last executing test programs: 36m23.309101536s ago: executing program 32 (id=346): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 36m22.79673499s ago: executing program 33 (id=345): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0xd, 0x1003, 0x4, 0x80000000, 0x3, 0xd, 0x0, 0x40000, 0x840003, 0x1}) 36m22.332591122s ago: executing program 34 (id=344): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003400)=@getsadinfo={0xbc, 0x23, 0x1, 0x70bd29, 0x25dfdbff, 0x0, [@policy={0xa8, 0x7, {{@in=@local, @in=@remote, 0x4e24, 0x3ff, 0x4e21, 0x75d9, 0xa, 0xa0, 0xa0, 0xd}, {0x8, 0x7fffffffffffffff, 0x400, 0x5b, 0x2, 0xffffffff, 0x65, 0xb}, {0x4a0, 0x8750, 0xe00000, 0x9}, 0x2, 0x6e6bb0, 0x1, 0x1, 0x3, 0x3}}]}, 0xbc}}, 0x40000) syz_usb_control_io(r0, &(0x7f0000000b80)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) 36m21.889142494s ago: executing program 35 (id=328): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x13020210) keyctl$read(0xb, r2, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 36m21.428101126s ago: executing program 36 (id=343): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000071c0), 0x0, 0x4000) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 33m29.781620421s ago: executing program 37 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002068101000000000000000000000000050005000200000005000100070000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 32m12.702892344s ago: executing program 38 (id=773): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0x7ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079121000000001009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x5}, {0x0, 0x7, 0x80, '\x00', 0x5}, {0x7, 0x3, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x7, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6, 0xfe, '\x00', 0x7f}, {0x0, 0x0, 0x41}, {0x0, 0x7f, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000380)={0x7, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) 30m49.692269828s ago: executing program 39 (id=919): socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f0000000300)) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0x7ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000079121000000001009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000140)={0x0, 0x0, @ioapic={0x1000, 0x0, 0x7fffffff, 0xeffffdff, 0x0, [{0x9, 0xff}, {0x15, 0x3, 0x5}, {0x8}, {0x0, 0x0, 0x7d}, {}, {0x81, 0x65, 0x5}, {0x0, 0x0, 0x2f, '\x00', 0x3}, {}, {0x0, 0x33, 0xfa, '\x00', 0x8}, {0x2, 0x5}, {0xff, 0x5, 0x0, '\x00', 0x10}, {0x0, 0x8, 0xff, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x3, 0x0, 0x0, '\x00', 0xc0}, {0xfc, 0xa, 0x0, '\x00', 0x5}, {0x0, 0x7, 0x80, '\x00', 0x5}, {0x7, 0x3, 0x7f, '\x00', 0xfe}, {0x5, 0x0, 0x7, '\x00', 0x40}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x27}, {0x58, 0x6, 0xfe, '\x00', 0x7f}, {0x0, 0x0, 0x41}, {0x0, 0x7f, 0x9}, {0x0, 0x0, 0x7}]}}) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f0000000380)={0x7, 0x8}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x8000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 30m44.779618184s ago: executing program 40 (id=931): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e20, 0xbe, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x2}, r2, 0x5}}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x4000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$radio(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4820) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000140)={0x3, 