058.526222][T12365] blk_print_req_error: 26 callbacks suppressed [ 1058.526242][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1058.541340][T12365] buffer_io_error: 26 callbacks suppressed [ 1058.541355][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1058.554030][T12365] Dev loop2: unable to read RDB block 4 [ 1058.559019][T12365] loop2: unable to read partition table [ 1058.562590][T12365] loop2: partition table beyond EOD, truncated [ 1058.567312][T31829] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f00000000000000", 0x4b, 0x400}], 0x0, &(0x7f0000002740)) [ 1058.613175][T31831] loop2: detected capacity change from 0 to 4 [ 1058.625772][T31831] Dev loop2: unable to read RDB block 4 [ 1058.629676][T31831] loop2: unable to read partition table [ 1058.633443][T31831] loop2: partition table beyond EOD, truncated [ 1058.644832][T31831] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1058.808745][T23597] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1058.820950][T23597] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1058.830164][T23597] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1058.838464][T25530] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1058.840699][T23597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.848700][T25530] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1058.848759][T25530] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1058.868693][T31822] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1058.872170][T25530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.908713][T31821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1060.503062][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.509547][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.552716][T27261] usb 5-1: USB disconnect, device number 27 [ 1060.563025][ T3761] usb 8-1: USB disconnect, device number 38 03:14:18 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f00000000000000", 0x4b, 0x400}], 0x0, &(0x7f0000002740)) [ 1061.106596][T31835] loop2: detected capacity change from 0 to 4 [ 1061.113708][T31835] Dev loop2: unable to read RDB block 4 [ 1061.118335][T31835] loop2: unable to read partition table [ 1061.122833][T31835] loop2: partition table beyond EOD, truncated 03:14:18 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1061.138502][T31835] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000000000", 0x4c, 0x400}], 0x0, &(0x7f0000002740)) [ 1061.271597][T31843] loop2: detected capacity change from 0 to 4 [ 1061.280211][T31843] Dev loop2: unable to read RDB block 4 [ 1061.285883][T31843] loop2: unable to read partition table [ 1061.291696][T31843] loop2: partition table beyond EOD, truncated [ 1061.300631][T31843] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000000000", 0x4c, 0x400}], 0x0, &(0x7f0000002740)) [ 1061.418325][T25534] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1061.436118][T25530] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1061.454124][T31845] loop2: detected capacity change from 0 to 4 [ 1061.465011][T31845] Dev loop2: unable to read RDB block 4 [ 1061.469446][T31845] loop2: unable to read partition table [ 1061.473268][T31845] loop2: partition table beyond EOD, truncated [ 1061.478889][T31845] EXT4-fs (loop2): Can't read superblock on 2nd try 03:14:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f0000000000000000", 0x4c, 0x400}], 0x0, &(0x7f0000002740)) [ 1061.561111][T31849] loop2: detected capacity change from 0 to 4 [ 1061.567882][T31849] Dev loop2: unable to read RDB block 4 [ 1061.572562][T31849] loop2: unable to read partition table [ 1061.577418][T31849] loop2: partition table beyond EOD, truncated [ 1061.582692][T31849] EXT4-fs (loop2): Can't read superblock on 2nd try [ 1061.808476][T25534] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.817108][T25534] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1061.824354][T25534] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1061.832148][T25530] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.839995][T25530] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1061.847835][T25530] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1061.854377][T25534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.862476][T25530] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.878650][T31838] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1061.888705][T31840] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1063.721540][T25530] usb 8-1: USB disconnect, device number 39 [ 1063.737265][T24995] usb 5-1: USB disconnect, device number 28 03:14:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d}], 0x0, &(0x7f0000002740)) 03:14:21 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 03:14:21 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1064.313836][T31859] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d}], 0x0, &(0x7f0000002740)) [ 1064.435487][T31863] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d}], 0x0, &(0x7f0000002740)) [ 1064.534794][T31865] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 03:14:21 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, 0x0) [ 1064.578443][T23597] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1064.579431][T27261] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1064.616991][T31867] loop2: detected capacity change from 0 to 4 [ 1064.629112][ T3132] Dev loop2: unable to read RDB block 4 03:14:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, 0x0) [ 1064.634099][ T3132] loop2: unable to read partition table [ 1064.640360][ T3132] loop2: partition table beyond EOD, truncated [ 1064.699134][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1064.718833][T31869] loop2: detected capacity change from 0 to 4 [ 1064.721703][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1064.730946][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1064.736382][T12365] Dev loop2: unable to read RDB block 4 [ 1064.741283][T12365] loop2: unable to read partition table [ 1064.745775][T12365] loop2: partition table beyond EOD, truncated 03:14:22 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000540)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001", 0x4d, 0x400}], 0x0, 0x0) [ 1064.864555][T31871] loop2: detected capacity change from 0 to 4 [ 1064.867910][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1064.883398][T12365] Dev loop2: unable to read RDB block 4 [ 1064.887782][T12365] loop2: unable to read partition table [ 1064.892832][T12365] loop2: partition table beyond EOD, truncated [ 1064.938662][T23597] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1064.949355][T23597] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1064.959552][T23597] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1064.965897][T23597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.989081][T31860] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1065.008840][T27261] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1065.019621][T27261] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1065.026487][T27261] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1065.033099][T27261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.058768][T31855] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1066.862510][T27262] usb 8-1: USB disconnect, device number 40 [ 1066.863046][T24995] usb 5-1: USB disconnect, device number 29 03:14:24 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:24 executing program 2: pipe2$9p(0x0, 0x858c0) 03:14:24 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:24 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:14:24 executing program 2: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 03:14:24 executing program 2: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 03:14:24 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0xa8, 0x0, 0x0, "c26d84ea6faef114f6a2fb045967a61118a676992ca3ec83b0b4cc2450e07ba030139fab8b692543cd1bbf7845bfc55ef751b718a8e1089dc89368b4c22d45694aa7cb4b2a42e43bde1c11fa7d5f2050c64672632e99d73095825dd888d54bcf77c7d83d8e6265b09b224a4862fd6409a483dcb0627b2c3bf36f37f7971e54a39726a7819da1a052c48b3453368d8f20a9"}, {0x10}, {0x90, 0x0, 0x0, "0c619d4d07a6c48051131028e7f4ae69bc93810573bdef6a012989ad1f0da4ad0ce5b5e26d25cd93e417bb2c0b0517f4ee478278e5577aaf423eb9fb322a08f8a9ffcfc0a9a03c2e5d9e1b5801b967534f21dc3694b0050b925061b048a415cba01fb4418f60bbc87667ba2722b0703775f851d143e1249fff"}, {0xb0, 0x0, 0x0, "e826c358ab56b33f6bb6bc8cb7cae542ef6591ffea6ba4b0965811712ea26f81a0d7e27ef28c91f32e467311b125a895d81a5e99fea93cc319b53ee4999065d5315f6b8884dd0e09cac1be6e8507a110d42af3831b5d3d13e02ab10939c1682d635ec1796b49379eb29c04cf4a32334cab4562aaf02b58ffaafdcac1c5c0dbc6753dcb3b0867672d16addfcb1c6640ab507f60c967fdbb1025"}, {0x40, 0x0, 0x0, "5487ada68ef2b86c9f0150f3491f18dde5521be385508b0cd6f28d90862a460e81e5bab8b7a8078c9d"}, {0xb8, 0x0, 0x0, "3d6d16f35c1ea99534af8bb96a71668b59098886e017cf98735486787694749c34fc52ad6741f5a399322823601344e9b013c33d17e8cb595bba987446789908c1519226fe27998b6d7ceed3deb28cdf2f92ebd920ed91ea5ad5578bb828bed439c59d0e4ecace8da394556ef7383cf13f57a239a3445654c88f1fb5c03d1f4af1dcc7bb16831200412593fcb0040c9370479aa0967d44b4fdd2ecca15bd9562e6"}, {0xd18, 0x0, 0x0, "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"}], 0x1008}, 0x0) 03:14:24 executing program 2: syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x5fd}], 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='shortname=win95,time_offset=0']) [ 1067.613412][T31893] loop2: detected capacity change from 0 to 5 03:14:25 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1067.623043][T31893] Dev loop2: unable to read RDB block 5 [ 1067.632708][T31893] loop2: unable to read partition table [ 1067.636982][T31893] loop2: partition table beyond EOD, truncated [ 1067.646880][T31893] FAT-fs (loop2): Directory bread(block 5) failed [ 1067.652119][T31893] FAT-fs (loop2): Directory bread(block 6) failed 03:14:25 executing program 2: io_setup(0xffff, &(0x7f0000000040)=0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x120000, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "b679462b55865e2155f9a8a64d7d4212ef4410cdaba92a2cdc2439794fddae7627d3b546ea73abac15d45aaed745004a63dc7bf060835ff1f7ddb3653c0d866a"}, 0x48, 0xfffffffffffffffb) io_submit(r0, 0x3, &(0x7f0000000740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x20, 0xffffffffffffffff, &(0x7f0000000080)="b8e08008c0170afcf1f7f21d352deeff6c88c7d62a6b38a4d5d483d98be0ba338e7365a47900839578750952045eb93ca2934cdf256516ec74144392fbcac909b3b46dbc96816d1f88f0363db879377070133db0d2e3368b134d271cb9bb47a62e10d07d29f086fcad9b1f0d75b93ba6b0455f9a4987ce1329bb8589ff871cfbd2dc177cefa2ce51d0a830", 0x8b, 0x4c6}, 0x0, 0x0]) [ 1067.728310][T24995] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1067.738338][T25530] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1068.088494][T24995] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1068.097550][T24995] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1068.106347][T24995] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1068.113897][T24995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.139164][T31882] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1068.159003][T25530] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1068.167374][T25530] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1068.175685][T25530] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1068.182263][T25530] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.208597][T31881] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1068.361273][T25530] usb 5-1: USB disconnect, device number 30 [ 1068.439035][T24995] usb 8-1: USB disconnect, device number 41 03:14:26 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:26 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f00000005c0), &(0x7f0000300000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 03:14:26 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:14:26 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1069.023005][ T39] audit: type=1400 audit(1661310866.377:645): avc: denied { execute } for pid=31902 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=115381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 03:14:26 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:26 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f00000005c0), &(0x7f0000300000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 03:14:26 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:26 executing program 2: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000004c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000a40)=@IORING_OP_WRITE_FIXED, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f000004e000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1c6a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000540)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_RECV=@use_registered_buffer, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x184, &(0x7f00000005c0), &(0x7f0000300000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000400)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE, 0x0) io_uring_enter(r0, 0x63f4, 0x0, 0x0, 0x0, 0x0) 03:14:26 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:26 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc018620c, &(0x7f00000000c0)) [ 1069.262754][T23597] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1069.274548][ T39] audit: type=1400 audit(1661310866.617:646): avc: denied { set_context_mgr } for pid=31923 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1069.278786][T31924] binder: 31923:31924 ioctl c018620c 200000c0 returned -22 [ 1069.628327][T23597] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1069.638489][T23597] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1069.648414][T23597] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1069.657810][T23597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.689300][T31904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1069.912107][T27262] usb 5-1: USB disconnect, device number 31 03:14:27 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:14:27 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc018620c, &(0x7f00000000c0)) 03:14:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:27 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1070.451958][T31931] binder: 31928:31931 ioctl c018620c 200000c0 returned -22 03:14:27 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:27 executing program 2: mlockall(0x7) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 03:14:27 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r0 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r3 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:27 executing program 2: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) [ 1070.742822][T27262] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1071.138452][T27262] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1071.146331][T27262] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1071.156961][T27262] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1071.165792][T27262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.192017][T31933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1071.417327][T27262] usb 5-1: USB disconnect, device number 32 03:14:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:14:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:29 executing program 3: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:29 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:29 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:29 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:29 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:14:29 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1072.778376][T25534] usb 8-1: new high-speed USB device number 42 using dummy_hcd 03:14:30 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x30) [ 1072.970341][T25534] usb 8-1: device descriptor read/64, error 18 03:14:30 executing program 2: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) 03:14:30 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000900)=""/208, 0x2e, 0xd0, 0x1}, 0x20) 03:14:30 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1073.240920][T25534] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1073.448416][T25534] usb 8-1: device descriptor read/64, error 18 [ 1073.568495][T25534] usb usb8-port1: attempt power cycle [ 1073.988540][T25534] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1074.158451][T25534] usb 8-1: device descriptor read/8, error -61 [ 1074.428399][T25534] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1074.608434][T25534] usb 8-1: device descriptor read/8, error -61 [ 1074.732231][T25534] usb usb8-port1: unable to enumerate USB device 03:14:32 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:32 executing program 0: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:32 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:32 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1075.978392][ T3761] usb 8-1: new high-speed USB device number 46 using dummy_hcd 03:14:33 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1076.168360][ T3761] usb 8-1: device descriptor read/64, error 18 03:14:33 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1076.338298][T27262] usb 5-1: new high-speed USB device number 33 using dummy_hcd 03:14:33 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1076.452514][ T3761] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1076.528515][T27262] usb 5-1: device descriptor read/64, error 18 03:14:33 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1076.668361][ T3761] usb 8-1: device descriptor read/64, error 18 [ 1076.788479][ T3761] usb usb8-port1: attempt power cycle [ 1076.809360][T27262] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1077.018305][T27262] usb 5-1: device descriptor read/64, error 18 [ 1077.142389][T27262] usb usb5-port1: attempt power cycle [ 1077.198360][ T3761] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1077.368941][ T3761] usb 8-1: device descriptor read/8, error -61 [ 1077.568355][T27262] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1077.658363][ T3761] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1077.739580][T27262] usb 5-1: device descriptor read/8, error -61 [ 1077.828630][ T3761] usb 8-1: device descriptor read/8, error -61 [ 1077.948771][ T3761] usb usb8-port1: unable to enumerate USB device [ 1078.018399][T27262] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1078.198690][T27262] usb 5-1: device descriptor read/8, error -61 [ 1078.319102][T27262] usb usb5-port1: unable to enumerate USB device 03:14:35 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:35 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:35 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1078.878431][T27452] usb 7-1: new high-speed USB device number 40 using dummy_hcd 03:14:36 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1079.068402][ T3761] usb 8-1: new high-speed USB device number 50 using dummy_hcd 03:14:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1079.278235][ T3761] usb 8-1: device descriptor read/64, error 18 [ 1079.298823][T27452] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1079.306894][T27452] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1079.314924][T27452] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1079.322223][T27452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.358928][T32016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1079.538462][ T4799] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1079.568308][ T3761] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1079.748244][ T4799] usb 5-1: device descriptor read/64, error 18 [ 1079.758428][ T3761] usb 8-1: device descriptor read/64, error 18 [ 1079.888351][ T3761] usb usb8-port1: attempt power cycle [ 1080.034835][ T4799] usb 5-1: new high-speed USB device number 38 using dummy_hcd 03:14:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1080.238287][ T4799] usb 5-1: device descriptor read/64, error 18 [ 1080.328487][ T3761] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1080.366256][ T4799] usb usb5-port1: attempt power cycle [ 1080.518546][ T3761] usb 8-1: device descriptor read/8, error -61 [ 1080.798211][ T3761] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1080.858349][ T4799] usb 5-1: new high-speed USB device number 39 using dummy_hcd 03:14:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1080.962431][T25530] usb 7-1: USB disconnect, device number 40 [ 1081.018596][ T3761] usb 8-1: device descriptor read/8, error -61 [ 1081.028886][ T4799] usb 5-1: device descriptor read/8, error -61 [ 1081.151985][ T3761] usb usb8-port1: unable to enumerate USB device [ 1081.308982][ T4799] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1081.527287][ T4799] usb 5-1: device descriptor read/8, error -61 03:14:38 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1081.651932][ T4799] usb usb5-port1: unable to enumerate USB device 03:14:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:39 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1082.088453][T27261] usb 8-1: new high-speed USB device number 54 using dummy_hcd 03:14:39 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1082.288394][T27261] usb 8-1: device descriptor read/64, error 18 03:14:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1082.388829][T25530] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1082.568456][T27261] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1082.588397][ T4799] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1082.758356][T27261] usb 8-1: device descriptor read/64, error 18 [ 1082.758489][T25530] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1082.773111][T25530] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1082.779560][ T4799] usb 5-1: device descriptor read/64, error 18 [ 1082.783497][T25530] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1082.790193][T25530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.820517][T32047] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1082.878721][T27261] usb usb8-port1: attempt power cycle [ 1083.048867][ T4799] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1083.248208][ T4799] usb 5-1: device descriptor read/64, error 18 [ 1083.298559][T27261] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1083.369803][ T4799] usb usb5-port1: attempt power cycle [ 1083.468910][T27261] usb 8-1: device descriptor read/8, error -61 [ 1083.748769][T27261] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1083.789079][ T4799] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1083.918830][T27261] usb 8-1: device descriptor read/8, error -61 [ 1083.989004][ T4799] usb 5-1: device descriptor read/8, error -61 [ 1084.049815][T27261] usb usb8-port1: unable to enumerate USB device [ 1084.268406][ T4799] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1084.379094][ T29] usb 7-1: USB disconnect, device number 41 [ 1084.469596][ T4799] usb 5-1: device descriptor read/8, error -61 [ 1084.598646][ T4799] usb usb5-port1: unable to enumerate USB device 03:14:42 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x0, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:42 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:42 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1085.168433][T27452] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1085.238507][ T29] usb 7-1: new high-speed USB device number 42 using dummy_hcd 03:14:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1085.368336][T27452] usb 8-1: device descriptor read/64, error 18 03:14:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1085.598393][T27261] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1085.629509][ T29] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1085.638055][ T29] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1085.645968][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1085.648409][T27452] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1085.652443][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.678711][T32068] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1085.798354][T27261] usb 5-1: device descriptor read/64, error 18 [ 1085.838367][T27452] usb 8-1: device descriptor read/64, error 18 [ 1085.962468][T27452] usb usb8-port1: attempt power cycle [ 1086.068425][T27261] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1086.268617][T27261] usb 5-1: device descriptor read/64, error 18 [ 1086.373536][T27452] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1086.388927][T27261] usb usb5-port1: attempt power cycle [ 1086.548641][T27452] usb 8-1: device descriptor read/8, error -61 [ 1086.818486][T27452] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1086.833144][T27261] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1087.009167][T27452] usb 8-1: device descriptor read/8, error -61 [ 1087.018596][T27261] usb 5-1: device descriptor read/8, error -61 [ 1087.128818][T27452] usb usb8-port1: unable to enumerate USB device [ 1087.243967][ T3761] usb 7-1: USB disconnect, device number 42 [ 1087.299273][T27261] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1087.498779][T27261] usb 5-1: device descriptor read/8, error -61 [ 1087.628502][T27261] usb usb5-port1: unable to enumerate USB device 03:14:45 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:45 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1088.078571][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd 03:14:45 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1088.188505][T25530] usb 8-1: new high-speed USB device number 62 using dummy_hcd 03:14:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1088.378305][T25530] usb 8-1: device descriptor read/64, error 18 03:14:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1088.458439][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1088.466732][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1088.478645][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1088.486101][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.528877][T32087] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1088.628695][T27452] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1088.668578][T25530] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1088.828700][T27452] usb 5-1: device descriptor read/64, error 18 [ 1088.858364][T25530] usb 8-1: device descriptor read/64, error 18 [ 1088.978469][T25530] usb usb8-port1: attempt power cycle [ 1089.098618][T27452] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1089.288652][T27452] usb 5-1: device descriptor read/64, error 18 [ 1089.388359][T25530] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1089.411268][T27452] usb usb5-port1: attempt power cycle [ 1089.588592][T25530] usb 8-1: device descriptor read/8, error -61 [ 1089.828490][T27452] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1089.858390][T25530] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1090.008661][T27452] usb 5-1: device descriptor read/8, error -61 [ 1090.049027][T25530] usb 8-1: device descriptor read/8, error -61 [ 1090.130597][ T4799] usb 7-1: USB disconnect, device number 43 [ 1090.178492][T25530] usb usb8-port1: unable to enumerate USB device [ 1090.278466][T27452] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1090.464909][T27452] usb 5-1: device descriptor read/8, error -61 [ 1090.589019][T27452] usb usb5-port1: unable to enumerate USB device 03:14:48 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:48 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:14:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1091.028418][ T4799] usb 7-1: new high-speed USB device number 44 using dummy_hcd 03:14:48 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1091.218479][ T3758] usb 8-1: new high-speed USB device number 66 using dummy_hcd 03:14:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1091.429030][ T4799] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1091.438820][ T4799] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1091.447617][ T4799] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.457480][ T4799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.489206][T32107] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1091.618601][ T3758] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.625977][ T3758] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1091.646719][ T3758] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.658462][ T3758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.668766][T25530] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1091.711611][T23597] usb 7-1: USB disconnect, device number 44 03:14:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1091.878269][T25530] usb 5-1: device descriptor read/64, error 18 [ 1091.922739][ T3758] usb 8-1: USB disconnect, device number 66 [ 1092.168240][T25530] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1092.378342][T25530] usb 5-1: device descriptor read/64, error 18 03:14:49 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:14:49 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1092.498610][T25530] usb usb5-port1: attempt power cycle [ 1092.748328][ T29] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1092.752438][ T3758] usb 7-1: new high-speed USB device number 45 using dummy_hcd 03:14:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1092.928371][T25530] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1093.109578][T25530] usb 5-1: device descriptor read/8, error -61 [ 1093.138994][ T29] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.147664][ T29] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1093.156069][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1093.165063][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.178589][ T3758] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1093.206467][ T3758] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1093.231667][ T3758] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1093.241592][ T3758] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.269183][T32127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1093.378673][T25530] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1093.427137][T27452] usb 8-1: USB disconnect, device number 67 [ 1093.495032][ T3761] usb 7-1: USB disconnect, device number 45 [ 1093.548485][T25530] usb 5-1: device descriptor read/8, error -61 [ 1093.668529][T25530] usb usb5-port1: unable to enumerate USB device 03:14:51 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:51 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) [ 1094.678812][T23597] usb 5-1: new high-speed USB device number 57 using dummy_hcd 03:14:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1095.088608][T23597] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.098037][T23597] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1095.105605][T23597] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1095.111904][T23597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.509564][T27261] usb 5-1: USB disconnect, device number 57 03:14:52 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1095.848327][T25530] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1095.898428][ T3761] usb 7-1: new high-speed USB device number 46 using dummy_hcd 03:14:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1096.048384][T25530] usb 8-1: device descriptor read/64, error 18 03:14:53 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1096.269242][ T3761] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1096.276437][ T3761] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1096.286648][ T3761] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1096.292959][ T3761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.318288][T25530] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1096.329850][T32136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1096.358327][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1096.528391][T25530] usb 8-1: device descriptor read/64, error 18 03:14:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1096.553596][T27452] usb 7-1: USB disconnect, device number 46 [ 1096.648494][T25530] usb usb8-port1: attempt power cycle [ 1096.758359][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.766706][ T24] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1096.791122][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1096.797454][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:14:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1097.067309][ T29] usb 5-1: USB disconnect, device number 58 [ 1097.078874][T25530] usb 8-1: new high-speed USB device number 70 using dummy_hcd 03:14:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:54 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1097.288570][T25530] usb 8-1: device descriptor read/8, error -61 [ 1097.558491][T25530] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1097.748494][T25530] usb 8-1: device descriptor read/8, error -61 [ 1097.868584][T25530] usb usb8-port1: unable to enumerate USB device 03:14:55 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:55 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:55 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1098.878618][T27262] usb 5-1: new high-speed USB device number 59 using dummy_hcd 03:14:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1099.068326][ T15] usb 8-1: new high-speed USB device number 72 using dummy_hcd 03:14:56 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1099.258463][ T15] usb 8-1: device descriptor read/64, error 18 [ 1099.268392][T27262] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.275890][T27262] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1099.288416][T27262] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1099.296606][T27262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:14:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1099.539152][ T15] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1099.564241][T23597] usb 5-1: USB disconnect, device number 59 03:14:57 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1099.728540][ T15] usb 8-1: device descriptor read/64, error 18 [ 1099.848790][ T15] usb usb8-port1: attempt power cycle [ 1100.268435][ T15] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1100.438488][ T15] usb 8-1: device descriptor read/8, error -61 [ 1100.708504][ T15] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1100.881260][ T15] usb 8-1: device descriptor read/8, error -61 [ 1100.998401][ T15] usb usb8-port1: unable to enumerate USB device 03:14:59 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:14:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:14:59 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:14:59 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1101.938979][ T29] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1101.948464][ T24] usb 5-1: new high-speed USB device number 60 using dummy_hcd 03:14:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1102.138421][T27262] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1102.158318][ T29] usb 7-1: device descriptor read/64, error 18 [ 1102.348341][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.348525][T27262] usb 8-1: device descriptor read/64, error 18 [ 1102.357734][ T24] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1102.374421][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.384212][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1102.391701][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.448320][ T29] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1102.475797][ T24] snd-usb-audio: probe of 5-1:27.0 failed with error -2 03:14:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1102.638317][ T29] usb 7-1: device descriptor read/64, error 18 [ 1102.659662][T27262] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1102.666773][ T15] usb 5-1: USB disconnect, device number 60 [ 1102.768401][ T29] usb usb7-port1: attempt power cycle [ 1102.858316][T27262] usb 8-1: device descriptor read/64, error 18 03:15:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(0x0, 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1102.978477][T27262] usb usb8-port1: attempt power cycle 03:15:00 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1103.188376][ T29] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1103.380153][ T29] usb 7-1: device descriptor read/8, error -61 [ 1103.398290][T27262] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1103.488310][ T15] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1103.578771][T27262] usb 8-1: device descriptor read/8, error -61 [ 1103.648324][ T29] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1103.848617][ T29] usb 7-1: device descriptor read/8, error -61 [ 1103.858652][T27262] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1103.868792][ T15] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.875782][ T15] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1103.883332][ T15] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.892136][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1103.898523][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.951035][ T15] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1103.979144][ T29] usb usb7-port1: unable to enumerate USB device [ 1104.058464][T27262] usb 8-1: device descriptor read/8, error -61 [ 1104.170212][T24995] usb 5-1: USB disconnect, device number 61 [ 1104.198469][T27262] usb usb8-port1: unable to enumerate USB device 03:15:02 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(0x0, 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:02 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:02 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1104.968290][T27262] usb 5-1: new high-speed USB device number 62 using dummy_hcd 03:15:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(0x0, 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1105.148332][ T29] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1105.154144][T25530] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1105.348576][T25530] usb 7-1: device descriptor read/64, error 18 [ 1105.358447][T27262] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.370416][T27262] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1105.380573][T27262] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1105.391462][T27262] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1105.397449][T27262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.438606][ T29] usb 8-1: no configurations [ 1105.442719][ T29] usb 8-1: can't read configurations, error -22 [ 1105.456439][T27262] snd-usb-audio: probe of 5-1:27.0 failed with error -2 03:15:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1105.606283][ T29] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1105.618594][T25530] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1105.661364][ T4799] usb 5-1: USB disconnect, device number 62 [ 1105.799527][T25530] usb 7-1: device descriptor read/64, error 18 [ 1105.898878][ T29] usb 8-1: no configurations [ 1105.902593][ T29] usb 8-1: can't read configurations, error -22 [ 1105.909184][ T29] usb usb8-port1: attempt power cycle [ 1105.918880][T25530] usb usb7-port1: attempt power cycle 03:15:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:03 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1106.328374][ T29] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1106.336287][T25530] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1106.459430][ T29] usb 8-1: no configurations [ 1106.463750][ T29] usb 8-1: can't read configurations, error -22 [ 1106.488345][ T4799] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1106.518549][T25530] usb 7-1: device descriptor read/8, error -61 [ 1106.618348][ T29] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1106.748522][ T29] usb 8-1: no configurations [ 1106.751955][ T29] usb 8-1: can't read configurations, error -22 [ 1106.757305][ T29] usb usb8-port1: unable to enumerate USB device [ 1106.788596][T25530] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1106.851683][ T4799] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.861930][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1106.870991][ T4799] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1106.881633][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1106.888454][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.935309][ T4799] usb 5-1: invalid MIDI out EP 0 [ 1106.940546][ T4799] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1106.958739][T25530] usb 7-1: device descriptor read/8, error -61 [ 1107.078558][T25530] usb usb7-port1: unable to enumerate USB device [ 1107.136744][T27261] usb 5-1: USB disconnect, device number 63 03:15:05 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:05 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:05 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1107.988287][ T4799] usb 5-1: new high-speed USB device number 64 using dummy_hcd 03:15:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1108.198426][T27261] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1108.208313][ T24] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1108.348565][ T4799] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.357554][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1108.365389][ T4799] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.374288][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1108.380187][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.428262][T27261] usb 7-1: device descriptor read/64, error 18 [ 1108.451529][ T4799] usb 5-1: invalid MIDI out EP 0 [ 1108.455970][ T4799] snd-usb-audio: probe of 5-1:27.0 failed with error -22 03:15:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1108.508462][ T24] usb 8-1: no configurations [ 1108.511781][ T24] usb 8-1: can't read configurations, error -22 [ 1108.649664][ T4799] usb 5-1: USB disconnect, device number 64 [ 1108.678435][ T24] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1108.708725][T27261] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1108.918377][T27261] usb 7-1: device descriptor read/64, error 18 03:15:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1108.959692][ T24] usb 8-1: no configurations [ 1108.964323][ T24] usb 8-1: can't read configurations, error -22 [ 1108.972111][ T24] usb usb8-port1: attempt power cycle [ 1109.039761][T27261] usb usb7-port1: attempt power cycle 03:15:06 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1109.379494][ T24] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1109.468331][ T4799] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1109.468345][T27261] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1109.528384][ T24] usb 8-1: no configurations [ 1109.531501][ T24] usb 8-1: can't read configurations, error -22 [ 1109.658504][T27261] usb 7-1: device descriptor read/8, error -61 [ 1109.678779][ T24] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1109.808984][ T24] usb 8-1: no configurations [ 1109.813163][ T24] usb 8-1: can't read configurations, error -22 [ 1109.819966][ T24] usb usb8-port1: unable to enumerate USB device [ 1109.848346][ T4799] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.855819][ T4799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1109.863344][ T4799] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1109.871666][ T4799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1109.876654][ T4799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.921313][ T4799] usb 5-1: invalid MIDI out EP 0 [ 1109.925210][ T4799] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1109.938377][T27261] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1110.108669][T27261] usb 7-1: device descriptor read/8, error -61 [ 1110.126132][T23597] usb 5-1: USB disconnect, device number 65 [ 1110.228430][T27261] usb usb7-port1: unable to enumerate USB device 03:15:08 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:08 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:08 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1111.030739][ T15] usb 5-1: new high-speed USB device number 66 using dummy_hcd 03:15:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1111.218390][T23597] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1111.220427][T24995] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1111.391064][ T15] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1111.400700][ T15] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1111.408357][T23597] usb 7-1: device descriptor read/64, error 18 [ 1111.413719][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1111.420941][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.474346][ T15] usb 5-1: invalid MIDI out EP 0 [ 1111.479126][ T15] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1111.539350][T24995] usb 8-1: no configurations [ 1111.543197][T24995] usb 8-1: can't read configurations, error -22 03:15:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1111.677293][T27452] usb 5-1: USB disconnect, device number 66 [ 1111.698337][T24995] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1111.698542][T23597] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1111.898515][T23597] usb 7-1: device descriptor read/64, error 18 03:15:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1112.008542][T24995] usb 8-1: no configurations [ 1112.013962][T24995] usb 8-1: can't read configurations, error -22 [ 1112.018877][T23597] usb usb7-port1: attempt power cycle [ 1112.021447][T24995] usb usb8-port1: attempt power cycle 03:15:09 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1112.438260][T24995] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1112.444471][T23597] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1112.488369][T27452] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1112.579464][T24995] usb 8-1: no configurations [ 1112.586005][T24995] usb 8-1: can't read configurations, error -22 [ 1112.629095][T23597] usb 7-1: device descriptor read/8, error -61 [ 1112.743481][T24995] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 1112.858644][T27452] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1112.867747][T27452] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1112.875429][T27452] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1112.881928][T24995] usb 8-1: no configurations [ 1112.885282][T24995] usb 8-1: can't read configurations, error -22 [ 1112.889141][T24995] usb usb8-port1: unable to enumerate USB device [ 1112.893839][T27452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.909079][T23597] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1112.956618][T27452] usb 5-1: invalid MIDI out EP 0 [ 1112.960835][T27452] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1113.098674][T23597] usb 7-1: device descriptor read/8, error -61 [ 1113.160872][ T3758] usb 5-1: USB disconnect, device number 67 [ 1113.219227][T23597] usb usb7-port1: unable to enumerate USB device 03:15:11 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:11 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:11 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1114.078626][T24995] usb 5-1: new high-speed USB device number 68 using dummy_hcd 03:15:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1114.248388][ T15] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1114.268268][ T4799] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1114.458260][ T4799] usb 7-1: device descriptor read/64, error 18 [ 1114.468797][T24995] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1114.479107][T24995] usb 5-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1114.487773][T24995] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1114.495719][T24995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.542119][T24995] usb 5-1: invalid MIDI out EP 0 [ 1114.545574][T24995] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1114.648580][ T15] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1114.653758][ T15] usb 8-1: can't read configurations, error -61 03:15:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1114.738404][ T4799] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1114.756771][T23597] usb 5-1: USB disconnect, device number 68 [ 1114.808365][ T15] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1114.978399][ T4799] usb 7-1: device descriptor read/64, error 18 03:15:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1115.098556][ T4799] usb usb7-port1: attempt power cycle [ 1115.248455][ T15] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1115.255278][ T15] usb 8-1: can't read configurations, error -61 [ 1115.262205][ T15] usb usb8-port1: attempt power cycle 03:15:12 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1115.518381][ T4799] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1115.588300][T27261] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1115.688546][ T15] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1115.699399][ T4799] usb 7-1: device descriptor read/8, error -61 [ 1115.959186][ T15] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1115.967218][ T15] usb 8-1: can't read configurations, error -61 [ 1115.968468][ T4799] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1115.972258][T27261] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1115.972304][T27261] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1115.972331][T27261] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1115.972372][T27261] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1115.972401][T27261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.023202][T27261] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 1116.118343][ T15] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1116.208438][ T4799] usb 7-1: device descriptor read/8, error -61 [ 1116.223207][T23597] usb 5-1: USB disconnect, device number 69 [ 1116.338959][ T4799] usb usb7-port1: unable to enumerate USB device [ 1116.388548][ T15] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1116.395513][ T15] usb 8-1: can't read configurations, error -61 [ 1116.406020][ T15] usb usb8-port1: unable to enumerate USB device 03:15:14 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:14 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:14 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1117.128436][T23597] usb 5-1: new high-speed USB device number 70 using dummy_hcd 03:15:14 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1117.298647][T27452] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1117.339231][ T15] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1117.528631][T23597] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1117.539215][ T15] usb 7-1: device descriptor read/64, error 18 [ 1117.551659][T23597] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1117.559383][T23597] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1117.567165][T23597] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1117.574237][T23597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.627667][T23597] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 1117.758579][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1117.764479][T27452] usb 8-1: can't read configurations, error -61 03:15:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1117.808452][ T15] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1117.837494][T23597] usb 5-1: USB disconnect, device number 70 [ 1117.919706][T27452] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1118.018426][ T15] usb 7-1: device descriptor read/64, error 18 [ 1118.138392][ T15] usb usb7-port1: attempt power cycle 03:15:15 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1118.318413][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1118.325524][T27452] usb 8-1: can't read configurations, error -61 [ 1118.334708][T27452] usb usb8-port1: attempt power cycle 03:15:15 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1118.548385][ T15] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1118.638352][T27262] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1118.718680][ T15] usb 7-1: device descriptor read/8, error -61 [ 1118.758837][T27452] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1118.998330][ T15] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1119.038752][T27262] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1119.039446][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1119.047827][T27262] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1119.053273][T27452] usb 8-1: can't read configurations, error -61 [ 1119.060170][T27262] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1119.060208][T27262] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1119.060225][T27262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.115952][T27262] snd-usb-audio: probe of 5-1:27.0 failed with error -12 [ 1119.168523][ T15] usb 7-1: device descriptor read/8, error -61 [ 1119.238339][T27452] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1119.288569][ T15] usb usb7-port1: unable to enumerate USB device [ 1119.319902][ T24] usb 5-1: USB disconnect, device number 71 [ 1119.498688][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1119.505624][T27452] usb 8-1: can't read configurations, error -61 [ 1119.515141][T27452] usb usb8-port1: unable to enumerate USB device 03:15:17 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:17 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:17 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1120.138499][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd 03:15:17 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1120.348325][ T29] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1120.364418][T27452] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1120.548481][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1120.557775][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1120.571373][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1120.597614][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.628974][T32318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1120.718612][ T29] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.749036][ T29] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1120.755625][ T29] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1120.763437][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.788724][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1120.795299][T27452] usb 8-1: can't read configurations, error -61 [ 1120.867340][ T29] usb 5-1: USB disconnect, device number 72 03:15:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1120.958462][T27452] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1121.024850][ T4799] usb 7-1: USB disconnect, device number 71 03:15:18 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:18 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1121.398607][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1121.404707][T27452] usb 8-1: can't read configurations, error -61 [ 1121.411373][T27452] usb usb8-port1: attempt power cycle [ 1121.664840][ T15] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1121.839859][T27452] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1121.946319][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.952478][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.038832][ T15] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1122.047257][ T15] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1122.056864][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1122.063159][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.099015][T32334] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1122.128469][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1122.134537][T27452] usb 8-1: can't read configurations, error -61 [ 1122.289473][T27452] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1122.337739][T24995] usb 5-1: USB