0x2}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES8], 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) socket$unix(0x1, 0x2, 0x0) 30m40.743178627s ago: executing program 41 (id=937): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0xc, 0x8, 0x2, 0x7}, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8, 0x20040, 0x2000) add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) poll(&(0x7f0000000040)=[{r2, 0x2124}, {r2, 0xb0c4}], 0x2, 0x11ff) shutdown(r2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x400c4152, &(0x7f0000000540)={0x0, 0x0, 0x6}) 30m6.645302336s ago: executing program 42 (id=975): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x4}, @private2, @loopback, 0x1, 0x0, 0x6, 0x400, 0xcbb0, 0x4010201}) 29m45.221248554s ago: executing program 43 (id=981): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x1, &(0x7f0000000040)) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d09901020301090236000100"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) sendmmsg$sock(r3, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3c}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x60}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{0x0}, {&(0x7f00000028c0)="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", 0x3f0}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b412b02944f33bb11bf25486b1", 0xc7}, {&(0x7f0000001940)}], 0x4}}, {{&(0x7f0000001ac0)=@llc={0x1a, 0x1, 0x6, 0x3, 0xe, 0xfe, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001c40)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0x78}}], 0x3, 0x0) ioctl$int_in(r1, 0x5452, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe) syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203"], 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000004b00)=ANY=[@ANYBLOB="1800000000000000000000000000000095005d19ebe343e4e2000000000000d13ae3f9b2ab573b37a3aaf8cab40f4eb754679911e67e500fff63a892fda110f3fd31cf6d897ea28d796635add343c41986702a8c6498626b6dc8fbcdc025fb237a5323f56e2e90ae2bad1b341d518c18277e1c9f0fd33641ce74809abddcf0c96d992ef5302804793b134a0000000011288de6fdbebef1523820f28d6ac3b419eb8e2637a7bb6bdc5b7dce8ee237f274b718d92f936df5d7e7f53720d9d995098f5272e04187154142f68d4b4bd2a9738d592a0aa5e745b62ab940bb71af"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 29m11.282812364s ago: executing program 44 (id=1013): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 29m3.232764012s ago: executing program 45 (id=1024): r0 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x1, 0x10000080, 0x3685f8ad576724ab}) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r3, 0x0, 0x0, 0x4c000, 0x0, 0x0) close(r3) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, 0x0) 28m18.107003346s ago: executing program 46 (id=1083): syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SET_THP_DISABLE(0x44, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000400)=0x13) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000180)="e4d79b3b828024b59aa49c257addff4e", 0x20) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010161, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r5, &(0x7f0000003440)="172cd448287c5a6c51", 0x9, 0x20000000, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) 26m51.129236645s ago: executing program 47 (id=1288): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x1, 0x10000080, 