disconnect, device number 73 [ 1122.558519][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1122.563305][T27452] usb 8-1: can't read configurations, error -61 [ 1122.570645][T27452] usb usb8-port1: unable to enumerate USB device 03:15:20 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:20 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:20 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:20 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1123.191089][T24995] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1123.196474][T27452] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1123.358265][ T3758] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1123.578511][T27452] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.587371][T24995] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1123.598296][T27452] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1123.605145][T27452] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.611965][T24995] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1123.621413][T27452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.627560][T24995] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.634845][T24995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.658986][T32341] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 03:15:21 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 1123.738401][ T3758] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.747546][ T3758] usb 8-1: config 0 has no interfaces? [ 1123.757785][ T3758] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.796749][ T3758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.819049][ T3758] usb 8-1: config 0 descriptor?? [ 1123.884424][ T15] usb 5-1: USB disconnect, device number 74 03:15:21 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 03:15:22 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1125.916232][T23597] usb 8-1: USB disconnect, device number 104 [ 1125.926816][ T29] usb 7-1: USB disconnect, device number 72 [ 1126.308363][ T15] usb 5-1: new high-speed USB device number 75 using dummy_hcd 03:15:23 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:23 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:23 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r5 = syz_open_dev$vbi(&(0x7f0000000300), 0x2, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@nfc, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1126.708577][ T15] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1126.716656][ T15] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1126.718369][T27261] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1126.725447][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1126.731388][T24995] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1126.738902][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.778942][T32349] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 03:15:24 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1127.010478][ T29] usb 5-1: USB disconnect, device number 75 [ 1127.138372][T24995] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.138681][T27261] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.145385][T24995] usb 8-1: config 0 has no interfaces? [ 1127.153751][T27262] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1127.157720][T24995] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.163113][T27261] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1127.163154][T27261] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.163170][T27261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.200956][T24995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.212022][T24995] usb 8-1: config 0 descriptor?? [ 1127.410675][T27261] usb 7-1: USB disconnect, device number 73 [ 1127.456831][ T29] usb 8-1: USB disconnect, device number 105 [ 1127.528772][T27262] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 03:15:24 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1127.536275][T27262] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.544750][T27262] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.550872][T27262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.579708][T32366] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1127.828827][T25530] usb 5-1: new high-speed USB device number 76 using dummy_hcd 03:15:25 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:25 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1128.188744][T25530] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1128.203548][T25530] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1128.213593][T25530] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.221794][T25530] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.245073][ T15] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1128.248782][T32369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1128.268689][ T29] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1128.618559][ T15] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.625836][ T15] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1128.632251][ T15] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1128.642034][ T15] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.648571][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.648594][ T29] usb 8-1: config 0 has no interfaces? [ 1128.648615][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1128.648630][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.651106][ T29] usb 8-1: config 0 descriptor?? [ 1128.655096][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.726418][ T15] snd-usb-audio: probe of 7-1:27.0 failed with error -2 [ 1128.971291][ T29] usb 5-1: USB disconnect, device number 76 [ 1128.978628][ T15] usb 6-1: USB disconnect, device number 12 [ 1128.993374][T27262] usb 7-1: USB disconnect, device number 74 [ 1128.996381][ T3761] usb 8-1: USB disconnect, device number 106 [ 1129.139431][T25530] Bluetooth: hci2: command 0x0406 tx timeout 03:15:26 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:26 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1129.888710][ T15] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1130.259245][ T15] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1130.270610][ T15] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1130.278337][ T15] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1130.286136][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.309069][T32380] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 03:15:28 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:28 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1131.037872][ T15] usb 6-1: USB disconnect, device number 13 [ 1131.107286][T31851] udevd[31851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.308268][ T4799] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1131.308439][T27262] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1131.398399][ T29] usb 5-1: new high-speed USB device number 77 using dummy_hcd 03:15:28 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1131.718740][T27262] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.725964][T27262] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1131.733074][T27262] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.741910][T27262] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1131.748937][T27262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.758816][ T4799] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1131.765728][ T4799] usb 8-1: can't read configurations, error -61 [ 1131.778755][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1131.787172][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1131.791301][T27262] snd-usb-audio: probe of 7-1:27.0 failed with error -2 [ 1131.795511][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1131.808320][T25530] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1131.827094][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.849053][T32378] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1131.928269][ T4799] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1132.219838][T25530] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1132.229518][T25530] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1132.239536][T25530] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1132.248602][T25530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.279939][T32389] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1132.378539][ T4799] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1132.384692][ T4799] usb 8-1: can't read configurations, error -61 [ 1132.391248][ T4799] usb usb8-port1: attempt power cycle [ 1132.809157][ T4799] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1133.068892][ T4799] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1133.074097][ T4799] usb 8-1: can't read configurations, error -61 [ 1133.238231][ T4799] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1133.340270][T27262] usb 7-1: USB disconnect, device number 75 [ 1133.509274][ T4799] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1133.516407][ T4799] usb 8-1: can't read configurations, error -61 [ 1133.523664][ T4799] usb usb8-port1: unable to enumerate USB device 03:15:31 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:31 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1134.469481][T27261] usb 6-1: USB disconnect, device number 14 03:15:31 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) [ 1134.493422][ T15] usb 5-1: USB disconnect, device number 77 [ 1134.528406][T27452] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1134.759109][T27262] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1134.938480][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1134.944759][T27452] usb 8-1: can't read configurations, error -61 [ 1135.012127][ T15] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1135.108264][T27452] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 1135.128449][T27262] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.135691][T27262] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping 03:15:32 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1135.144786][T27262] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.157683][T27262] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.166272][T27262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.231462][T27262] snd-usb-audio: probe of 7-1:27.0 failed with error -2 [ 1135.428553][ T15] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.435984][T27262] usb 7-1: USB disconnect, device number 76 [ 1135.440589][ T15] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1135.448799][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1135.453332][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.467149][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.488988][T32398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1135.548653][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1135.555619][T27452] usb 8-1: can't read configurations, error -61 [ 1135.567057][T27452] usb usb8-port1: attempt power cycle [ 1135.715913][T27262] usb 5-1: USB disconnect, device number 78 [ 1135.868532][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.878470][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1135.885220][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.894293][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.918685][T32400] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 03:15:33 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1135.988312][T27452] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1136.148240][ T15] usb 6-1: USB disconnect, device number 15 [ 1136.248297][T27258] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1136.249630][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1136.267093][T27452] usb 8-1: can't read configurations, error -61 03:15:33 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) [ 1136.428952][T27452] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 1136.578368][ T24] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1136.650567][T27258] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.657572][T27258] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1136.668496][T27258] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1136.680345][T27258] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1136.687801][T27258] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.688969][T27452] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1136.701299][T27452] usb 8-1: can't read configurations, error -61 [ 1136.707977][T27452] usb usb8-port1: unable to enumerate USB device [ 1136.928701][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1136.939433][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1136.947973][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1136.955187][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.979489][T32404] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 03:15:34 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1137.548266][T23597] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 1137.958847][T23597] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1137.964123][T23597] usb 8-1: can't read configurations, error -61 [ 1138.108219][T23597] usb 8-1: new high-speed USB device number 116 using dummy_hcd 03:15:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1138.200954][T27258] usb 7-1: invalid MIDI out EP 0 [ 1138.205020][T27258] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1138.222312][T27258] usb 7-1: USB disconnect, device number 77 03:15:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1138.235411][ T24] usb 5-1: USB disconnect, device number 79 [ 1138.270396][ T3727] udevd[3727]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 03:15:35 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:35 executing program 1: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1138.538727][T23597] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1138.545089][T23597] usb 8-1: can't read configurations, error -61 [ 1138.550597][T23597] usb usb8-port1: attempt power cycle 03:15:36 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:15:36 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:36 executing program 1: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1138.959852][T23597] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 1139.008407][ T15] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1139.028240][T27261] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1139.208392][T23597] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1139.213112][T23597] usb 8-1: can't read configurations, error -61 [ 1139.358392][T23597] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 1139.369016][ T15] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1139.379535][ T15] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1139.388839][ T15] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1139.403655][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.428943][T32420] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1139.438418][T27261] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.447535][T27261] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1139.455200][T27261] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.465100][T27261] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1139.472747][T27261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.532212][T27261] usb 7-1: invalid MIDI out EP 0 [ 1139.536870][T27261] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1139.618829][T23597] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1139.624452][T23597] usb 8-1: can't read configurations, error -61 [ 1139.631747][T23597] usb usb8-port1: unable to enumerate USB device [ 1139.655708][ T4799] usb 5-1: USB disconnect, device number 80 [ 1139.733015][T27261] usb 7-1: USB disconnect, device number 78 03:15:37 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:37 executing program 1: syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f00000002c0), &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 03:15:37 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:37 executing program 0: request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) 03:15:37 executing program 0: syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x5, 0x4080) 03:15:37 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 03:15:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=ANY=[]) syz_mount_image$fuse(0x0, &(0x7f0000001640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)) [ 1140.538426][ T15] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1140.618333][T23597] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 1140.898626][ T15] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.906831][ T15] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1140.916788][ T15] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1140.928240][ T15] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1140.935016][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.978497][T23597] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.985586][T23597] usb 8-1: config 0 has no interfaces? [ 1140.994181][ T15] usb 7-1: invalid MIDI out EP 0 [ 1140.999668][ T15] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1141.008319][T23597] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1141.015750][T23597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.024801][T23597] usb 8-1: config 0 descriptor?? [ 1141.201829][T27094] usb 7-1: USB disconnect, device number 79 [ 1141.276491][T23597] usb 8-1: USB disconnect, device number 119 03:15:39 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) syz_io_uring_complete(0x0) 03:15:39 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:39 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) [ 1142.079435][ T3759] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1142.088319][ T24] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1142.094872][T27094] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1142.308444][T27094] usb 6-1: device descriptor read/64, error 18 03:15:39 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x573, &(0x7f00000001c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) syz_io_uring_complete(0x0) [ 1142.458543][ T3759] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.468660][ T3759] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1142.477545][ T3759] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1142.478598][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.502667][ T3759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.513661][ T24] usb 8-1: config 0 has no interfaces? [ 1142.538327][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1142.547154][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.570515][ T24] usb 8-1: config 0 descriptor?? [ 1142.582909][ T3759] usb 7-1: invalid MIDI out EP 0 [ 1142.588391][T27094] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1142.589684][ T3759] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1142.788559][T27261] usb 7-1: USB disconnect, device number 80 [ 1142.792478][T27094] usb 6-1: device descriptor read/64, error 18 [ 1142.813274][T27262] usb 8-1: USB disconnect, device number 120 [ 1142.919154][T27094] usb usb6-port1: attempt power cycle 03:15:40 executing program 0: syz_usb_connect$uac1(0x0, 0xd0, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @extension_unit={0x7}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "76272d8d0d6a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "26eba57ff4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "4365623b2ae32e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "16f1994eca429b6547"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x7, 0x5, "e816"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 1143.219376][ T3759] usb 5-1: new high-speed USB device number 81 using dummy_hcd 03:15:40 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:40 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) [ 1143.358489][T27094] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1143.458421][ T3759] usb 5-1: Using ep0 maxpacket: 32 [ 1143.548375][T27094] usb 6-1: device descriptor read/8, error -61 [ 1143.579267][ T3759] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.587740][ T3759] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.608420][T27452] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1143.610413][ T3759] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1143.618346][T25530] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1143.621556][ T3759] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 1143.637496][ T3759] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1143.830402][T27094] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1143.839556][ T3759] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1143.846072][ T3759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.852537][ T3759] usb 5-1: Product: syz [ 1143.857106][ T3759] usb 5-1: Manufacturer: syz [ 1143.862162][ T3759] usb 5-1: SerialNumber: syz [ 1143.890199][T32454] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1143.968773][T27452] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1143.976757][T27452] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1143.984400][T27452] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.992614][T27452] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.018403][T25530] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.019479][T27094] usb 6-1: device descriptor read/8, error -61 [ 1144.025075][T25530] usb 8-1: config 0 has no interfaces? [ 1144.034405][T25530] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1144.041983][T25530] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.060100][T25530] usb 8-1: config 0 descriptor?? [ 1144.158487][T27094] usb usb6-port1: unable to enumerate USB device [ 1144.188484][ T3759] usb 5-1: 0:2 : does not exist [ 1144.202295][T27452] usb 7-1: invalid MIDI out EP 0 [ 1144.205453][ T3759] usb 5-1: USB disconnect, device number 81 [ 1144.206030][T27452] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1144.240202][T12365] udevd[12365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.265490][T27452] usb 7-1: USB disconnect, device number 81 [ 1144.295018][T23597] usb 8-1: USB disconnect, device number 121 03:15:42 executing program 0: syz_usb_connect$uac1(0x0, 0xd0, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbe, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @extension_unit={0x7}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "76272d8d0d6a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "26eba57ff4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "4365623b2ae32e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "16f1994eca429b6547"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x7, 0x5, "e816"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:15:42 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b3302000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:42 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:42 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) [ 1144.918404][T23597] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1145.068405][ T3759] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1145.098473][ T15] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1145.158349][T23597] usb 5-1: Using ep0 maxpacket: 32 [ 1145.279388][T23597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.290176][T23597] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.298701][T23597] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1145.307299][T23597] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 1145.308898][ T4799] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1145.317850][T23597] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1145.448605][ T3759] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1145.458874][ T3759] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1145.467352][ T3759] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1145.474313][ T3759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.479908][ T15] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.487941][ T15] usb 8-1: config 0 has no interfaces? [ 1145.494675][ T15] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1145.502278][T23597] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1145.509572][T23597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.515911][T23597] usb 5-1: Product: syz [ 1145.519444][ T15] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.531846][ T4799] usb 6-1: device descriptor read/64, error 18 [ 1145.532296][ T3759] usb 7-1: invalid MIDI out EP 0 [ 1145.541626][ T15] usb 8-1: config 0 descriptor?? [ 1145.545403][ T3759] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1145.550928][T23597] usb 5-1: Manufacturer: syz [ 1145.554552][T23597] usb 5-1: SerialNumber: syz [ 1145.579143][T32460] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1145.736248][T27094] usb 7-1: USB disconnect, device number 82 [ 1145.784594][T27262] usb 8-1: USB disconnect, device number 122 [ 1145.808971][ T4799] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1145.881761][T23597] usb 5-1: 0:2 : does not exist [ 1145.895148][T23597] usb 5-1: USB disconnect, device number 82 [ 1145.915033][T12365] udevd[12365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1145.998366][ T4799] usb 6-1: device descriptor read/64, error 18 [ 1146.118522][ T4799] usb usb6-port1: attempt power cycle 03:15:43 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:43 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) 03:15:43 executing program 0: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="559a376e10", 0x5, 0xfffffffffffffffc) 03:15:43 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000300)) [ 1146.369777][ T39] audit: type=1400 audit(1661310943.737:647): avc: denied { read } for pid=32473 comm="syz-executor.0" name="nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 03:15:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x90) [ 1146.391404][ T39] audit: type=1400 audit(1661310943.737:648): avc: denied { open } for pid=32473 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1146.415728][ T39] audit: type=1400 audit(1661310943.737:649): avc: denied { ioctl } for pid=32473 comm="syz-executor.0" path="/dev/nullb0" dev="devtmpfs" ino=689 ioctlcmd=0x1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 03:15:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x90) [ 1146.538350][ T4799] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1146.568619][T23597] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1146.598368][T27262] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1146.709048][ T4799] usb 6-1: device descriptor read/8, error -61 [ 1146.950173][T23597] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1146.958498][T23597] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1146.965788][T23597] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1146.972393][T23597] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1146.978742][T23597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.981315][ T4799] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1147.008635][T27262] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.020378][T27262] usb 8-1: config 0 has no interfaces? [ 1147.021930][T23597] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 1147.025958][T27262] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1147.042761][T27262] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.052823][T27262] usb 8-1: config 0 descriptor?? [ 1147.198470][ T4799] usb 6-1: device descriptor read/8, error -61 [ 1147.223295][T27094] usb 7-1: USB disconnect, device number 83 [ 1147.304001][T27452] usb 8-1: USB disconnect, device number 123 [ 1147.328587][ T4799] usb usb6-port1: unable to enumerate USB device 03:15:45 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:45 executing program 0: syz_usb_connect$uac1(0x0, 0xce, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @extension_unit={0x7}, @processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "76272d8d0d6a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "26eba57ff4"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "4365623b2ae32e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "16f1994eca429b6547"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x0, 0x7, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:15:45 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:45 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) [ 1148.108463][ T3759] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1148.108527][T25530] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1148.119177][ T4799] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1148.328509][T23597] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1148.368250][ T4799] usb 5-1: Using ep0 maxpacket: 32 [ 1148.488463][ T3759] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.497132][ T3759] usb 8-1: config 0 has no interfaces? [ 1148.501707][ T3759] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.508652][ T3759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.515842][ T3759] usb 8-1: config 0 descriptor?? [ 1148.519448][T23597] usb 6-1: device descriptor read/64, error 18 [ 1148.519753][ T4799] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1148.532290][T25530] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.541187][T25530] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1148.549621][ T4799] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1148.556979][ T4799] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1148.565043][T25530] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1148.571991][T25530] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.579530][ T4799] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1148.588818][T25530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.639884][T25530] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 1148.755147][ T4799] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1148.764878][ T4799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.774209][ T4799] usb 5-1: Product: syz [ 1148.776548][ T3759] usb 8-1: USB disconnect, device number 124 [ 1148.780771][ T4799] usb 5-1: Manufacturer: syz [ 1148.789936][ T4799] usb 5-1: SerialNumber: syz [ 1148.798992][T23597] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1148.843397][ T15] usb 7-1: USB disconnect, device number 84 [ 1148.998278][T23597] usb 6-1: device descriptor read/64, error 18 [ 1149.128476][ T4799] usb 5-1: 0:2 : does not exist [ 1149.129072][T23597] usb usb6-port1: attempt power cycle [ 1149.145677][ T4799] usb 5-1: USB disconnect, device number 83 [ 1149.166229][T12365] udevd[12365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 03:15:46 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) 03:15:46 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:46 executing program 0: syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x0, &(0x7f0000000100)="3a287c70bff4731bb1b921ffd392302c38b59cee2258df00c021324b4b1ac6e6fd5f033e5a5c935d382bc69feb34cbdd471d5afe1826d3053731ffbd2c74ac9b891bb6de42803b0f1c7e2eb2add6c8ef930d57eb710522e8fee31b1ed1dcccc2d339f2a807a194c7a662273f64d7e986b17bc6573cbfe89ccbb1cd1463894b4e34d4e9bcf2c25423bc2edcb751c347e81ca98910fa7146c5d79dc8f87f4586e778b8de5e801ea005d2270ef67d868bb15cd462b845fabeb3c2b17b4a81bbbbe0e0", 0xc1, 0x0, &(0x7f0000000240), &(0x7f0000000280)="7e3cbb5c7f7f5323") syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x8110000, &(0x7f00000002c0)="22948a2958a39060187b9f2b322388c6be1de9eaf560b016aa5a7062002ed5f35d3726b4f3e67e504949337f07", 0x2d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="56efc67a288c81a98a3bcdd925c86b562bd5c3fa0019f89b89694d5a3295d3a23900fb1903307829529b0f3387eead") syz_clone(0x44000000, &(0x7f00000003c0)="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", 0xce3, &(0x7f00000013c0), &(0x7f0000001400), 0x0) [ 1149.568305][T23597] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1149.578404][T27261] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 1149.638552][T24995] usb 7-1: new high-speed USB device number 85 using dummy_hcd 03:15:47 executing program 0: syz_open_procfs$userns(0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_clone(0x0, &(0x7f0000000100)="3a287c70bff4731bb1b921ffd392302c38b59cee2258df00c021324b4b1ac6e6fd5f033e5a5c935d382bc69feb34cbdd471d5afe1826d3053731ffbd2c74ac9b891bb6de42803b0f1c7e2eb2add6c8ef930d57eb710522e8fee31b1ed1dcccc2d339f2a807a194c7a662273f64d7e986b17bc6573cbfe89ccbb1cd1463894b4e34d4e9bcf2c25423bc2edcb751c347e81ca98910fa7146c5d79dc8f87f4586e778b8de5e801ea005d2270ef67d868bb15cd462b845fabeb3c2b17b4a81bbbbe0e0", 0xc1, 0x0, &(0x7f0000000240), &(0x7f0000000280)="7e3cbb5c7f7f5323") syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x8110000, &(0x7f00000002c0)="22948a2958a39060187b9f2b322388c6be1de9eaf560b016aa5a7062002ed5f35d3726b4f3e67e504949337f07", 0x2d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="56efc67a288c81a98a3bcdd925c86b562bd5c3fa0019f89b89694d5a3295d3a23900fb1903307829529b0f3387eead") syz_clone(0x44000000, &(0x7f00000003c0)="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", 0xce3, &(0x7f00000013c0), &(0x7f0000001400), 0x0) [ 1149.771026][T23597] usb 6-1: device descriptor read/8, error -61 [ 1149.948305][T27261] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.956635][T27261] usb 8-1: config 0 has no interfaces? [ 1149.962627][T27261] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1149.970620][T27261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.987332][T27261] usb 8-1: config 0 descriptor?? [ 1150.048411][T23597] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1150.048761][T24995] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1150.064991][T24995] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1150.074299][T24995] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1150.083417][T24995] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1150.092684][T24995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.174231][T24995] snd-usb-audio: probe of 7-1:27.0 failed with error -12 [ 1150.237058][ T4799] usb 8-1: USB disconnect, device number 125 [ 1150.258612][T23597] usb 6-1: device descriptor read/8, error -61 [ 1150.378930][ T15] usb 7-1: USB disconnect, device number 85 [ 1150.388526][T23597] usb usb6-port1: unable to enumerate USB device 03:15:48 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 03:15:48 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) 03:15:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 03:15:48 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 03:15:48 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 03:15:48 executing program 0: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) [ 1151.138606][T27261] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1151.204020][T27262] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1151.348288][ T15] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1151.548424][T27261] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.549470][ T15] usb 6-1: device descriptor read/64, error 18 [ 1151.557100][T27261] usb 8-1: config 0 has no interfaces? [ 1151.557156][T27261] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1151.557174][T27261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.566989][T27261] usb 8-1: config 0 descriptor?? [ 1151.608547][T27262] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1151.617683][T27262] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1151.625353][T27262] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1151.640032][T27262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.689492][T32508] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1151.837895][T23597] usb 8-1: USB disconnect, device number 126 [ 1151.844154][ T15] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1151.911951][ T4799] usb 7-1: USB disconnect, device number 86 [ 1152.048459][ T15] usb 6-1: device descriptor read/64, error 18 [ 1152.180906][ T15] usb usb6-port1: attempt power cycle [ 1152.588375][ T15] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1152.808831][ T15] usb 6-1: device descriptor read/8, error -61 [ 1153.078590][ T15] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1153.288759][ T15] usb 6-1: device descriptor read/8, error -61 [ 1153.410102][ T15] usb usb6-port1: unable to enumerate USB device 03:15:51 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:51 executing program 0: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) 03:15:51 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:51 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) 03:15:51 executing program 0: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) 03:15:51 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 03:15:51 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) 03:15:51 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) [ 1154.170320][ T4799] usb 8-1: new high-speed USB device number 127 using dummy_hcd [ 1154.178500][ T15] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1154.358600][T23597] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1154.548358][T23597] usb 6-1: device descriptor read/64, error 18 [ 1154.560634][ T15] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1154.568561][ T4799] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.569565][ T15] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1154.580490][ T4799] usb 8-1: config 0 has no interfaces? [ 1154.580531][ T4799] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1154.580549][ T4799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.584470][ T4799] usb 8-1: config 0 descriptor?? [ 1154.589205][ T15] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1154.589239][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.613384][T32522] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1154.818305][T23597] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1154.853179][T27452] usb 7-1: USB disconnect, device number 87 [ 1154.858786][ T4799] usb 8-1: USB disconnect, device number 127 [ 1155.008353][T23597] usb 6-1: device descriptor read/64, error 18 [ 1155.128525][T23597] usb usb6-port1: attempt power cycle [ 1155.538736][T23597] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1155.708527][T23597] usb 6-1: device descriptor read/8, error -61 [ 1155.978333][T23597] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1156.148676][T23597] usb 6-1: device descriptor read/8, error -61 [ 1156.270954][T23597] usb usb6-port1: unable to enumerate USB device 03:15:54 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) 03:15:54 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000140)={0x2, 0x0, @c}, 0x29, r0) 03:15:54 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:54 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:54 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) 03:15:54 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x40}, &(0x7f00000000c0)={0x1f}, 0x0, 0x0) 03:15:54 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000000c0)) 03:15:54 executing program 3: add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)='U', 0x1, 0xfffffffffffffffd) [ 1157.218397][ T15] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1157.408746][T23597] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1157.580783][ T15] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1157.591900][ T15] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1157.600273][T23597] usb 6-1: device descriptor read/64, error 18 [ 1157.604539][ T15] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1157.611753][ T15] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.639140][T32535] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1157.870092][T23597] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1157.877268][ T15] usb 7-1: USB disconnect, device number 88 [ 1158.058609][T23597] usb 6-1: device descriptor read/64, error 18 [ 1158.178554][T23597] usb usb6-port1: attempt power cycle [ 1158.598328][T23597] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1158.768766][T23597] usb 6-1: device descriptor read/8, error -61 [ 1159.048442][T23597] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1159.218945][T23597] usb 6-1: device descriptor read/8, error -61 [ 1159.338674][T23597] usb usb6-port1: unable to enumerate USB device 03:15:57 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:57 executing program 3: select(0x61, 0x0, 0x0, 0x0, &(0x7f0000002200)) 03:15:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 03:15:57 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 03:15:57 executing program 3: openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x2}, &(0x7f0000000180)={0x8}, 0x0, 0x0) 03:15:57 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, 0x0) 03:15:57 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) [ 1160.238861][T27094] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1160.408634][T25530] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1160.618572][T27094] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.629297][T27094] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1160.637348][T27094] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.646535][T27094] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.669254][T32552] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1160.829669][T25530] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.837571][T25530] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1160.844703][T25530] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.851386][T25530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.908768][T27094] usb 7-1: USB disconnect, device number 89 [ 1161.101850][T25530] usb 6-1: USB disconnect, device number 40 03:15:58 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:15:58 executing program 0: setresuid(0xee00, 0xee01, 0xee01) 03:15:58 executing program 3: select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x3}, 0x0, &(0x7f0000000240)={0x77359400}) 03:15:58 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:15:59 executing program 0: add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="559a", 0x2, 0xfffffffffffffffd) 03:15:59 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) fcntl$setflags(r0, 0x2, 0x0) 03:15:59 executing program 0: request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0x0) 03:15:59 executing program 3: r0 = add_key$keyring(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r0) [ 1161.908313][T25530] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1161.908526][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1162.288563][ T24] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.296869][ T24] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1162.304635][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1162.311951][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.343368][T25530] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1162.352034][T25530] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1162.360413][T25530] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1162.367299][T25530] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.403532][T32571] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1162.566552][T27262] usb 6-1: USB disconnect, device number 41 [ 1164.031759][ T15] usb 7-1: USB disconnect, device number 90 03:16:01 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) 03:16:01 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x0, 0x28a1d35c72474534, 0xffffffffffffffff, 0x0) 03:16:01 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:01 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000800)=@lang_id={0x4}}, {0x0, 0x0}]}) 03:16:01 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) syz_clone3(&(0x7f00000002c0)={0x4021000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1}, &(0x7f0000000140)=""/24, 0x18, &(0x7f0000000180)=""/193, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) [ 1164.611915][T32590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1164.668277][ T39] audit: type=1800 audit(1661310962.027:650): pid=32591 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 03:16:02 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) syz_clone3(&(0x7f00000002c0)={0x4021000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1}, &(0x7f0000000140)=""/24, 0x18, &(0x7f0000000180)=""/193, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) [ 1164.791981][ T39] audit: type=1800 audit(1661310962.157:651): pid=32595 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1164.858386][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd 03:16:02 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) syz_clone3(&(0x7f00000002c0)={0x4021000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1}, &(0x7f0000000140)=""/24, 0x18, &(0x7f0000000180)=""/193, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) [ 1164.858428][ T4799] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1164.862589][ T15] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1164.950559][ T39] audit: type=1800 audit(1661310962.317:652): pid=32599 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 03:16:02 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) syz_clone3(&(0x7f00000002c0)={0x4021000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1}, &(0x7f0000000140)=""/24, 0x18, &(0x7f0000000180)=""/193, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) [ 1165.048289][ T15] usb 6-1: device descriptor read/64, error 18 [ 1165.114569][ T39] audit: type=1800 audit(1661310962.477:653): pid=32603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1165.138325][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1165.258588][ T24] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1165.267489][ T24] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1165.276869][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.288569][ T4799] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1165.299441][ T4799] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1165.306996][ T4799] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1165.314742][ T4799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.328587][ T15] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1165.349147][T32587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1165.528515][ T15] usb 6-1: device descriptor read/64, error 18 [ 1165.576597][T32547] usb 7-1: USB disconnect, device number 91 [ 1165.650740][ T15] usb usb6-port1: attempt power cycle [ 1165.681215][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.688347][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.694352][ T24] usb 8-1: Product: syz [ 1165.697512][ T24] usb 8-1: SerialNumber: syz [ 1166.048588][ T24] usb 8-1: 0:2 : does not exist [ 1166.062026][ T24] usb 8-1: USB disconnect, device number 2 [ 1166.078575][ T15] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1166.089802][T12365] udevd[12365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 03:16:03 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:16:03 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1166.179247][ T39] audit: type=1800 audit(1661310963.547:654): pid=32609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1166.288733][ T15] usb 6-1: device descriptor read/8, error -61 [ 1166.408439][ T4799] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1166.558797][ T15] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1166.728772][ T15] usb 6-1: device descriptor read/8, error -61 [ 1166.768543][ T4799] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.777619][ T4799] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.787666][ T4799] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.797984][ T4799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.823797][T32608] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1166.849691][ T15] usb usb6-port1: unable to enumerate USB device [ 1167.050996][T27262] usb 7-1: USB disconnect, device number 92 03:16:04 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:04 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:16:04 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:16:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 03:16:05 executing program 3: clock_nanosleep(0x7be9fc3e838ab538, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 03:16:05 executing program 3: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000140)={0x0, 0x0, @c}, 0x29, r0) 03:16:05 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)={0x10}, 0x10}], 0x1, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x0) [ 1167.908347][T27261] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1168.058364][ T4799] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1168.272779][ T4799] usb 6-1: device descriptor read/64, error 18 [ 1168.280724][T27261] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1168.290006][T27261] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1168.299283][T27261] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1168.308656][T27261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.329039][T32617] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1168.548474][ T4799] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1168.553791][ T15] usb 7-1: USB disconnect, device number 93 [ 1168.738599][ T4799] usb 6-1: device descriptor read/64, error 18 [ 1168.858710][ T4799] usb usb6-port1: attempt power cycle [ 1169.268404][ T4799] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1169.438735][ T4799] usb 6-1: device descriptor read/8, error -61 [ 1169.708383][ T4799] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1169.898532][ T4799] usb 6-1: device descriptor read/8, error -61 [ 1170.019128][ T4799] usb usb6-port1: unable to enumerate USB device 03:16:08 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:08 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:08 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:08 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b33020000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) 03:16:08 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1170.918409][T23597] usb 7-1: new high-speed USB device number 94 using dummy_hcd 03:16:08 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) mkdir(0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1171.100669][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd 03:16:08 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1171.278676][T23597] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1171.290781][T23597] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1171.308687][ T24] usb 6-1: device descriptor read/64, error 18 03:16:08 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1171.312540][T23597] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1171.323675][T23597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.359707][T32633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1171.438893][ T39] audit: type=1800 audit(1661310968.807:655): pid=32648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1171.590147][T27452] usb 7-1: USB disconnect, device number 94 [ 1171.599455][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1171.792615][ T24] usb 6-1: device descriptor read/64, error 18 [ 1171.918850][ T24] usb usb6-port1: attempt power cycle [ 1172.329548][ T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1172.498419][ T24] usb 6-1: device descriptor read/8, error -61 [ 1172.780545][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1172.948591][ T24] usb 6-1: device descriptor read/8, error -61 [ 1173.068588][ T24] usb usb6-port1: unable to enumerate USB device 03:16:11 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:11 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:11 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:11 executing program 2: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1173.727853][ T39] audit: type=1800 audit(1661310971.087:656): pid=32657 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 03:16:11 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1173.835630][ T39] audit: type=1800 audit(1661310971.197:657): pid=32662 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 03:16:11 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1173.949600][ T39] audit: type=1800 audit(1661310971.317:658): pid=32666 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 03:16:11 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:11 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) read$watch_queue(r0, &(0x7f0000000040)=""/186, 0xba) [ 1174.128352][ T4799] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1174.408924][ T4799] usb 6-1: no configurations [ 1174.413211][ T4799] usb 6-1: can't read configurations, error -22 [ 1174.579071][ T4799] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1174.879251][ T4799] usb 6-1: no configurations [ 1174.882848][ T4799] usb 6-1: can't read configurations, error -22 [ 1174.887883][ T4799] usb usb6-port1: attempt power cycle [ 1175.308486][ T4799] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1175.438745][ T4799] usb 6-1: no configurations [ 1175.442614][ T4799] usb 6-1: can't read configurations, error -22 [ 1175.588372][ T4799] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1175.718619][ T4799] usb 6-1: no configurations [ 1175.723624][ T4799] usb 6-1: can't read configurations, error -22 [ 1175.730859][ T4799] usb usb6-port1: unable to enumerate USB device 03:16:14 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:14 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:14 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:14 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '['}, {}], 0xa, "bb"}, 0xf) select(0x2a, 0x0, 0x0, 0x0, &(0x7f0000002200)) [ 1176.729971][ T39] audit: type=1800 audit(1661310974.097:659): pid=32678 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=10 res=0 errno=0 03:16:14 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1176.784591][ T39] audit: type=1800 audit(1661310974.147:660): pid=32681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=11 res=0 errno=0 03:16:14 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1176.868560][ T39] audit: type=1800 audit(1661310974.227:661): pid=32684 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 03:16:14 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:14 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x13000)=nil, 0x4000) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1176.974649][ T39] audit: type=1800 audit(1661310974.337:662): pid=32689 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 1177.198306][ T4799] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1177.488569][ T4799] usb 6-1: no configurations [ 1177.496740][ T4799] usb 6-1: can't read configurations, error -22 [ 1177.648450][ T4799] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1177.938802][ T4799] usb 6-1: no configurations [ 1177.942024][ T4799] usb 6-1: can't read configurations, error -22 [ 1177.946813][ T4799] usb usb6-port1: attempt power cycle [ 1178.369227][ T4799] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1178.508876][ T4799] usb 6-1: no configurations [ 1178.513389][ T4799] usb 6-1: can't read configurations, error -22 [ 1178.668569][ T4799] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1178.818804][ T4799] usb 6-1: no configurations [ 1178.824357][ T4799] usb 6-1: can't read configurations, error -22 [ 1178.831029][ T4799] usb usb6-port1: unable to enumerate USB device 03:16:17 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009d"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:17 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:17 executing program 2: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '['}, {}], 0xa, "bb"}, 0xf) select(0x2a, 0x0, 0x0, 0x0, &(0x7f0000002200)) 03:16:17 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1179.828867][ T39] audit: type=1800 audit(1661310977.197:663): pid=32699 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 03:16:17 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:17 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1179.946763][ T39] audit: type=1800 audit(1661310977.307:664): pid=32704 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=15 res=0 errno=0 03:16:17 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:17 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1180.065061][ T39] audit: type=1800 audit(1661310977.427:665): pid=32709 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=16 res=0 errno=0 [ 1180.228299][T23597] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1180.528965][T23597] usb 6-1: no configurations [ 1180.533338][T23597] usb 6-1: can't read configurations, error -22 [ 1180.688672][T23597] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1180.968890][T23597] usb 6-1: no configurations [ 1180.972911][T23597] usb 6-1: can't read configurations, error -22 [ 1180.980130][T23597] usb usb6-port1: attempt power cycle [ 1181.388705][T23597] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1181.530929][T23597] usb 6-1: no configurations [ 1181.533958][T23597] usb 6-1: can't read configurations, error -22 [ 1181.688386][T23597] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1181.818640][T23597] usb 6-1: no configurations [ 1181.822791][T23597] usb 6-1: can't read configurations, error -22 [ 1181.827869][T23597] usb usb6-port1: unable to enumerate USB device 03:16:20 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:20 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:20 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:20 executing program 2: add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', 0x0) 03:16:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000006c00010026bd7000fddbdf", @ANYBLOB="8002"], 0x78}}, 0x0) [ 1182.857122][T32722] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. 