0x3685f8ad576724ab}) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r1, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x4c000, 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) 21m50.804042445s ago: executing program 48 (id=2220): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 20m8.278705721s ago: executing program 8 (id=2509): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c62abf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7f66de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef6209c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x1, 0x1, 0x0, 0x9, 0xb9, {0x6, 0xfff, 0x3, 0x6, 0x68c1, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x6000, 0x7fffffff, r2, r3, 0x0, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m7.561153767s ago: executing program 8 (id=2511): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 20m5.119047066s ago: executing program 8 (id=2516): syz_io_uring_setup(0x34b3, &(0x7f0000000180)={0x0, 0x0, 0x30c0, 0x3}, &(0x7f0000000100), &(0x7f0000000140)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f00000004c0)={0x0, 0x2, &(0x7f00000003c0)=[0xffff, 0x3], &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x7, 0x2, 0x6, 0x1440]}) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x1060c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCGUSAGES(r7, 0x40305829, &(0x7f0000008340)={{0x1, 0x3, 0x7f, 0x7, 0x1000, 0x40}, 0x2bf, [0xb704, 0x3ff, 0x6, 0x2, 0xfba9, 0x80000001, 0x1c, 0x8, 0x2, 0x80000000, 0x8, 0x8001, 0xffff, 0x1, 0x248b56bb, 0xf734, 0x46a93a47, 0x51e1, 0x6, 0x6, 0xff, 0xffffffff, 0x8, 0x4, 0x1000004, 0x6, 0xeb09, 0x101, 0x5, 0x6, 0x8, 0x4, 0x3, 0x88, 0x0, 0x0, 0x1000, 0xfb81, 0x8, 0x40, 0x7, 0xf, 0x3ff, 0x401, 0x5, 0x10, 0xfffffffd, 0x1, 0xc6f8, 0x2, 0x80, 0x2, 0x7, 0xa1a, 0x9, 0x6, 0x1, 0x2, 0x0, 0xa, 0x5, 0x8000, 0x6, 0x2, 0x5819, 0x7, 0x6, 0x4f4, 0x3, 0x80000, 0x1000, 0x2, 0xb, 0x4, 0x7, 0x5, 0x1, 0x2, 0x80000000, 0x0, 0x5, 0x2, 0x8, 0x1, 0x0, 0x6, 0xd985, 0x51, 0x1, 0x5, 0x9, 0x6, 0xfffffffe, 0x79, 0x2, 0x8, 0xffe00, 0xfffffffb, 0x71172ab, 0x3, 0x6, 0x6, 0x1, 0xe96, 0x4, 0xa09, 0x2, 0x4, 0x3, 0xa80c, 0x80000001, 0x9, 0xe7, 0x3e, 0x3, 0x0, 0x4, 0x2cdf, 0x3000, 0x3, 0x5, 0xff, 0x2, 0x4, 0x101, 0xff, 0x1400000, 0xfffffff7, 0x8, 0x8, 0x4, 0x100, 0x2, 0x9, 0xffe, 0xfd93, 0x0, 0x5, 0x21, 0x4, 0x80000001, 0x2, 0x5, 0xfffffffb, 0x48cd, 0x1, 0x7fff, 0x8000, 0xfffffffe, 0x9, 0x1, 0x6, 0x6, 0xf8, 0xfffffffd, 0xa, 0x6, 0x2, 0xfb2, 0x100, 0x10001, 0x1, 0x40, 0x7, 0x8, 0x3e3, 0x0, 0x6, 0x0, 0x9, 0x0, 0x49, 0x3ff, 0x5, 0x1ff, 0x3, 0xbd, 0xfffffff8, 0x5, 0x1, 0x2, 0x6, 0x0, 0x9, 0x38, 0xd, 0x6, 0xfffffffa, 0x6, 0xf, 0x25, 0x2, 0x0, 0x4, 0x9, 0x2896, 0x4, 0x3, 0x3, 0x7, 0x0, 0xb, 0x9, 0xa9, 0x400, 0x8001, 0x8, 0x2, 0xc6ab, 0x18, 0x8000, 0x2, 0x0, 0x7, 0x1, 0x6, 0x5, 0x400, 0x3, 0x3, 0x4, 0x1, 0x2, 0x2, 0x7, 0x8, 0x0, 0x7, 0x7, 0x0, 0xffffff64, 0x5, 0x2, 0x6, 0x3, 0x5, 0xc7, 0x7, 0x212, 0x7, 0x5, 0xe19b, 0x7, 0x9, 0x67, 0xa, 0xf60b, 0x1, 0x1, 0x4, 0x98a, 0x6, 0x10, 0x2eb, 0x2f7e, 0x0, 0x4, 0x1d21, 0x9, 0x80, 0xb, 0x1ff, 0xfffffff6, 0x0, 0xffffffff, 0x4, 0x6, 0x3, 0x6, 0x20000000, 0x8, 0xa, 0x3ff, 0xffffffff, 0x7, 0x68b32c17, 0x339, 0x2, 0xc, 0x5, 0x40, 0x2d, 0x1ff, 0x91, 0x7f, 0x4, 0x7, 0x1, 0x2, 0x3b1, 0x800003, 0x2, 0x3, 0x8001, 0x7, 0xfffffffc, 0x8, 0x0, 0x401c, 0x7, 0x200, 0x8, 0x5, 0xab83, 0x73, 0x14000, 0x1, 0x2, 0x8, 0x7, 0x3, 0x4, 0x8, 0x1, 0x74e, 0x88, 0x2, 0x20, 0x2, 0x328, 0xe5, 0x7, 0x9, 0x86a, 0x2, 0x1, 0x2b, 0xfffffffb, 0x6, 0xa, 0xd2e, 0x80000000, 0x7, 0xfffffff8, 