03:16:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xffff) [ 1182.882489][ T39] audit: type=1800 audit(1661310980.247:666): pid=32723 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=17 res=0 errno=0 03:16:20 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:20 executing program 2: add_key$fscrypt_v1(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "8114a24e117d5608b684afa054b3933b060cec3b3f889c0015d8a278cf7922233cf904adab5574b519a2ba6e18c48ab230f87362c586dac1bb87e03555025924"}, 0x48, 0xfffffffffffffffe) [ 1182.989358][ T39] audit: type=1800 audit(1661310980.357:667): pid=32731 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=18 res=0 errno=0 [ 1183.288467][T23597] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1183.382025][ T1353] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.386812][ T1353] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.708386][T23597] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1183.718405][T23597] usb 6-1: can't read configurations, error -61 [ 1183.868357][T23597] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1184.271684][T23597] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1184.278858][T23597] usb 6-1: can't read configurations, error -61 [ 1184.285149][T23597] usb usb6-port1: attempt power cycle [ 1184.698376][T23597] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1184.931507][T23597] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1184.937796][T23597] usb 6-1: can't read configurations, error -61 [ 1185.088352][T23597] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1185.338795][T23597] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1185.345496][T23597] usb 6-1: can't read configurations, error -61 [ 1185.352249][T23597] usb usb6-port1: unable to enumerate USB device 03:16:23 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:23 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:23 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:23 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) lchown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xee01) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000380)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x408000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1012, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_clone(0x0, 0x0, 0x8b, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f00001dd000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="c744240067000000c74424020e000000c7442406000000000f011c24b9800000c00f3235002000000f30b9000000400f32b836d300000f23d00f21f8353000000b0f23f866baf80cb89489268fef66bafc0cb0b5ee66baf80cb8a6ec1282ef66bafc0cb02cee363edec666baf80cb83782e881ef66bafc0cb0fbeec4e3356d9700300000f3660f38823b", 0x8a}], 0x1, 0x2, &(0x7f00000000c0), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0x1000, 0x1000, &(0x7f0000282000/0x1000)=nil}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0x5}) write$binfmt_script(r8, &(0x7f0000000440)=ANY=[], 0xfecc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x5, 0x7, 0x100, 0x8000000000000004, 0xf078, r6}) [ 1185.892825][ T39] audit: type=1400 audit(1661310983.257:668): avc: denied { write } for pid=32734 comm="syz-executor.2" name="file0" dev="sda1" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 1185.914074][ T39] audit: type=1400 audit(1661310983.277:669): avc: denied { open } for pid=32734 comm="syz-executor.2" path="/syzkaller-testdir2884873063/syzkaller.G8hAOD/3084/file0" dev="sda1" ino=1159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 [ 1185.935019][ T39] audit: type=1400 audit(1661310983.277:670): avc: denied { ioctl } for pid=32734 comm="syz-executor.2" path="/syzkaller-testdir2884873063/syzkaller.G8hAOD/3084/file0" dev="sda1" ino=1159 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=blk_file permissive=1 03:16:23 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1185.959416][ T39] audit: type=1800 audit(1661310983.277:671): pid=32737 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=19 res=0 errno=0 [ 1185.977684][ T39] audit: type=1800 audit(1661310983.337:672): pid=32742 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=20 res=0 errno=0 03:16:23 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:23 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1186.043626][ T39] audit: type=1800 audit(1661310983.407:673): pid=32749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=21 res=0 errno=0 03:16:23 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1186.109734][ T39] audit: type=1800 audit(1661310983.477:674): pid=32751 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=22 res=0 errno=0 [ 1186.318327][T25530] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1186.728540][T25530] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1186.734541][T25530] usb 6-1: can't read configurations, error -61 [ 1186.888572][T25530] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1187.318436][T25530] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1187.324028][T25530] usb 6-1: can't read configurations, error -61 [ 1187.331838][T25530] usb usb6-port1: attempt power cycle [ 1187.748368][T25530] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1188.028573][T25530] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1188.036837][T25530] usb 6-1: can't read configurations, error -61 [ 1188.188522][T25530] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1188.488807][T25530] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1188.496120][T25530] usb 6-1: can't read configurations, error -61 [ 1188.502597][T25530] usb usb6-port1: unable to enumerate USB device 03:16:26 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:26 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(0x0, &(0x7f0000158000/0x4000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:26 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) lchown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xee01) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000380)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x408000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1012, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_clone(0x0, 0x0, 0x8b, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f00001dd000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="c744240067000000c74424020e000000c7442406000000000f011c24b9800000c00f3235002000000f30b9000000400f32b836d300000f23d00f21f8353000000b0f23f866baf80cb89489268fef66bafc0cb0b5ee66baf80cb8a6ec1282ef66bafc0cb02cee363edec666baf80cb83782e881ef66bafc0cb0fbeec4e3356d9700300000f3660f38823b", 0x8a}], 0x1, 0x2, &(0x7f00000000c0), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0x1000, 0x1000, &(0x7f0000282000/0x1000)=nil}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0x5}) write$binfmt_script(r8, &(0x7f0000000440)=ANY=[], 0xfecc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x5, 0x7, 0x100, 0x8000000000000004, 0xf078, r6}) 03:16:26 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1188.951945][ T39] audit: type=1800 audit(1661310986.317:675): pid=32756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=23 res=0 errno=0 03:16:26 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:26 executing program 3: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1189.016613][ T39] audit: type=1800 audit(1661310986.377:676): pid=32763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=24 res=0 errno=0 03:16:26 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1189.062362][T32755] blktrace: Concurrent blktraces are not allowed on loop5 [ 1189.081333][ T39] audit: type=1800 audit(1661310986.447:677): pid=300 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=25 res=0 errno=0 03:16:26 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1189.133782][ T39] audit: type=1800 audit(1661310986.497:678): pid=303 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=26 res=0 errno=0 [ 1189.388504][ T15] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1189.804354][ T15] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1189.811222][ T15] usb 6-1: can't read configurations, error -61 [ 1189.968446][ T15] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1190.378766][ T15] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1190.385919][ T15] usb 6-1: can't read configurations, error -61 [ 1190.391754][ T15] usb usb6-port1: attempt power cycle [ 1190.818895][ T15] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1191.068884][ T15] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1191.089377][ T15] usb 6-1: can't read configurations, error -61 [ 1191.238449][ T15] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1191.508625][ T15] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1191.515417][ T15] usb 6-1: can't read configurations, error -61 [ 1191.521839][ T15] usb usb6-port1: unable to enumerate USB device 03:16:29 executing program 3: mlockall(0x2) r0 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r0) shmat(0x0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:29 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:29 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:29 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) lchown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xee01) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000380)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x408000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1012, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_clone(0x0, 0x0, 0x8b, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f00001dd000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="c744240067000000c74424020e000000c7442406000000000f011c24b9800000c00f3235002000000f30b9000000400f32b836d300000f23d00f21f8353000000b0f23f866baf80cb89489268fef66bafc0cb0b5ee66baf80cb8a6ec1282ef66bafc0cb02cee363edec666baf80cb83782e881ef66bafc0cb0fbeec4e3356d9700300000f3660f38823b", 0x8a}], 0x1, 0x2, &(0x7f00000000c0), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0x1000, 0x1000, &(0x7f0000282000/0x1000)=nil}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0x5}) write$binfmt_script(r8, &(0x7f0000000440)=ANY=[], 0xfecc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x5, 0x7, 0x100, 0x8000000000000004, 0xf078, r6}) [ 1191.990499][ T39] audit: type=1800 audit(1661310989.357:679): pid=308 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=27 res=0 errno=0 03:16:29 executing program 3: mlockall(0x2) r0 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r0) shmat(0x0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:29 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:29 executing program 3: mlockall(0x2) r0 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r0) shmat(0x0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:29 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1192.116279][ T39] audit: type=1800 audit(1661310989.477:680): pid=323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=28 res=0 errno=0 [ 1192.139898][ T324] blktrace: Concurrent blktraces are not allowed on loop5 03:16:29 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:29 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1192.233023][ T39] audit: type=1800 audit(1661310989.597:681): pid=329 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=29 res=0 errno=0 [ 1192.458381][ T24] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1192.829857][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.836606][ T24] usb 6-1: config 0 has no interfaces? [ 1192.840630][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1192.847274][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.857492][ T24] usb 6-1: config 0 descriptor?? [ 1193.107281][ T24] usb 6-1: USB disconnect, device number 78 03:16:30 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:30 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:30 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:30 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) lchown(&(0x7f00000000c0)='./file1\x00', 0xee00, 0xee01) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000380)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1aa1, 0x408000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x1012, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r6 = syz_clone(0x0, 0x0, 0x8b, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f00001dd000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="c744240067000000c74424020e000000c7442406000000000f011c24b9800000c00f3235002000000f30b9000000400f32b836d300000f23d00f21f8353000000b0f23f866baf80cb89489268fef66bafc0cb0b5ee66baf80cb8a6ec1282ef66bafc0cb02cee363edec666baf80cb83782e881ef66bafc0cb0fbeec4e3356d9700300000f3660f38823b", 0x8a}], 0x1, 0x2, &(0x7f00000000c0), 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x2710, 0x1, 0x1000, 0x1000, &(0x7f0000282000/0x1000)=nil}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000300)=@usbdevfs_disconnect={0x5}) write$binfmt_script(r8, &(0x7f0000000440)=ANY=[], 0xfecc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0x5, 0x7, 0x100, 0x8000000000000004, 0xf078, r6}) 03:16:31 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:31 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1193.696280][ T39] audit: type=1800 audit(1661310991.057:682): pid=343 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=30 res=0 errno=0 03:16:31 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:31 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1193.758184][ T337] blktrace: Concurrent blktraces are not allowed on loop5 [ 1193.804664][ T39] audit: type=1800 audit(1661310991.167:683): pid=350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=31 res=0 errno=0 [ 1193.918461][T27262] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1194.338531][T27262] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.348199][T27262] usb 6-1: config 0 has no interfaces? [ 1194.352362][T27262] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1194.361843][T27262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.371696][T27262] usb 6-1: config 0 descriptor?? [ 1194.615081][T27262] usb 6-1: USB disconnect, device number 79 03:16:32 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:32 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x0) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:32 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:32 executing program 2: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000ac0)='ns/time\x00') 03:16:32 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 03:16:32 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:32 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0x0, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) 03:16:32 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1195.232241][ T39] audit: type=1800 audit(1661310992.597:684): pid=366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=32 res=0 errno=0 [ 1195.448303][T27262] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1195.808628][T27262] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.815468][T27262] usb 6-1: config 0 has no interfaces? [ 1195.819651][T27262] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1195.827049][T27262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.836482][T27262] usb 6-1: config 0 descriptor?? [ 1196.084983][T27094] usb 6-1: USB disconnect, device number 80 03:16:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000006c0001"], 0x78}}, 0x0) 03:16:33 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:33 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:33 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(0x0) shmat(r0, &(0x7f00001d6000/0x3000)=nil, 0x4000) [ 1196.626690][ T376] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. 03:16:34 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(0x0, &(0x7f00001d6000/0x3000)=nil, 0x4000) 03:16:34 executing program 2: setfsuid(0x0) geteuid() setfsuid(0x0) setresuid(0xffffffffffffffff, 0xee00, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 03:16:34 executing program 3: r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmdt(r1) shmat(0x0, &(0x7f00001d6000/0x3000)=nil, 0x0) 03:16:34 executing program 2: syz_clone(0x0, &(0x7f0000000200)="57469deba13a2cb7eb141bc04a9b4a74b71649be2b0df9fb48c30644c7ed324f8c0b9db00d3b7791d72ff14559efc10ccae73814ee34349cd222cb0ffb8da46ae5fc6d23ff5131b22412acc46466c698e06b216d04fe9278d61e8ba4ed87015b8d00c584fbd33c53ea0f417620f96082a3bbbf05c8812fbfaae8a5cf286900bdd6", 0x81, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) [ 1196.707160][ T39] audit: type=1800 audit(1661310994.067:685): pid=386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=33 res=0 errno=0 03:16:34 executing program 3: timer_create(0x3, &(0x7f0000000080)={0x0, 0x2c, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) [ 1196.918352][T27094] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1197.278968][T27094] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.286217][T27094] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1197.292944][T27094] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1197.299405][T27094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.544040][ T3758] usb 6-1: USB disconnect, device number 81 03:16:35 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0xee01, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}) 03:16:35 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) 03:16:35 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:35 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:35 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) connect$packet(r0, 0x0, 0x0) 03:16:35 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/nf_conntrack_expect\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/71, 0x47}], 0x1, 0x9, 0x0) 03:16:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80) 03:16:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) [ 1198.142532][ T39] audit: type=1800 audit(1661310995.507:686): pid=407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=34 res=0 errno=0 03:16:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) [ 1198.378539][T23597] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1198.749552][T23597] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.755245][T23597] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1198.762260][T23597] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1198.768887][T23597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.015356][T23597] usb 6-1: USB disconnect, device number 82 03:16:36 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:36 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x6000000) 03:16:36 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001200)={'ip6gre0\x00', 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 03:16:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, &(0x7f00000000c0)) 03:16:36 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x859) 03:16:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8947, 0x0) 03:16:36 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) 03:16:36 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x4, &(0x7f00000012c0)=[{0x5}, {0x2}, {0x1}, {0x6}]}) [ 1199.614342][ T39] audit: type=1800 audit(1661310996.977:687): pid=428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=35 res=0 errno=0 03:16:37 executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', 0x0}) pipe(&(0x7f0000000500)) [ 1199.828393][T27094] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1199.842925][ T39] audit: type=1326 audit(1661310997.207:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=426 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fc0489279 code=0x0 [ 1200.202039][T27094] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.210753][T27094] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1200.217446][T27094] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1200.225247][T27094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.480557][T25530] usb 6-1: USB disconnect, device number 83 03:16:38 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:38 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, &(0x7f0000000040)) 03:16:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0x8) 03:16:38 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) 03:16:38 executing program 3: getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 03:16:38 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000003380), 0x28400, 0x0) 03:16:38 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) 03:16:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan1\x00'}) [ 1201.089636][ T39] audit: type=1800 audit(1661310998.457:689): pid=444 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=36 res=0 errno=0 03:16:38 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:38 executing program 2: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 03:16:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@private, @broadcast}, &(0x7f0000000080)=0xc) [ 1201.220270][ T39] audit: type=1800 audit(1661310998.587:690): pid=454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=37 res=0 errno=0 [ 1201.308394][T23597] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1201.698358][T23597] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.704390][T23597] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1201.711543][T23597] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1201.719721][T23597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.981811][ T4799] usb 6-1: USB disconnect, device number 84 03:16:39 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 03:16:39 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) 03:16:39 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:39 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) 03:16:39 executing program 2: pipe(&(0x7f0000000140)) 03:16:39 executing program 3: pipe(&(0x7f0000000500)) 03:16:39 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) 03:16:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000080)) 03:16:39 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1202.573643][ T39] audit: type=1800 audit(1661310999.937:691): pid=467 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=38 res=0 errno=0 03:16:39 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x2, &(0x7f00000012c0)=[{0x5, 0x0, 0x0, 0x2}, {0x6}]}) 03:16:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000080)) [ 1202.675066][ T39] audit: type=1800 audit(1661311000.037:692): pid=478 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=39 res=0 errno=0 [ 1202.818852][T32547] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1203.180196][T32547] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.189611][T32547] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1203.197474][T32547] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1203.206168][T32547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.454957][T32547] usb 6-1: USB disconnect, device number 85 03:16:41 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x6000000) 03:16:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x2, 0x2, '\x00', [@calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}, @padn, @ra={0x5, 0x2, 0x53}]}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x48) 03:16:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000080)) 03:16:41 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1203.978234][ C3] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:16:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, &(0x7f0000000080)) 03:16:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x2, 0x2, '\x00', [@calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}, @padn, @ra={0x5, 0x2, 0x53}]}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x48) 03:16:41 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) [ 1204.038967][ C2] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:16:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x2, 0x2, '\x00', [@calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}, @padn, @ra={0x5, 0x2, 0x53}]}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x48) [ 1204.050280][ T39] audit: type=1800 audit(1661311001.407:693): pid=493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=40 res=0 errno=0 [ 1204.082661][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 1204.268441][T32547] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1204.648767][T32547] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.655891][T32547] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1204.662431][T32547] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1204.669063][T32547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.923128][T32547] usb 6-1: USB disconnect, device number 86 03:16:42 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) 03:16:42 executing program 3: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) socket$netlink(0x10, 0x3, 0x0) 03:16:42 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @empty}, 0x10) r2 = accept(r1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x2, 0x2, '\x00', [@calipso={0x7, 0x8}, @ra={0x5, 0x2, 0x4}, @padn, @ra={0x5, 0x2, 0x53}]}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)=ANY=[], 0x48) [ 1205.445833][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:16:42 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 03:16:42 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001300)={0x1, &(0x7f00000012c0)=[{}]}) 03:16:42 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "b679462b55865e2155f9a8a64d794fddae7627d3b546ea73abac15d45aaed702004a63dc7b6a00"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$describe(0x6, r0, 0x0, 0x0) 03:16:42 executing program 3: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/4096) [ 1205.507938][ T39] audit: type=1800 audit(1661311002.867:694): pid=506 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=41 res=0 errno=0 [ 1205.748390][T32547] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1206.128755][T32547] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.136014][T32547] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1206.142420][T32547] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1206.148518][T32547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.393861][T32547] usb 6-1: USB disconnect, device number 87 03:16:44 executing program 2: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x100000) 03:16:44 executing program 3: get_mempolicy(0x0, 0x0, 0x100000001, &(0x7f0000ffa000/0x1000)=nil, 0x4) 03:16:44 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) 03:16:44 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:44 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) 03:16:44 executing program 2: semget$private(0x0, 0x1, 0x6) 03:16:44 executing program 3: semget(0x3, 0x2, 0x20) 03:16:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x15) [ 1206.984102][ T39] audit: type=1800 audit(1661311004.347:695): pid=525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=42 res=0 errno=0 03:16:44 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) 03:16:44 executing program 2: mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000000), 0x8, 0x2) [ 1207.208333][T25530] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1207.578381][T25530] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.584888][T25530] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1207.591731][T25530] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1207.598689][T25530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.860156][T32547] usb 6-1: USB disconnect, device number 88 03:16:45 executing program 1: syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000072e1bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x6000000) 03:16:45 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:45 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) 03:16:45 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000000c0)=""/252) 03:16:45 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWSTAT(r0, 0x0, 0x0) 03:16:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) 03:16:45 executing program 3: semget(0x3, 0x1, 0x2ac) 03:16:45 executing program 2: shmget(0x1, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) [ 1208.445640][ T39] audit: type=1800 audit(1661311005.807:696): pid=548 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=43 res=0 errno=0 [ 1208.658471][ T3758] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1209.028501][ T3758] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.035639][ T3758] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1209.044513][ T3758] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1209.051429][ T3758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.303539][T25530] usb 6-1: USB disconnect, device number 89 03:16:47 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 1: semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000000)=""/57) 03:16:47 executing program 2: semget$private(0x0, 0x5, 0x34a) 03:16:47 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, 0x0, 0x0, 0x8800, 0x0, 0x0) 03:16:47 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, 0x0, 0x0) 03:16:47 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) write$FUSE_BMAP(r0, 0x0, 0x0) 03:16:47 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 03:16:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) [ 1209.909317][ T39] audit: type=1800 audit(1661311007.277:697): pid=568 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=44 res=0 errno=0 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@ll, 0x80) 03:16:47 executing program 3: semctl$IPC_INFO(0xffffffffffffffff, 0x4, 0x3, &(0x7f0000000000)=""/54) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r0, 0x0, 0x0) 03:16:47 executing program 3: recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0, 0x0) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:16:47 executing program 1: getgroups(0x0, &(0x7f0000002280)) 03:16:47 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff}) openat$cgroup_freezer_state(r0, &(0x7f0000000240), 0x2, 0x0) [ 1210.022975][ T39] audit: type=1800 audit(1661311007.387:698): pid=588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=45 res=0 errno=0 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 3: semget$private(0x0, 0x4, 0x622) 03:16:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 03:16:47 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(r0, 0x0, 0x0) 03:16:47 executing program 1: r0 = semget$private(0x0, 0x1, 0x0) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000000080)=""/85) 03:16:47 executing program 3: semget$private(0x0, 0x2, 0x409) 03:16:47 executing program 2: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xf) 03:16:47 executing program 1: semget$private(0x0, 0x1, 0x40) [ 1210.150770][ T39] audit: type=1800 audit(1661311007.517:699): pid=602 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=46 res=0 errno=0 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 2: mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 03:16:47 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 03:16:47 executing program 1: semget$private(0x0, 0x1, 0x302) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 03:16:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) 03:16:47 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 03:16:47 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1210.260041][ T39] audit: type=1800 audit(1661311007.627:700): pid=622 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=47 res=0 errno=0 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 03:16:47 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x100, 0x0) 03:16:47 executing program 3: mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) 03:16:47 executing program 1: shmget(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) 03:16:47 executing program 3: mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x2) 03:16:47 executing program 2: pipe(&(0x7f0000008240)={0xffffffffffffffff}) openat$cgroup_int(r0, &(0x7f00000082c0)='cpuset.memory_migrate\x00', 0x2, 0x0) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) sendmsg$inet6(r0, 0x0, 0x0) [ 1210.389308][ T39] audit: type=1800 audit(1661311007.757:701): pid=639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=48 res=0 errno=0 03:16:47 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_BMAP(r0, 0x0, 0x0) 03:16:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 03:16:47 executing program 1: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/4096) 03:16:47 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) 03:16:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:16:47 executing program 1: semctl$SEM_INFO(0xffffffffffffffff, 0x3, 0x13, &(0x7f0000000000)=""/38) 03:16:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)=""/36, &(0x7f0000000080)=0x24) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) [ 1210.513451][ T39] audit: type=1800 audit(1661311007.877:702): pid=660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=49 res=0 errno=0 03:16:47 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 03:16:47 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, 0x0, 0x0) 03:16:47 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10001, 0x17, 0x0, {0xfff8, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, 0x10001) 03:16:47 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r0, 0x0, 0x0) 03:16:47 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 03:16:47 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000000)=""/225) 03:16:47 executing program 2: semget$private(0x0, 0x3, 0x4) 03:16:47 executing program 3: semget$private(0x0, 0x2, 0x107) [ 1210.627943][ T39] audit: type=1800 audit(1661311007.987:703): pid=679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=50 res=0 errno=0 03:16:48 executing program 2: r0 = semget(0x3, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f00000020c0)=""/249) 03:16:48 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 03:16:48 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x20008010, 0x0, 0x0) 03:16:48 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:48 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000000)=""/96) 03:16:48 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x290002, 0x0) 03:16:48 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)) 03:16:48 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f00000000c0)=""/237) 03:16:48 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff}) sendmsg(r0, 0x0, 0x0) 03:16:48 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) [ 1211.470383][ T39] audit: type=1800 audit(1661311008.837:704): pid=698 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=51 res=0 errno=0 03:16:48 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) 03:16:48 executing program 2: semget$private(0x0, 0x3, 0xa8) 03:16:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:48 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOCK(r0, 0x0, 0x0) 03:16:48 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, 0x0, 0x50) 03:16:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) 03:16:48 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 03:16:48 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 03:16:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000040)=""/131, 0x83, 0x0, 0x0, 0x0) 03:16:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) 03:16:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 03:16:48 executing program 3: mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x8001, 0x0, 0x0) 03:16:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:48 executing program 1: semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000040)=""/231) 03:16:48 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x10) 03:16:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r0, 0x0, 0x0) 03:16:49 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r0, 0x0, 0x0) 03:16:49 executing program 3: semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f0000000040)=""/128) 03:16:49 executing program 1: semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000240)=""/117) 03:16:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:49 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 03:16:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}, 0x4000) 03:16:49 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSYMLINK(r0, 0x0, 0x0) 03:16:49 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r0, 0x0, 0x0) 03:16:49 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000008340)='syz0\x00', 0x200002, 0x0) 03:16:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x8, 0x4, 0x8}, 0x48) 03:16:49 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00', 0x1}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth1_macvtap\x00', 0x400}) [ 1212.517974][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 1212.517993][ T39] audit: type=1800 audit(1661311009.877:707): pid=752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=54 res=0 errno=0 03:16:49 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) 03:16:49 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 03:16:49 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:49 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLCREATE(r0, 0x0, 0x1) 03:16:49 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETPID(r0, 0x1, 0xb, 0x0) 03:16:49 executing program 2: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/203) 03:16:49 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) 03:16:49 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) write$P9_RWSTAT(r0, &(0x7f0000000000)={0x7}, 0xfffffffffffffe37) 03:16:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 03:16:50 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) [ 1212.647193][ T39] audit: type=1800 audit(1661311010.007:708): pid=775 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=55 res=0 errno=0 03:16:50 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTATFS(r0, 0x0, 0x0) 03:16:50 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000080), 0x0) 03:16:50 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:50 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002040)='blkio.bfq.io_merged\x00', 0x0, 0x0) 03:16:50 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 03:16:50 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 03:16:50 executing program 2: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAMEAT(r0, 0x0, 0x0) [ 1212.766039][ T39] audit: type=1800 audit(1661311010.127:709): pid=794 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=56 res=0 errno=0 03:16:50 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7}, 0xffffffffffffff14) 03:16:50 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2a6600, 0x0) 03:16:50 executing program 2: semget(0x1, 0x0, 0x2a0) 03:16:50 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002080)=ANY=[], 0xb0) 03:16:50 executing program 2: semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000040)=""/231) 03:16:50 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 03:16:50 executing program 2: semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000000)=""/51) 03:16:50 executing program 3: mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002) 03:16:50 executing program 1: mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x1) 03:16:50 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x54141, 0x0) [ 1213.549712][ T39] audit: type=1800 audit(1661311010.917:710): pid=815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=57 res=0 errno=0 03:16:50 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 03:16:50 executing program 1: pipe(&(0x7f0000008240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 03:16:50 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:50 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 03:16:50 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSTAT(r0, 0x0, 0x0) 03:16:50 executing program 2: r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 03:16:50 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f00000000c0)=""/60) 03:16:51 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) 03:16:51 executing program 1: semget$private(0x0, 0x5, 0x352) 03:16:51 executing program 2: mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6000000) [ 1213.667520][ T39] audit: type=1800 audit(1661311011.027:711): pid=839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=58 res=0 errno=0 03:16:51 executing program 1: pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_OPEN(r0, 0x0, 0x0) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREMOVE(r0, 0x0, 0x0) 03:16:51 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000080)) 03:16:51 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000008340)='syz0\x00', 0x200002, 0x0) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="61202a030000007700"], 0x9) r1 = semget$private(0x0, 0x3, 0x170) semctl$GETNCNT(r1, 0x4, 0xe, 0x0) r2 = msgget(0x0, 0x633) r3 = shmget(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000100)=""/202) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/243) 03:16:51 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r0, 0x0, 0x0) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RAUTH(r0, 0x0, 0x0) 03:16:51 executing program 3: pipe2$9p(&(0x7f0000000500), 0x80800) 03:16:51 executing program 1: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:16:51 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1213.770760][ T39] audit: type=1800 audit(1661311011.137:712): pid=860 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=59 res=0 errno=0 03:16:51 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, &(0x7f0000000180)) 03:16:51 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000002140)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x90) 03:16:51 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f0000000080)=""/19) 03:16:51 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, 0x0, 0x0) 03:16:51 executing program 2: pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1213.878402][ T39] audit: type=1800 audit(1661311011.237:713): pid=876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=60 res=0 errno=0 03:16:51 executing program 1: semget$private(0x0, 0x4, 0x43) 03:16:51 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREAD(r0, 0x0, 0x0) 03:16:51 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000011c0)) 03:16:51 executing program 2: semget(0x3, 0x0, 0x2ac) 03:16:51 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/211) 03:16:51 executing program 3: semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0010000700002b70000000054b0c00ac0065000081049078ac1414bbac1414bb071b9ee0000001ac1414bbe000000100000000ac1e010100000000530bb0b9cf23fefd3a13a29412ccfae68eda263c8247bca41b94f90a84440cb8210a01010100000006442c6773ffffffff00000000ffffffff0000003fac1414bb00000000ac1414aa009fe00000017f0000010a010102640101000000000600000000070b870a010102ac14142600"]}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000180)=@can={0x1d, r0}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f00000016c0)="1acb657b759d3fd3d08254161b42cbe8b76dcee3485b291fce1ef90135fa899ecafdee986dee4d66626ebe914ccece4a1163a4b534cfb0e03beb58a25a47b32f91a069bb51ffbd74048a9212ac55ed3fb5ea27bb164b8155349e8a8784f234bc4f1c5f0e78a838426f9a7b592424b338570e8464a6b2ff955faf861d553c44e2bef33ccb9533c6b6a530d5f60713395c012f4c88f8fd30cf53ecbf96e56912bc0ae340d810a96395", 0xa8}, {&(0x7f00000012c0)="8e5d2500df7d74dae99c09d2faa3db40a5b2950d452e0487fb3acaa537cdd8ea5a9390aebf0f3d563014d3c3656906538b822ecaf5f53574851e767ef5830e86d083c1b7b275352926a2ab343138751620d7c06a08edaae885d6e8c83c5176fa9637e0420aa2464ca8004b3d8d843d40e76cd8", 0x73}, {&(0x7f0000001340)="e97dbd47b89ca53c123923c8e5011304498391ca1858e9afc9fedf033a31fb5f45034668a387759abdf4b9662d2f25d98581abd45dd97191608251bd5391cad5d73537b73d91c3b38ff483695d501f5d8658d89838c8d52ba5cb37ac53cb2a1d9d17d892acf7a59d84b7e2b62fd863a90cc3e6a8a0b0cb9d6fe37ebaaeebcc2b9eb7efe5052e27646888f824e017c32cefdef73de912ba1c6f17d4e599e87a35716a175e74dbb99389deb10fc5ba1671ddd167034e74b3ae659875b8f30cf38b160cc26561d095a31ccf7c79325a2d683d8a0f869d9f430dd660ade98f1bb02c7f24f03e53", 0xe5}], 0x4, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000003}}], 0x78}, 0x800) semget$private(0x0, 0x1, 0x20) r1 = semget(0x3, 0x3, 0x0) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000015c0)=""/107) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) 03:16:51 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000082c0)='cpuset.memory_migrate\x00', 0x2, 0x0) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) [ 1213.995923][ T39] audit: type=1800 audit(1661311011.357:714): pid=892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=61 res=0 errno=0 03:16:51 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) 03:16:51 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10440, 0x0) 03:16:51 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKNOD(r0, 0x0, 0x0) 03:16:51 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/200) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 03:16:51 executing program 1: madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe) [ 1214.106634][ T39] audit: type=1800 audit(1661311011.467:715): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=62 res=0 errno=0 03:16:51 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000280)=""/157) 03:16:51 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 03:16:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 03:16:51 executing program 2: semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000010c0)=""/97) 03:16:51 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r0, 0x0, 0x0) 03:16:51 executing program 1: pipe(&(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_IOCTL(r0, 0x0, 0x0) 03:16:51 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x0, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:51 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) 03:16:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0), 0xfcfb) 03:16:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 03:16:51 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2802, 0x0) [ 1214.244172][ T39] audit: type=1800 audit(1661311011.607:716): pid=948 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=63 res=0 errno=0 03:16:51 executing program 2: semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f00000021c0)=""/222) 03:16:51 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x161, 0x0, 0x0) 03:16:51 executing program 1: semget(0x3, 0x0, 0x1) 03:16:51 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 03:16:52 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREMOVE(r0, 0x0, 0xffffffffffffffe4) 03:16:52 executing program 3: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000004140)={{0x1}}) 03:16:52 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 03:16:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 03:16:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 03:16:52 executing program 3: semget(0x0, 0x0, 0x202) 03:16:52 executing program 1: r0 = shmget(0x1, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/104) 03:16:52 executing program 2: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x800}], 0x1) 03:16:52 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff}) sendmsg$sock(r0, 0x0, 0x0) 03:16:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r0, 0x0, 0x40c26e411fb59046) 03:16:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:52 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r0, 0x0, 0x0) 03:16:52 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 03:16:52 executing program 1: pipe2$9p(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 03:16:52 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x201, 0x0) 03:16:52 executing program 3: semget$private(0x0, 0x1, 0xc) 03:16:52 executing program 1: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADDIR(r0, 0x0, 0x87) 03:16:52 executing program 2: semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000000)=""/155) 03:16:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:52 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r0, 0x0, 0x0) 03:16:52 executing program 1: semget(0x2, 0x2, 0x388) 03:16:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_DIRENTPLUS(r0, 0x0, 0xb0) 03:16:52 executing program 1: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) 03:16:52 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 03:16:52 executing program 2: r0 = semget(0x3, 0x0, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x6}], 0x1) 03:16:52 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r0, 0x3, 0xc, 0x0) 03:16:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:52 executing program 3: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 03:16:52 executing program 2: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0xee01, 0x0, 0xee00, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 03:16:52 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 03:16:52 executing program 3: semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0010000700002b70000000054b0c00ac0065000081049078ac1414bbac1414bb071b9ee0000001ac1414bbe000000100000000ac1e010100000000530bb0b9cf23fefd3a13a29412ccfae68eda263c8247bca41b94f90a84440cb8210a01010100000006442c6773ffffffff00000000ffffffff0000003fac1414bb00000000ac1414aa009fe00000017f0000010a010102640101000000000600000000070b870a010102ac14142600"]}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000180)=@can={0x1d, r0}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f00000016c0)="1acb657b759d3fd3d08254161b42cbe8b76dcee3485b291fce1ef90135fa899ecafdee986dee4d66626ebe914ccece4a1163a4b534cfb0e03beb58a25a47b32f91a069bb51ffbd74048a9212ac55ed3fb5ea27bb164b8155349e8a8784f234bc4f1c5f0e78a838426f9a7b592424b338570e8464a6b2ff955faf861d553c44e2bef33ccb9533c6b6a530d5f60713395c012f4c88f8fd30cf53ecbf96e56912bc0ae340d810a96395", 0xa8}, {&(0x7f00000012c0)="8e5d2500df7d74dae99c09d2faa3db40a5b2950d452e0487fb3acaa537cdd8ea5a9390aebf0f3d563014d3c3656906538b822ecaf5f53574851e767ef5830e86d083c1b7b275352926a2ab343138751620d7c06a08edaae885d6e8c83c5176fa9637e0420aa2464ca8004b3d8d843d40e76cd8", 0x73}, {&(0x7f0000001340)="e97dbd47b89ca53c123923c8e5011304498391ca1858e9afc9fedf033a31fb5f45034668a387759abdf4b9662d2f25d98581abd45dd97191608251bd5391cad5d73537b73d91c3b38ff483695d501f5d8658d89838c8d52ba5cb37ac53cb2a1d9d17d892acf7a59d84b7e2b62fd863a90cc3e6a8a0b0cb9d6fe37ebaaeebcc2b9eb7efe5052e27646888f824e017c32cefdef73de912ba1c6f17d4e599e87a35716a175e74dbb99389deb10fc5ba1671ddd167034e74b3ae659875b8f30cf38b160cc26561d095a31ccf7c79325a2d683d8a0f869d9f430dd660ade98f1bb02c7f24f03e53", 0xe5}], 0x4, &(0x7f0000001480)=[@txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000003}}], 0x78}, 0x800) r1 = semget$private(0x0, 0x1, 0x20) r2 = semget(0x3, 0x3, 0x630) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000015c0)=""/107) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000000)=""/39) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001640)=""/110) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000001540)=""/78) 03:16:52 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:16:52 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) 03:16:52 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERROR(r0, 0x0, 0x0) 03:16:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x0, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:52 executing program 3: pipe(&(0x7f0000004100)={0xffffffffffffffff}) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 03:16:52 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 03:16:52 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x0, 0x0) 03:16:52 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000040)=""/128) 03:16:52 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000140)=""/4096) 03:16:52 executing program 2: semget(0x2, 0x3, 0x80) 03:16:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0xffffffffffffffcb) 03:16:52 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, "0be9c86d8e490c15", "8f53497c35b407bd7e1013613dae674af316c1dcb582af200494b8895b78bf1a", "1289cbee", "b14118f81864589d"}, 0x38) 03:16:52 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 03:16:52 executing program 3: get_mempolicy(0x0, &(0x7f0000000040), 0x917, &(0x7f0000ffd000/0x3000)=nil, 0x3) 03:16:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 03:16:52 executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) 03:16:52 executing program 3: getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 03:16:52 executing program 1: shmget(0x1, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) 03:16:53 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb0ff411f6910b6e6, 0x0) 03:16:53 executing program 1: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) 03:16:53 executing program 3: pipe2$9p(&(0x7f0000000100), 0x80000) 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:53 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f00000010c0)=[{}], 0x1) 03:16:53 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x404c40, 0x0) 03:16:53 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f0000008340)='syz0\x00', 0x200002, 0x0) 03:16:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 03:16:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 03:16:53 executing program 2: pipe(&(0x7f0000004100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_pressure(r0, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) 03:16:53 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:53 executing program 1: pipe(&(0x7f0000004100)) 03:16:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4) 03:16:53 executing program 3: semget$private(0x0, 0x5, 0x204) 03:16:53 executing program 1: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f0000001040)=""/4096) 03:16:53 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x3, &(0x7f0000000200)=@raw=[@generic={0x40}, @map_idx], &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:53 executing program 3: syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) 03:16:53 executing program 1: syz_clone(0x30100000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:16:53 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) 03:16:53 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) 03:16:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f00000000c0)) 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)) 03:16:53 executing program 2: syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000540)=""/51, 0x33, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) 03:16:53 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:16:53 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r0) openat$bsg(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 03:16:53 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001400)={&(0x7f00000013c0)='./file0\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="1800d4430000000000000000000080"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = dup3(r3, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000001740)={{0x1f, 0x8}, 'port0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x1, 0x15}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, 0x0) 03:16:53 executing program 2: syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000540)=""/51, 0x33, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 03:16:53 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="5069b51838366f0c638de67d2fcdf15abb2a4d3c2c6ae4e5718ecc59c96a5d662064a3f5d9d7184faa99ca38da57d48c350155dce822082988333a71baf4637b7edc2b0e252d4525ad892eb2e017e3f8566045f0f001b5de0c61404689443ca298cab2ce5b33814522c6ed98bd7b797ff181eb481bdbed14636a4777a02720740efd162670b31a2aed23744e5bb182bec1", 0x91, 0x0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:53 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/custom1\x00', 0x0, 0x0) 03:16:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x20000000, &(0x7f0000001400)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 03:16:53 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x8, 0x0, 0x40}]}) 03:16:53 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x1041032) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:53 executing program 3: eventfd(0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) 03:16:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:53 executing program 3: syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x6000000, &(0x7f0000001240), 0x0, &(0x7f00000012c0)) 03:16:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 1216.185018][ T1185] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 03:16:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7f") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1216.237132][ T1191] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 03:16:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 1216.278247][ T1195] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 03:16:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000340)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty=0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 1216.311926][ T1198] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. 