0x0, 0x8, 0x569, 0xa, 0x100, 0xac3, 0x5, 0x6, 0xff, 0xe, 0x81, 0xca, 0xfffffffe, 0x7, 0x8, 0x0, 0x7, 0x5, 0x5, 0x4, 0xe, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1, 0x3de, 0x2, 0x1, 0xfb, 0x2, 0xfffffff8, 0x3ff, 0x8, 0x3, 0x8, 0x31eb, 0x7, 0x5, 0x8, 0x4a0000, 0x0, 0x2, 0xb0, 0x4, 0x8000, 0x80, 0xd05, 0x9, 0x5, 0x8, 0x80, 0x2, 0x5, 0xfffffe00, 0x7, 0x4000000, 0x5, 0x6af, 0x4, 0x8, 0x3, 0x580, 0x7, 0x9, 0x3, 0x2, 0x0, 0x81, 0x9, 0x7ff, 0x4, 0xfffffff8, 0x9, 0x2, 0x3, 0x77ae, 0x4, 0x91c, 0x5, 0x6, 0x3, 0x0, 0x80000000, 0x21000000, 0xfffffffa, 0x3ff, 0xb3, 0x4f8c, 0x4, 0x127, 0x1, 0x2bfe1798, 0x10000, 0x1, 0x44c, 0x0, 0x3, 0x895, 0x8, 0xff9, 0xfffffff7, 0x3, 0x2c, 0x3ff, 0x6, 0x8, 0x7, 0x1, 0x1000, 0xc530, 0x5, 0x8f, 0x0, 0x6, 0x8000, 0x400, 0x7, 0x6, 0x9, 0x1, 0x2005f66, 0x10001, 0x1, 0x9, 0x8000, 0x5, 0x80000001, 0x81, 0x6, 0x8, 0x75f, 0xab8, 0x4, 0x8, 0xe0b0, 0xffff, 0xf, 0x2, 0x4, 0x9, 0xffffd40a, 0x2, 0x9, 0x6, 0x2, 0xfffffa86, 0x8, 0x6, 0x101, 0x3, 0xa000000, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x101, 0x1, 0x200, 0x800, 0x9, 0x2, 0x3, 0xf5, 0xb30, 0x9, 0x2, 0x1, 0xd, 0x7fffffff, 0x7, 0x8, 0x0, 0x9, 0x4, 0x1, 0x462, 0x80000001, 0x5, 0x7, 0x3e2b, 0x4, 0x7ff, 0x2, 0x9, 0x3ff, 0x9, 0x8, 0x6, 0x2, 0x1, 0x100, 0xa, 0x5, 0x800, 0x80000000, 0x40, 0x1, 0x10000, 0xffffcd67, 0x5af, 0x3, 0x8, 0x7, 0x0, 0x227, 0x0, 0x8, 0x0, 0x1c18, 0x6, 0x7, 0x0, 0x9, 0xff, 0x6, 0x101, 0x7fff, 0x1, 0x101, 0xd7b, 0x2, 0x6, 0x81, 0x1, 0x10001, 0x3, 0x2, 0x2, 0xbfc8, 0x1, 0x101, 0x23b8, 0x7f, 0x8, 0xad9, 0x8, 0x4, 0xd31, 0x3a64ec4a, 0xffffffcf, 0x81, 0x9536, 0x0, 0x2, 0x3, 0x0, 0x9, 0x4af7e4bc, 0x7, 0x4, 0x2, 0x2f8, 0x4, 0x4, 0x1, 0x1ff, 0x1c7, 0x80000000, 0xd, 0x8, 0x0, 0x7, 0x1, 0x3, 0x6, 0x10000, 0x89e7, 0xa, 0x6d, 0x4, 0x9, 0x6, 0xf, 0x4, 0x706, 0x800, 0xfffffff2, 0x7, 0x7, 0x5, 0x6, 0x1, 0x91, 0x1f, 0x0, 0xb, 0x3, 0x8, 0x46, 0xd3, 0x0, 0x0, 0xfffffff4, 0x1, 0x3e, 0x7923, 0x7, 0x7, 0x101, 0x7, 0x9a0, 0x9, 0xbff, 0xf26, 0x800, 0xe00000, 0x7, 0x171, 0x5, 0x5, 0x4000023, 0x400, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x5, 0x10, 0x6, 0x40007, 0x5, 0x4, 0x1, 0x2, 0x0, 0x3, 0x75, 0x3, 0x5, 0xdec3, 0x7, 0x4, 0xfffffff9, 0x3, 0x6, 0x74b, 0xb166, 0xffffffff, 0xbe25, 0x7, 0x9, 0x9a, 0x6, 0x0, 0x76f, 0x4, 0x2, 0x4, 0x1, 0x3, 0xfffffff5, 0x7, 0x6, 0xc, 0x1ff, 0x6a, 0xe3, 0x390e, 0x1, 0x8, 0x7fffffff, 0x47, 0x3, 0x24dc, 0x80000001, 0x3ff, 0xfc, 0x0, 0xfffffffa, 0x4, 0xba, 0x3, 0x3, 0x3ff, 0x3, 0x5, 0xf72, 0x5, 0x8, 0x1258dd22, 0x1, 0x4, 0x88, 0xb5e, 0x4, 0x0, 0x3, 0x9, 0x101, 0xff, 0x3, 0x4, 0x39aa, 0xfffffffd, 0x408, 0x9fb0, 0x400, 0x3, 0xfffffff9, 0x7, 0x8, 0x4, 0xafdb, 0x8001, 0x9, 0x0, 0x2a, 0x40, 0x2e77, 0x0, 0x8, 0x7, 0x6, 0x1, 0x81, 0x10, 0x40, 0x1, 0xef, 0x1, 0x9, 0xc, 0xdd5a, 0x0, 0xffff, 0x2, 0x1000, 0x3, 0x1100, 0x3, 0x4, 0x800, 0xfffffffa, 0x800, 0x7, 0x4, 0xfffffffe, 0xfffffff8, 0x81, 0x3ff, 0x7f, 0x4, 0x7, 0xffffffff, 0x0, 0x401, 0xa, 0x468, 0x1, 0xfffffff9, 0x5, 0x7, 0x8000, 0x0, 0x8, 0x0, 0x6, 0x5, 0x2, 0x2, 0x0, 0x1, 0xae9, 0xb07c, 0x13d2, 0x4, 0xfffffffe, 0xa1ef, 0x9c76, 0xf, 0x2, 0x6865e652, 0x10001, 0x0, 0xcb93, 0x1, 0x2df8, 0x2, 0x3, 0x8, 0x7f, 0x43c2, 0x9, 0x24, 0x2, 0x7, 0x3ff, 0x0, 0x5, 0xa000, 0x964, 0x1, 0x8001, 0x1, 0x7f, 0x6, 0x4, 0x0, 0x0, 0x8000, 0x1, 0x100, 0x800, 0x7, 0x2d0f, 0x6ea, 0x1, 0x34cd, 0x8, 0x8, 0x9, 0x10000, 0x7, 0x9, 0x5, 0xfffffffa, 0x9, 0x81, 0x11, 0x2, 0x10000, 0x8, 0xffffffff, 0x6, 0x200, 0x8000, 0xad, 0x9, 0x7fffffff, 0xa5, 0x101, 0x0, 0x7, 0x10, 0xa3, 