03:16:53 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7f") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000001ec0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 03:16:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7f") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f7") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f7") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:54 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f7") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1217.574989][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 1217.575086][ T39] audit: type=1800 audit(1661311014.937:735): pid=1251 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=81 res=0 errno=0 03:16:54 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1217.708434][ T39] audit: type=1800 audit(1661311015.067:736): pid=1256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=82 res=0 errno=0 03:16:55 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x1, &(0x7f0000000200)=@raw=[@generic={0x0, 0x6, 0x0, 0x0, 0x7}], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff]}, 0x80) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 03:16:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20842, 0x0) 03:16:55 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) [ 1217.780319][ T1262] loop2: detected capacity change from 0 to 64 03:16:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) [ 1217.850253][ T39] audit: type=1800 audit(1661311015.207:737): pid=1269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=83 res=0 errno=0 03:16:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20842, 0x0) 03:16:55 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1218.029928][ T1275] loop2: detected capacity change from 0 to 64 03:16:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20842, 0x0) [ 1218.207599][ T1281] loop2: detected capacity change from 0 to 64 [ 1218.218046][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1218.224492][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1218.234591][ T39] audit: type=1800 audit(1661311015.597:738): pid=1280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=84 res=0 errno=0 [ 1218.241623][T12365] loop2: unable to read partition table 03:16:55 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20842, 0x0) 03:16:55 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d93") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:55 executing program 3: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001cc0), 0x0, 0x0, 0x0) 03:16:55 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, 0x0) [ 1218.414541][ T1286] loop2: detected capacity change from 0 to 64 03:16:55 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, &(0x7f0000000280)) 03:16:55 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) 03:16:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000200)="67660f38817300b81c008ed00f79a30000b8cd008ee8b818010f00d0bad00466b82000000066ef440f20c0663501000000440f22c066b9e90200000f320fc73bb82b008ee8", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) [ 1218.480948][ T39] audit: type=1800 audit(1661311015.847:739): pid=1292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=85 res=0 errno=0 03:16:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 03:16:55 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) 03:16:55 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d93") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:55 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) 03:16:55 executing program 1: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x4000) [ 1218.656906][ T39] audit: type=1800 audit(1661311016.017:740): pid=1313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=86 res=0 errno=0 03:16:56 executing program 1: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) 03:16:56 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d93") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3c17307ef48b809000000ffffffff0f23c80f21f835040040000f23f88f487886ad900800003a8f8100000000b9f10a0000b800600000ba000000000f3066baf80cb8c394ce80ef66bafc0cecc4e2213d6900660f56c3c744240077000000c744240200000000ff2c2448b8ab000000000000000f23d80f21f835400000100f23f8", 0x82}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1218.811756][ T39] audit: type=1800 audit(1661311016.177:741): pid=1323 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=87 res=0 errno=0 03:16:56 executing program 2: openat$full(0xffffffffffffff9c, 0x0, 0x5c5481, 0x0) 03:16:56 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e27") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 03:16:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3c17307ef48b809000000ffffffff0f23c80f21f835040040000f23f88f487886ad900800003a8f8100000000b9f10a0000b800600000ba000000000f3066baf80cb8c394ce80ef66bafc0cecc4e2213d6900660f56c3c744240077000000c744240200000000ff2c2448b8ab000000000000000f23d80f21f835400000100f23f8", 0x82}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:16:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) [ 1219.137479][ T39] audit: type=1800 audit(1661311016.497:742): pid=1333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=88 res=0 errno=0 03:16:56 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e27") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1219.259211][ T39] audit: type=1800 audit(1661311016.627:743): pid=1346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=89 res=0 errno=0 03:16:56 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e27") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3c17307ef48b809000000ffffffff0f23c80f21f835040040000f23f88f487886ad900800003a8f8100000000b9f10a0000b800600000ba000000000f3066baf80cb8c394ce80ef66bafc0cecc4e2213d6900660f56c3c744240077000000c744240200000000ff2c2448b8ab000000000000000f23d80f21f835400000100f23f8", 0x82}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1219.401406][ T39] audit: type=1800 audit(1661311016.767:744): pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=90 res=0 errno=0 03:16:56 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 03:16:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 03:16:56 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3c17307ef48b809000000ffffffff0f23c80f21f835040040000f23f88f487886ad900800003a8f8100000000b9f10a0000b800600000ba000000000f3066baf80cb8c394ce80ef66bafc0cecc4e2213d6900660f56c3c744240077000000c744240200000000ff2c2448b8ab000000000000000f23d80f21f835400000100f23f8", 0x82}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 03:16:57 executing program 1: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x70, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) 03:16:57 executing program 1: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x70, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 03:16:57 executing program 1: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x70, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 03:16:57 executing program 1: creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x70, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:57 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0) 03:16:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xdb) 03:16:57 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}}) 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:57 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) 03:16:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000002080)=@framed, &(0x7f0000002100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1220.330176][ T1424] loop3: detected capacity change from 0 to 64 03:16:57 executing program 2: syz_mount_image$tmpfs(&(0x7f00000019c0), &(0x7f0000001a00)='./file0\x00', 0x0, 0x0, 0x0, 0x16, &(0x7f0000003d40)) 03:16:57 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) 03:16:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1220.412175][ T1432] loop2: detected capacity change from 0 to 64 [ 1220.421217][ T1433] loop3: detected capacity change from 0 to 64 03:16:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) 03:16:57 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) [ 1220.476454][ T1441] loop2: detected capacity change from 0 to 64 [ 1220.479433][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.496383][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1220.508998][ T1445] loop3: detected capacity change from 0 to 64 [ 1220.511021][T12365] loop2: unable to read partition table [ 1220.513229][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513259][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read 03:16:57 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1220.513306][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513324][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.513376][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513393][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read 03:16:57 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) [ 1220.513429][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513446][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.513482][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513511][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.513570][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513587][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.513640][ T3728] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1220.513666][ T3728] Buffer I/O error on dev loop3, logical block 0, async page read [ 1220.539604][ T3728] loop3: unable to read partition table 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1220.641602][ T1451] loop2: detected capacity change from 0 to 64 03:16:58 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/71, 0x47) 03:16:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1220.761184][ T1456] loop3: detected capacity change from 0 to 64 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 03:16:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(0x0, 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:58 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="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", 0xfffffffffffffdee}, {&(0x7f0000000080)="a752a96ed5457ef9951adbdaa499d9a96322baa5d20e9f6dc85789644cf8f8a48de7062f5e0e87f574ff9a6ceb028f91a821ef9200be11e84da8ea174e7ab5971e67a700aa025a7f2b2071627cd57d6817866db1f7f145f5436bb704b2e481acf78d6c2e528edafd5ba562742709e742b565d1b84cedb970f6575cff6e9aab37bfc7dcbf66042ed97444f652f29f9658616dbaf7d9969c7c351707d90b249fb40c888c6221001c04107e524200d6cdd2bcb269004f102a4a2f660e051a0cde2b20e6f38b0fbaa3e2c9da453aaf44f28a699ee23c9e32e97f1e01456a3e3f69f52f97a774", 0xe4}, {&(0x7f0000000180)="9e374272a3f0b9b2da9343ae81e17996e862b29532a5cff53c971d6b9c1ab51b8c5fef3f9996d7d990b67d47eb544adec739c7510e374391e0577fa4eb8a486ac84396abe2cb45c9f977eae1604463dafc6e0911638f18c3d60e052fe66c2de6925f72f22c3bf99b478f5290d5f54dbc350b6c9cc214c6734830a4136a47f877249b170969ccd7a6d3f57a7f4b71918af8106bdf0b454a5f55c5", 0xffffffffffffffcc}, {&(0x7f0000000240)="62ed384f7e949c882a73acb9c96bef7e75008de627207f80ea4f0019749dd5f1337d002701d4cf205c7f32e8d49d7174d78e54ad1f30b25c", 0x38}], 0x4}, 0x850) 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(0x0, 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) 03:16:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f00000002c0)) 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(0x0, 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) 03:16:58 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:58 executing program 1: syz_open_dev$usbfs(&(0x7f0000000640), 0x0, 0x0) 03:16:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x5, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:16:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 03:16:59 executing program 1: syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x7, 0x0) 03:16:59 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x240040, 0x0) 03:16:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:59 executing program 1: io_setup(0x3, &(0x7f0000000000)) 03:16:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:16:59 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000500)=0xffffffffffffffff, 0x4) 03:16:59 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x3, 0x0, {0xffffffffffffffff}}) 03:16:59 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x3, &(0x7f0000000200)=@raw=[@generic={0x40, 0x6}, @map_idx={0x18, 0x8}], &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x7}, 0x8, 0x10, &(0x7f00000012c0), 0x10}, 0x80) 03:16:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 03:16:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 03:16:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/115, 0x73) [ 1222.099116][ T1557] loop1: detected capacity change from 0 to 64 03:16:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/115, 0x73) 03:16:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 03:16:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) [ 1222.292195][ T1564] loop1: detected capacity change from 0 to 64 03:16:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/115, 0x73) 03:16:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1222.403845][ T1573] loop1: detected capacity change from 0 to 64 03:16:59 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) getdents64(r0, &(0x7f0000000140)=""/115, 0x73) 03:16:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 1222.474057][ T1578] loop1: detected capacity change from 0 to 64 [ 1222.475636][T12365] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1222.485716][T12365] Buffer I/O error on dev loop1, logical block 0, async page read [ 1222.496413][T12365] loop1: unable to read partition table 03:16:59 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0x0, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:16:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) signalfd4(r0, &(0x7f00000006c0), 0x8, 0x0) [ 1222.624177][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 1222.624193][ T39] audit: type=1800 audit(1661311019.987:766): pid=1588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=112 res=0 errno=0 03:17:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:00 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000180)="df87", 0xfffff, r0) 03:17:00 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0x0, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:00 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getdents64(r0, &(0x7f0000000140)=""/115, 0x73) 03:17:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 1222.709828][ T1597] loop1: detected capacity change from 0 to 64 03:17:00 executing program 1: add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 1222.762236][ T39] audit: type=1800 audit(1661311020.127:767): pid=1605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=113 res=0 errno=0 03:17:00 executing program 1: io_setup(0x3, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:17:00 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0x0, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1222.884832][ T39] audit: type=1800 audit(1661311020.247:768): pid=1610 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=114 res=0 errno=0 03:17:00 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:00 executing program 1: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:17:00 executing program 2: syz_clone3(&(0x7f00000003c0)={0x200100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) 03:17:00 executing program 2: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 03:17:00 executing program 3: pipe2$9p(0x0, 0x86880) 03:17:00 executing program 2: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='batadv_slave_1\x00') 03:17:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 03:17:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), 0x9) [ 1223.208746][ T39] audit: type=1800 audit(1661311020.567:769): pid=1627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=115 res=0 errno=0 03:17:00 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:00 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)) 03:17:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0xc018aec0, &(0x7f00000005c0)) 03:17:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0x3f}, 'port0\x00'}) 03:17:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:17:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000440)={'veth1_to_hsr\x00'}) 03:17:00 executing program 3: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='&\x00', 0xfffffffffffffff8) [ 1223.340032][ T1642] binder: 1641:1642 ioctl c0306201 20001480 returned -14 [ 1223.345980][ T39] audit: type=1400 audit(1661311020.707:770): avc: denied { call } for pid=1641 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1223.346301][ T1642] binder_alloc: 1641: binder_alloc_buf, no vma 03:17:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1223.398594][ T39] audit: type=1800 audit(1661311020.767:771): pid=1645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=116 res=0 errno=0 [ 1223.433573][ T1648] binder: 1647:1648 ioctl c0306201 20001480 returned -14 [ 1223.440819][ T1648] binder_alloc: 1647: binder_alloc_buf, no vma 03:17:00 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0xc018aec0, &(0x7f00000005c0)) 03:17:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:17:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1223.489812][ T1655] binder: 1654:1655 ioctl c0306201 20001480 returned -14 [ 1223.495897][ T1655] binder_alloc: 1654: binder_alloc_buf, no vma [ 1223.504544][ T1652] binder: BINDER_SET_CONTEXT_MGR already set 03:17:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1223.519012][ T1652] binder: 1650:1652 ioctl 4018620d 20000000 returned -16 [ 1223.526905][ T1652] binder: 1650:1652 ioctl c0306201 20001480 returned -14 [ 1223.549197][ T39] audit: type=1800 audit(1661311020.917:772): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=117 res=0 errno=0 03:17:00 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1223.571380][ T1661] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.575739][ T1661] binder: 1659:1661 ioctl 4018620d 20000000 returned -16 [ 1223.582246][ T1661] binder: 1659:1661 ioctl c0306201 20001480 returned -14 [ 1223.583928][ T1663] binder: 1662:1663 ioctl c0306201 20001480 returned -14 03:17:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) [ 1223.607496][ T1663] binder_alloc: 1662: binder_alloc_buf, no vma 03:17:00 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:01 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:17:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0xc018aec0, &(0x7f00000005c0)) [ 1223.663224][ T1669] binder: 1668:1669 ioctl c0306201 20001480 returned -14 [ 1223.669023][ T1669] binder_alloc: 1668: binder_alloc_buf, no vma 03:17:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fallocate(0xffffffffffffffff, 0x100000011, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000140)="f74870ae00660f388039660fe2360b00dbd7baf80c66b8263a868066efbafc0cec36670f01c366b9240200000f3266b92d0b000066b80000008066ba000000000f3066b9800000c00f326635002000000f3066b9b008000066b8d2e2fcca66ba000000000f30", 0x66}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1223.717778][ T39] audit: type=1800 audit(1661311021.077:773): pid=1679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=118 res=0 errno=0 03:17:01 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0xc018aec0, &(0x7f00000005c0)) [ 1223.886991][ T39] audit: type=1800 audit(1661311021.247:774): pid=1685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=119 res=0 errno=0 03:17:01 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1224.015670][ T39] audit: type=1800 audit(1661311021.377:775): pid=1692 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=120 res=0 errno=0 03:17:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_clone(0x100000, &(0x7f00000000c0)="58ff03b5804ad9fd183122e84a5129fb81753124a1d24cdad45fc94c1dbf5e3f2f3848dbb3e92129e991d5390ad27f3316c34581b57d9f344f5c0499fd81cf3df728520e31ff88f48357d7764052658529662843c1ace8c4f541df837cfc94", 0x5f, &(0x7f0000000140), &(0x7f0000000180), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f00000002c0)=0xffff0000) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) 03:17:01 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:01 executing program 1: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000200)=[{r0}, {}, {r1, 0x4300}], 0x3, 0x0, &(0x7f0000000280)={[0x2]}, 0x8) 03:17:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 03:17:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 03:17:01 executing program 3: socketpair(0x2, 0xa, 0x4a2c, &(0x7f00000000c0)) 03:17:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:17:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:17:02 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:17:02 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 03:17:02 executing program 3: openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) 03:17:02 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 03:17:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 03:17:03 executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f00000002c0)=0xffffffff) 03:17:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) 03:17:03 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:03 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:17:03 executing program 3: request_key(&(0x7f0000000000)='cifs.idmap\x00', 0x0, 0x0, 0xfffffffffffffff8) 03:17:03 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) semget(0x0, 0x4, 0x789) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x2, 0x800, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd2, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80004}, 0x20000c5) r3 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) semget(0x2, 0x4, 0x102) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x8c, 0x2a, [@supported_rates, @ssid={0x0, 0x3, @random="5c9d02"}, @supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0x6c}, {0x5ce6fc514e47b9a4, 0x1}, {0x1b, 0x1}, {0xc, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x51, @not_ext={{}, 0x1f, 0x0, 0x5, @device_b, 0x5, "", 0x1, 0x3f, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xe5d8}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}}, {{0x1}, @broadcast, 0xff}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0xfa}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0xc814) 03:17:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 03:17:04 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 03:17:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) semget(0x0, 0x4, 0x789) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x2, 0x800, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd2, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80004}, 0x20000c5) r3 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) semget(0x2, 0x4, 0x102) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x8c, 0x2a, [@supported_rates, @ssid={0x0, 0x3, @random="5c9d02"}, @supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0x6c}, {0x5ce6fc514e47b9a4, 0x1}, {0x1b, 0x1}, {0xc, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x51, @not_ext={{}, 0x1f, 0x0, 0x5, @device_b, 0x5, "", 0x1, 0x3f, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xe5d8}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}}, {{0x1}, @broadcast, 0xff}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0xfa}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0xc814) 03:17:04 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r3 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) semget(0x0, 0x4, 0x789) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x2, 0x800, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd2, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80004}, 0x20000c5) r3 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) semget(0x2, 0x4, 0x102) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x8c, 0x2a, [@supported_rates, @ssid={0x0, 0x3, @random="5c9d02"}, @supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0x6c}, {0x5ce6fc514e47b9a4, 0x1}, {0x1b, 0x1}, {0xc, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x51, @not_ext={{}, 0x1f, 0x0, 0x5, @device_b, 0x5, "", 0x1, 0x3f, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xe5d8}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}}, {{0x1}, @broadcast, 0xff}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0xfa}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0xc814) 03:17:04 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:04 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, 0x0, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020) 03:17:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) semget(0x0, 0x4, 0x789) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x2, 0x800, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000080)={0x0, 0xffffffffffffffd2, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80004}, 0x20000c5) r3 = syz_open_dev$vcsn(&(0x7f0000001a80), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) semget(0x2, 0x4, 0x102) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe4, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x59}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x8c, 0x2a, [@supported_rates, @ssid={0x0, 0x3, @random="5c9d02"}, @supported_rates={0x1, 0x8, [{0x6, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x9, 0x1}, {0x6c}, {0x5ce6fc514e47b9a4, 0x1}, {0x1b, 0x1}, {0xc, 0x1}]}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x51, @not_ext={{}, 0x1f, 0x0, 0x5, @device_b, 0x5, "", 0x1, 0x3f, 0x5, [{{0x0, 0x0, 0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xe5d8}, {{0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}}, {{0x1}, @broadcast, 0xff}]}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @channel_switch={0x25, 0x3, {0x0, 0x74, 0xfa}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000}, 0xc814) [ 1227.740182][ T39] kauditd_printk_skb: 8 callbacks suppressed 03:17:05 executing program 1: openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) [ 1227.740202][ T39] audit: type=1800 audit(1661311025.107:784): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=129 res=0 errno=0 03:17:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)) 03:17:05 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 2: add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) 03:17:05 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 03:17:05 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r0) 03:17:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000004f00000008000300", @ANYRES32=r3, @ANYBLOB="34007a800800040096d500000c00030099065a9cc870e9f70800040000000000140001"], 0x50}}, 0x0) 03:17:05 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 03:17:05 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r0) 03:17:05 executing program 3: openat$nvram(0xffffffffffffff9c, 0x0, 0x420280, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) [ 1227.924070][ T39] audit: type=1800 audit(1661311025.287:785): pid=1829 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=130 res=0 errno=0 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x100000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="00cf0ab6a3fe55cbf4f0227f23276dc62ae4d5c5b184ff1e9fd78dc9267d86645c4af7e95ea475cefb190051d306f10d") 03:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) 03:17:05 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x100000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="00cf0ab6a3fe55cbf4f0227f23276dc62ae4d5c5b184ff1e9fd78dc9267d86645c4af7e95ea475cefb190051d306f10d") 03:17:05 executing program 1: signalfd4(0xffffffffffffffff, &(0x7f00000006c0), 0x8, 0x0) 03:17:05 executing program 3: syz_mount_image$tmpfs(&(0x7f00000019c0), &(0x7f0000001a00)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000003d40)) [ 1228.046709][ T39] audit: type=1800 audit(1661311025.407:786): pid=1846 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=131 res=0 errno=0 03:17:05 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$alg(r0, 0x0, 0x0) 03:17:05 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x100000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="00cf0ab6a3fe55cbf4f0227f23276dc62ae4d5c5b184ff1e9fd78dc9267d86645c4af7e95ea475cefb190051d306f10d") 03:17:05 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) select(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000280)) 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x240040, 0x0) 03:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f}}) 03:17:05 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x100000, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="00cf0ab6a3fe55cbf4f0227f23276dc62ae4d5c5b184ff1e9fd78dc9267d86645c4af7e95ea475cefb190051d306f10d") 03:17:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1805, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x48) [ 1228.166601][ T39] audit: type=1800 audit(1661311025.527:787): pid=1867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=132 res=0 errno=0 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 03:17:05 executing program 1: select(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000280)) 03:17:05 executing program 2: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001cc0), &(0x7f0000001d00)={'enc=', 'raw', ' hash=', {'sha224-ssse3\x00'}}, 0x0, 0x0) 03:17:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x140}}}}, 0x20}}, 0x0) 03:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f}}) 03:17:05 executing program 1: syz_clone3(&(0x7f00000003c0)={0x200100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:17:05 executing program 1: syz_open_dev$usbfs(&(0x7f0000000640), 0x0, 0x82000) [ 1228.360244][ T39] audit: type=1800 audit(1661311025.727:788): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=133 res=0 errno=0 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/custom1\x00', 0x800, 0x0) 03:17:05 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x101080) 03:17:05 executing program 2: ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x0, 0x0, 0x3f, 0x0, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r0) openat$bsg(0xffffffffffffff9c, 0x0, 0x8003, 0x0) 03:17:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) [ 1228.479204][ T39] audit: type=1400 audit(1661311025.847:789): avc: denied { watch watch_reads } for pid=1898 comm="syz-executor.1" path="/syzkaller-testdir2276082467/syzkaller.CmMbrL/2396" dev="sda1" ino=1144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 1228.565064][ T39] audit: type=1800 audit(1661311025.927:790): pid=1901 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=134 res=0 errno=0 03:17:05 executing program 2: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) 03:17:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f}}) 03:17:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000390000ff00000000000600007f000600002fbad10fcfce0819ee000023a20000000001000000000009aaffe700000000ad0000000a"]) 03:17:05 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x9, 0xffffffff, 0x9, 0x101], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f00000002c0)=0xffff0000) dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) 03:17:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x9, 0xffffffff, 0x9, 0x101], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f00000002c0)=0xffff0000) dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) [ 1228.690043][ T39] audit: type=1800 audit(1661311026.057:791): pid=1920 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=135 res=0 errno=0 03:17:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x9, 0xffffffff, 0x9, 0x101], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f00000002c0)=0xffff0000) dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) 03:17:06 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'bond_slave_0\x00'}) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x9, 0xffffffff, 0x9, 0x101], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f00000002c0)=0xffff0000) dup2(r1, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000040)) 03:17:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f}}) [ 1228.801044][ T39] audit: type=1800 audit(1661311026.167:792): pid=1930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=136 res=0 errno=0 03:17:06 executing program 1: r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, 0x0, 0x0) 03:17:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) 03:17:06 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:06 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) 03:17:06 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x3, &(0x7f0000000200)=@raw=[@generic={0x40, 0x6, 0x0, 0x101, 0x7}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}], &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0xc, 0x0, 0x12e1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$bsg(0xffffffffffffff9c, &(0x7f00000022c0), 0x8003, 0x0) 03:17:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000640)) 03:17:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) [ 1228.986403][ T39] audit: type=1800 audit(1661311026.347:793): pid=1946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=137 res=0 errno=0 [ 1229.010807][ T1950] binder: 1947:1950 ioctl 400c620e 20000640 returned -22 03:17:06 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:06 executing program 2: select(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0) 03:17:06 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 03:17:06 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380), 0xc000, 0x0) 03:17:06 executing program 3: syz_mount_image$nfs4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)) 03:17:06 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:06 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/custom1\x00', 0x0, 0x0) 03:17:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)) 03:17:06 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1]}, 0x80) 03:17:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:07 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:07 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0x100}) 03:17:07 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0x100}) 03:17:07 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:07 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0x100}) 03:17:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:08 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:08 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x5, 0x100}) 03:17:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) 03:17:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x90}}, 0x5845) 03:17:08 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101202, 0x0) 03:17:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:08 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}}) 03:17:08 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x100, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f00000022c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 03:17:08 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x7, r0, 0x0) 03:17:08 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x0, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:08 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 03:17:08 executing program 2: pipe2$watch_queue(0x0, 0x80) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 03:17:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x0, 0x84}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0x10}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x3f}}) 03:17:09 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0x3ffeff, 0x4) 03:17:09 executing program 1: request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) 03:17:09 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000180)={{r0}}) 03:17:09 executing program 1: select(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 03:17:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)) 03:17:09 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:09 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000200)='./file0\x00', r2, 0xee00, 0x0) 03:17:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000740)=""/197, 0x1a, 0xc5, 0x1}, 0x20) 03:17:09 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x300, 0x70bd29, 0x0, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) [ 1232.047597][ T2099] loop3: detected capacity change from 0 to 64 03:17:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0x5}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xca, &(0x7f00000001c0)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:17:09 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8912, &(0x7f0000000080)={'wlan0\x00'}) 03:17:10 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x61c0, 0x0) 03:17:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{0x8}]}) 03:17:10 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:10 executing program 3: syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:17:10 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) 03:17:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3c17307ef48b809000000ffffffff0f23c80f21f835040040000f23f88f487886ad900800003a8f8100000000b9f10a0000b800600000ba000000000f3066baf80cb8c394ce80ef66bafc0cecc4e2213d6900660f56c3c744240077000000c744240200000000ff2c2448b8ab000000000000000f23d80f21f835400000100f23f8", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:17:10 executing program 3: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 03:17:10 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 1232.758625][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 1232.758771][ T39] audit: type=1800 audit(1661311030.127:806): pid=2119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=151 res=0 errno=0 03:17:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xca, &(0x7f00000001c0)=""/202, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:17:10 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x1, &(0x7f0000000200)=@raw=[@generic], &(0x7f0000000240)='GPL\x00', 0x0, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:17:10 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:10 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 03:17:10 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) [ 1232.905721][ T39] audit: type=1800 audit(1661311030.267:807): pid=2139 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=152 res=0 errno=0 03:17:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 03:17:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 03:17:10 executing program 0: ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x800, "ed1e5400000000007f0000000000090700000500"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r0, 0x894b, &(0x7f0000000580)="ea88b8cef641ab9ae7132818df92c905f9e04e40640d0a3eb12f7c2f57f7be6f663cd12fed0e8d35282cefcaa8de7fd8d9c25c0ce56563af5ad2448ad50743e0a774c3d074f76a974831ef581a35cfe1f700b533947b6d936e7e276c61") r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800002, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x8ca0, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xe, 0x5ee}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xd1a]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x60011) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x0, 0x6, 0x0, 0x3, 0x6, 0x3, 0x5, 0xfffffffc, 0x100}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x100}, 0x1c) sched_setattr(0x0, &(0x7f0000000500)={0xffffffffffffff38, 0x6, 0x8, 0x200008, 0x9fa, 0x200, 0x8, 0x1, 0x1, 0x28ba}, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000380)=""/122) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) 03:17:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="f3c17307ef48b809000000ffffffff0f23c80f21f835040040000f23f88f487886ad900800003a8f8100000000b9f10a0000b800600000ba000000000f3066baf80cb8c394ce80ef66bafc0cecc4e2213d6900660f56c3c744240077000000c744240200000000ff2c2448b8ab000000000000000f23d80f21f835400000100f23f8", 0x82}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1233.034962][ T2144] binder: 2141:2144 ioctl c0306201 20001480 returned -14 [ 1233.042899][ T39] audit: type=1400 audit(1661311030.407:808): avc: denied { map } for pid=2141 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1233.046151][ T2144] ------------[ cut here ]------------ 03:17:10 executing program 2: chown(&(0x7f0000000000)='.\x00', 0x0, 0x0) [ 1233.067088][ T2144] WARNING: CPU: 3 PID: 2144 at include/linux/mmap_lock.h:155 find_vma+0xf8/0x270 [ 1233.084380][ T2144] Modules linked in: 03:17:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) [ 1233.088908][ T2144] CPU: 3 PID: 2144 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-00036-g95607ad99b5a #0 [ 1233.101381][ T2144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1233.110590][ T39] audit: type=1800 audit(1661311030.477:809): pid=2152 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=153 res=0 errno=0 [ 1233.111460][ T2144] RIP: 0010:find_vma+0xf8/0x270 [ 1233.130548][ T2144] Code: 49 8d bc 24 28 01 00 00 be ff ff ff ff e8 10 4c c9 07 31 ff 89 c3 89 c6 e8 85 45 c5 ff 85 db 0f 85 61 ff ff ff e8 b8 48 c5 ff <0f> 0b e9 55 ff ff ff e8 ac 48 c5 ff 4c 89 e7 e8 04 32 fb ff 0f 0b [ 1233.144506][ T2144] RSP: 0018:ffffc90003f67530 EFLAGS: 00010212 03:17:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8001, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) unlink(&(0x7f0000000140)='./file0\x00') [ 1233.149535][ T2144] RAX: 000000000000083f RBX: 0000000000000000 RCX: ffffc90003261000 [ 1233.157302][ T2144] RDX: 0000000000040000 RSI: ffffffff81b5f168 RDI: 0000000000000005 [ 1233.165334][ T2144] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 1233.172824][ T2144] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801f4528c0 [ 1233.174864][ T2157] loop2: detected capacity change from 0 to 64 [ 1233.179119][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179163][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179281][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179299][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179335][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179352][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179388][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179405][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179440][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179457][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179511][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179528][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179581][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179597][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179633][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179650][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179685][T12365] ldm_validate_partition_table(): Disk read failed. [ 1233.179766][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179783][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179831][T12365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.179849][T12365] Buffer I/O error on dev loop2, logical block 0, async page read [ 1233.179931][T12365] Dev loop2: unable to read RDB block 0 [ 1233.180010][ T2144] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1233.180051][ T2144] FS: 00007f4fc1554700(0000) GS:ffff88802c900000(0000) knlGS:0000000000000000 [ 1233.180089][ T2144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1233.180104][ T2144] CR2: 0000001b33a23000 CR3: 00000000492f1000 CR4: 0000000000152ee0 [ 1233.180113][ T2144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1233.180122][ T2144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1233.180132][ T2144] Call Trace: [ 1233.180139][ T2144] [ 1233.180145][ T2144] binder_alloc_new_buf+0xd6/0x18b0 [ 1233.180377][ T2144] binder_transaction+0x242e/0x9a80 [ 1233.180393][ T2144] ? unwind_next_frame+0xfa9/0x1cc0 [ 1233.180479][ T2144] ? __lock_acquire+0x166e/0x56d0 [ 1233.180529][ T2144] ? binder_deferred_func+0x1150/0x1150 [ 1233.180544][ T2144] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1233.180559][ T2144] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1233.180574][ T2144] ? find_held_lock+0x2d/0x110 [ 1233.180601][ T2144] ? __might_fault+0xd1/0x170 [ 1233.180627][ T2144] ? lock_downgrade+0x6e0/0x6e0 [ 1233.180642][ T2144] binder_thread_write+0x8a9/0x3220 [ 1233.180667][ T2144] ? binder_transaction+0x9a80/0x9a80 [ 1233.180680][ T2144] ? find_held_lock+0x2d/0x110 [ 1233.180697][ T2144] ? binder_debug+0xb2/0x160 [ 1233.180716][ T2144] ? __traceiter_binder_return+0xa0/0xa0 [ 1233.180732][ T2144] ? lock_downgrade+0x6e0/0x6e0 [ 1233.180746][ T2144] binder_ioctl+0x3470/0x6d00 [ 1233.180760][ T2144] ? tomoyo_path_number_perm+0x24e/0x590 [ 1233.180935][ T2144] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1233.180953][ T2144] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 1233.181198][ T2144] ? binder_thread_write+0x3220/0x3220 [ 1233.181214][ T2144] ? do_vfs_ioctl+0x132/0x15c0 [ 1233.181281][ T2144] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1233.181296][ T2144] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 1233.181317][ T2144] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 1233.181331][ T2144] ? selinux_inode_getsecctx+0x90/0x90 [ 1233.181348][ T2144] ? __ct_user_exit+0xff/0x150 [ 1233.181461][ T2144] ? selinux_file_ioctl+0xb1/0x270 [ 1233.181474][ T2144] ? binder_thread_write+0x3220/0x3220 [ 1233.181488][ T2144] __x64_sys_ioctl+0x193/0x200 [ 1233.181504][ T2144] do_syscall_64+0x35/0xb0 [ 1233.181528][ T2144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1233.181553][ T2144] RIP: 0033:0x7f4fc0489279 [ 1233.181585][ T2144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1233.181599][ T2144] RSP: 002b:00007f4fc1554168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.181615][ T2144] RAX: ffffffffffffffda RBX: 00007f4fc059bf80 RCX: 00007f4fc0489279 [ 1233.181626][ T2144] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1233.181635][ T2144] RBP: 00007f4fc04e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1233.181644][ T2144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.181654][ T2144] R13: 00007ffe49f3296f R14: 00007f4fc1554300 R15: 0000000000022000 [ 1233.181674][ T2144] [ 1233.181698][ T2144] Kernel panic - not syncing: panic_on_warn set ... [ 1233.181706][ T2144] CPU: 1 PID: 2144 Comm: syz-executor.3 Not tainted 6.0.0-rc2-syzkaller-00036-g95607ad99b5a #0 [ 1233.181721][ T2144] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1233.181729][ T2144] Call Trace: [ 1233.181734][ T2144] [ 1233.181738][ T2144] dump_stack_lvl+0xcd/0x134 [ 1233.181826][ T2144] panic+0x2c8/0x627 [ 1233.181944][ T2144] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1233.181961][ T2144] ? __warn.cold+0x248/0x2c4 [ 1233.181975][ T2144] ? find_vma+0xf8/0x270 [ 1233.181987][ T2144] __warn.cold+0x259/0x2c4 [ 1233.182001][ T2144] ? find_vma+0xf8/0x270 [ 1233.182013][ T2144] report_bug+0x1bc/0x210 [ 1233.182098][ T2144] handle_bug+0x3c/0x60 [ 1233.182111][ T2144] exc_invalid_op+0x14/0x40 [ 1233.182125][ T2144] asm_exc_invalid_op+0x16/0x20 [ 1233.182147][ T2144] RIP: 0010:find_vma+0xf8/0x270 [ 1233.182161][ T2144] Code: 49 8d bc 24 28 01 00 00 be ff ff ff ff e8 10 4c c9 07 31 ff 89 c3 89 c6 e8 85 45 c5 ff 85 db 0f 85 61 ff ff ff e8 b8 48 c5 ff <0f> 0b e9 55 ff ff ff e8 ac 48 c5 ff 4c 89 e7 e8 04 32 fb ff 0f 0b [ 1233.182174][ T2144] RSP: 0018:ffffc90003f67530 EFLAGS: 00010212 [ 1233.182185][ T2144] RAX: 000000000000083f RBX: 0000000000000000 RCX: ffffc90003261000 [ 1233.182219][ T2144] RDX: 0000000000040000 RSI: ffffffff81b5f168 RDI: 0000000000000005 [ 1233.182229][ T2144] RBP: 0000000020ffa000 R08: 0000000000000005 R09: 0000000000000000 [ 1233.182238][ T2144] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801f4528c0 [ 1233.182247][ T2144] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1233.182256][ T2144] ? find_vma+0xf8/0x270 [ 1233.182270][ T2144] binder_alloc_new_buf+0xd6/0x18b0 [ 1233.182284][ T2144] binder_transaction+0x242e/0x9a80 [ 1233.182299][ T2144] ? unwind_next_frame+0xfa9/0x1cc0 [ 1233.182315][ T2144] ? __lock_acquire+0x166e/0x56d0 [ 1233.182328][ T2144] ? binder_deferred_func+0x1150/0x1150 [ 1233.182341][ T2144] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1233.182355][ T2144] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1233.182369][ T2144] ? find_held_lock+0x2d/0x110 [ 1233.182385][ T2144] ? __might_fault+0xd1/0x170 [ 1233.182400][ T2144] ? lock_downgrade+0x6e0/0x6e0 [ 1233.182414][ T2144] binder_thread_write+0x8a9/0x3220 [ 1233.182427][ T2144] ? binder_transaction+0x9a80/0x9a80 [ 1233.182439][ T2144] ? find_held_lock+0x2d/0x110 [ 1233.182454][ T2144] ? binder_debug+0xb2/0x160 [ 1233.182469][ T2144] ? __traceiter_binder_return+0xa0/0xa0 [ 1233.182483][ T2144] ? lock_downgrade+0x6e0/0x6e0 [ 1233.182496][ T2144] binder_ioctl+0x3470/0x6d00 [ 1233.182509][ T2144] ? tomoyo_path_number_perm+0x24e/0x590 [ 1233.182533][ T2144] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1233.182550][ T2144] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 1233.182566][ T2144] ? binder_thread_write+0x3220/0x3220 [ 1233.182588][ T2144] ? do_vfs_ioctl+0x132/0x15c0 [ 1233.182602][ T2144] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1233.182616][ T2144] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x400 [ 1233.182630][ T2144] ? ioctl_has_perm.constprop.0.isra.0+0x2a4/0x400 [ 1233.182644][ T2144] ? selinux_inode_getsecctx+0x90/0x90 [ 1233.182656][ T2144] ? __ct_user_exit+0xff/0x150 [ 1233.182669][ T2144] ? selinux_file_ioctl+0xb1/0x270 [ 1233.182681][ T2144] ? binder_thread_write+0x3220/0x3220 [ 1233.182693][ T2144] __x64_sys_ioctl+0x193/0x200 [ 1233.182708][ T2144] do_syscall_64+0x35/0xb0 [ 1233.182721][ T2144] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1233.182735][ T2144] RIP: 0033:0x7f4fc0489279 [ 1233.182746][ T2144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1233.182758][ T2144] RSP: 002b:00007f4fc1554168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1233.182771][ T2144] RAX: ffffffffffffffda RBX: 00007f4fc059bf80 RCX: 00007f4fc0489279 [ 1233.182780][ T2144] RDX: 0000000020000680 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1233.182789][ T2144] RBP: 00007f4fc04e3189 R08: 0000000000000000 R09: 0000000000000000 [ 1233.182797][ T2144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.182806][ T2144] R13: 00007ffe49f3296f R14: 00007f4fc1554300 R15: 0000000000022000 [ 1233.182825][ T2144] [ 1233.184751][ T2144] Kernel Offset: disabled [ 1233.829912][ T2144] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:17:11 Registers: info registers vcpu 0 RAX=0000000000844b69 RBX=ffffffff8bcbc980 RCX=ffffffff897f4825 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffffff8bc07e18 R8 =0000000000000001 R9 =ffff88802c834c4b R10=ffffed1005906989 R11=0000000000000001 R12=fffffbfff1797930 R13=0000000000000000 R14=ffffffff8dddf3d0 R15=0000000000000000 RIP=ffffffff89824e5b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000a038 CR3=00000000727e6000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880006c40c0 RCX=0000000000000100 RDX=0000000000000000 RSI=ffffffff87d6fa3d RDI=ffff8880006c44fc RBP=ffff8880006c40c0 RSP=ffffc90000748b48 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff8880006c40c0 R13=0000000000000001 R14=0000000000000001 R15=ffff88801b2aa200 RIP=ffffffff81667859 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 00007eff5b532700 000fffff 00000000 GS =0000 ffff88802c900000 000fffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f753819d0b0 CR3=00000000727e6000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000005 RBX=0000000000000002 RCX=1ffffffff2123b36 RDX=0000000000000003 RSI=ffff8880403eeb48 RDI=ffff8880403ee080 RBP=0000000000000002 RSP=ffffc9000301f830 R8 =0000000000000000 R9 =ffffffff908da9f7 R10=0000000000000001 R11=0000000000000000 R12=ffff8880403ee080 R13=dffffc0000000000 R14=ffff8880403eeaf8 R15=ffff888028bda4c8 RIP=ffffffff815e3b0a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555556ae8400 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffef5c56e08 CR3=000000006f00f000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=0000000000000000093757a37f548de0 XMM02=00000000000000005931608782dc365e XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84614151 RDI=ffffffff914810c0 RBP=ffffffff91481080 RSP=ffffc90003f66ed0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000036 R14=ffffffff846140f0 R15=0000000000000000 RIP=ffffffff8461417b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f4fc1554700 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33824000 CR3=00000000492f1000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000