0x7fffffff, 0x5, 0x2, 0x200, 0x8001, 0x0, 0x3, 0x4, 0xfffffffc, 0x4, 0x7, 0xfffffff8, 0x5, 0x0, 0x3, 0x0, 0x1, 0x100001, 0xa, 0x0, 0x0, 0x75, 0x101, 0x69cba428, 0xfff, 0x9, 0x9, 0xfffffc00, 0x1, 0x2, 0xf, 0x6, 0x208, 0x4, 0xc, 0x2, 0x37e, 0x14000, 0x3, 0x8000, 0x0, 0x0, 0x77ef, 0x800, 0x8, 0xffffffb2, 0x7ffffffe, 0x202, 0xc, 0x9, 0xfffff000, 0x7fffffff, 0xffffffff, 0x5, 0x1, 0x1000, 0x1000, 0x10, 0x9, 0x9, 0x1ff, 0x7, 0xfffffff9, 0x3, 0x80000000, 0x7, 0x40, 0x9, 0x1, 0x7, 0x0, 0x352, 0x0, 0xa, 0x3ff, 0x7, 0x2, 0x200001, 0x10001, 0xfffffff7, 0x0, 0x7, 0x8, 0x4, 0x9, 0x1, 0xe3, 0x5e48, 0x7, 0xffffffff, 0x8001, 0x805, 0xfffffff7, 0x9, 0x5, 0x3, 0x9c, 0x1, 0x2c, 0x3, 0x9, 0x7f, 0x35, 0x8d, 0x0, 0xffff, 0x6, 0x81, 0xdae, 0x8, 0x0, 0x8, 0x9, 0x0, 0x7, 0xed9a, 0x800, 0x8, 0x8, 0x8, 0xecc, 0x4622, 0xffffffc0, 0x1, 0x1, 0x1000, 0x101, 0x6, 0x6, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x9, 0xf, 0x2, 0x5, 0x0, 0xc, 0x1cd30080, 0x9, 0xf, 0xf5b, 0x8, 0x54, 0xfffffffe, 0x3, 0xbc, 0xe]}) 20m0.155465053s ago: executing program 8 (id=2529): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000001c0)={0x20, 0x1, 0x3, "a37b40"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000900)={0x0, 0xe, 0x4, "52b16000"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 19m56.06487705s ago: executing program 8 (id=2540): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="ac", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="a7e567b2636537bddd22b9766961745ea30fabb8c8a975be7f2b486aa0cabad3263c0b5efbbcf4c3be9855acd40b1ba459fd219c3c6f892cd7fb0e356e999e75b8f75a3cf4b656907cc4066905e2dfdb304140786387b97829614b21baeb704db3dfb62275490fbb1a58ec4129546185bfe6e01b6b3a018c67c3e22876b2dcbf03e84d4aa13cf6bfc5ba879bd8205a948dc6eac9a9ef788fcff78b3e9e6f2e2876f4033b8a97d88f1ad96ab8e0b121f12bb76157410dd51ab6cf54ac4879ad6d0420331ec560675668f6", 0xca}, {&(0x7f0000000740)="3f7882d42c3d96125e35c041b4e4eefe19", 0x11}], 0x2}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000a80)="131459a21669edd3cfd77521d04455b3c1c2e573e35030", 0x17}, {&(0x7f0000000ac0)="136708038d88121525f52855ccf27707c75e05cb613698c5d19495ed1ed9d5427efa442f55c09193efec9c672d9ebfa3007fa8f4abeb75604618b6a98698774609bb5c311654b1af3ba63ddf6d4608a3e33dd668df7b22cec88d48a320ee13b3695fb5fcb9105cc30fbf88e8ca12069ef80349f764af18870e84c4c74d81ca954d084155d0381c8780afcf49b0bbb105fabac16654457b046c65b470612a20fd5f31c73f6ff002bbdb6c6b9766dc5f90187e", 0xb2}, {&(0x7f0000000b80)="408bcc5ad9214958d856fee4c001e72437ca2d154585265bde328475e6443eb703753265b732ace48c2e54c121312f2f3f0238ccf790e955f999e4ecfbd5cb4b75ac9ddf350972145b61b5770eec0fbdd788edff7c854286f039db96016622582645bc99cc453346d25f854a41f1736d00a4f3f829f25febdd4ec0be6faeab7663320fb844ff7906eaadde", 0x8b}, {&(0x7f0000000c40)="e4187257e4c2d25cda816b5421220e496af7e99378d2b2641b3c9a54fe7eee4455a8f6a4952456d17ea14780b6012da77b25a8e57c32db0e31b9963581c3489ea73edeb1e662793c085ed78555d7f03d5645697f42c524", 0x57}, {&(0x7f0000000d00)="823c652c9a47136c88bb01e435ecd80a7a1ccb9c0fc15d68d9147eb07692fe7b86d06e2539abe05997115a5086fba6fc946b0051c4b3ebcf9c515ad379fcc1679e621594fb2750fdc7f0a88741053d42f82289958b6550bdada5b6b9d6a6274c6477576d388edf5a696bad743b34be2f65", 0x71}, {&(0x7f0000000dc0)="6c0bca86bfecc660e4ed96914a4977db3be1ffb0f17e9d149bb4026ce8946c0d1e2aeb749ed953ac921035366d52695a453bc9a965252686f9a719dc4e386dce361e84e76c43948f91ba0e132b93b75d835fe94dbc192d0300b49799a1df5d1516d3c293d88678c8b8b6b5961d43f188664259abaa3897fa3255ed3b1f0cdbba0a8597323e2d2ddbb239521dbf90a71895c584ab305464d0cb4c72919e6050bbc13157afb8c3e56c856ebc2d301f833678b0ebecf883c4fbdeede2efd4499a559f47a76c010724672fecb6abd1eb76188bd73a2fbdeb650467ec8ad3f0c18c", 0xdf}, {&(0x7f0000000ec0)="8b3a32ec77197011cf6a6ce3d02ef0a5e66188250f1f872aaa305d8f7dbead9b664af1e3f20b143fa7fa96dbf358ea6ceaa9e44c84ca0fc420ed7a6ccc7045f31960c0a9f9472f0491c5341dac51e6a97568aa3f9f6f10fc0f2f363adc21556cf362206f7d49409b0895189024b3be0d7757b82f58f66aff366c984beb6dae0e27d5dd8546c8b4c88b6efe67aa82f8e8377e95b76a363a8abfa8f5afcdfe5eff44", 0xa1}], 0x7}}], 0x3, 0xc0) 19m55.166300111s ago: executing program 8 (id=2542): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x20000084) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fallocate(0xffffffffffffffff, 0x1, 0xb21, 0x1001f0) 19m43.212124697s ago: executing program 49 (id=2533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(0x0, 0x0, &(0x7f0000000380)=""/126, 0x7e) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, r1, 0x0, 0x80008) 19m39.750150599s ago: executing program 50 (id=2542): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, 0x0, 0x20000084) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) fallocate(0xffffffffffffffff, 0x1, 0xb21, 0x1001f0) 18m53.126799056s ago: executing program 0 (id=2628): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000600)) 18m52.299203393s ago: executing program 0 (id=2630): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 18m48.943431172s ago: executing program 0 (id=2639): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 18m48.440428997s ago: executing program 0 (id=2641): unshare(0x22020600) bind$rds(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x343d, 0x0, 0x0, &(0x7f0000000200)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xf, 0xfff3}, {0x0, 0xfff1}, {0xffe0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) 18m46.743150986s ago: executing program 0 (id=2645): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x19c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x138, 0x1, [@m_simple={0xa4, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-{\x00'}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x90, 0x17, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}]}, {0x1d, 0x6, "0c667158e5bd4f4c7258693ff73b6255ca1d4908fac16f226d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 18m45.807062399s ago: executing program 0 (id=2648): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x1, &(0x7f0000000040)) syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) sendmmsg$sock(r2, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000028c0)}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b412b02944f33bb11bf25486b1", 0xc7}], 0x2}}], 0x2, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 18m29.785183561s ago: executing program 51 (id=2648): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ustat(0x1, &(0x7f0000000040)) syz_usb_connect(0x0, 0x48, 0x0, 0x0) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) sendmmsg$sock(r2, &(0x7f00000048c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="57d2eaad506afc36887a673d64e9406a2df1e483f59e7de91ae7dda56d", 0x1d}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)}}, {{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x1, @remote}}, 0x80, &(0x7f0000001980)=[{&(0x7f00000028c0)}, {&(0x7f0000001840)="4dac368de46605255bde84b5d12022e2f47d80ea10d16f6f1a4e0499542e722f2c13754676da8c78b025318942e24eef4f4d873f4f57196553c27fbdd0758f220b9ba226cfe2b2fa1c6c7f465e53e9e8516158514bca82c3249240a5e44db454c850d44049c7d966eb491a8731c7a28459b3ec0d89d17a0ae8e13fe7c4b94013c7441f99099172228c1b2c95eed269aa982effeebcff22e25650a1c3815ac4f8bd5cfc2707cb30ee1491a2cbbf9bd937cac173b8cb7575d53a36b412b02944f33bb11bf25486b1", 0xc7}], 0x2}}], 0x2, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001f00)=ANY=[@ANYBLOB], 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 17m25.177655996s ago: executing program 3 (id=2824): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r4, &(0x7f00000005c0)=[{&(0x7f00000002c0)="cacd", 0x2}, {&(0x7f0000000640)="685114cc8fd5340cd165", 0xa}], 0x2, 0xffffffff, 0x4) 17m24.323380908s ago: executing program 3 (id=2827): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16], 0x0) 17m20.908599188s ago: executing program 3 (id=2833): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xa, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) 17m20.0637037s ago: executing program 3 (id=2838): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r3) sendmsg$NLBL_MGMT_C_ADD(r3, 0x0, 0x0) 17m19.211088383s ago: executing program 3 (id=2839): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast2, @loopback, 0x1, 0x2, [@loopback, @broadcast]}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$ax25(r2, 0x0, 0x0, 0x10, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f0000000180)=""/182, 0xb6}], 0x2}, 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb3a9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0xc, 0x14}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x6, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0x7}}}}}}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17m15.0786646s ago: executing program 3 (id=2846): syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1, r2, 0x0, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) eventfd2(0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 16m59.509435871s ago: executing program 52 (id=2846): syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x0, r2, 0x0, 0x8, 0x0) waitid(0x1, r2, 0x0, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) eventfd2(0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 11m50.217472515s ago: executing program 5 (id=3939): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x18c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x150, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xa4, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-{\x00'}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x88, 0x17, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m49.451909871s ago: executing program 5 (id=3940): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) 11m48.792694133s ago: executing program 5 (id=3943): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m48.210965582s ago: executing program 9 (id=3945): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="201118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xb8, @string={0xb8, 0x3, "6f916328d46a60395c05896cbc5a34c81c6b2e9bfbcc7e6c19010769fbfbd8f432b7ccafa39de84e60a8397aaa541f408b738a90714684c59f866a707ddebc902604ff6fe76cd830f9dc452e91b32b4b19ffd5d0fe2699492bafccee9e612a478188387945cc6e0bfdda42b166acae6b2461561d0be05e1c4abea49e435af93c2440e17bd4e8da3058b84990f1c763ed749c724a8882649204a9f02a1c9052362d75567f592c5f2c412857b22020d04bc9a0eec98f79"}}, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x4, "ab05"}]}}, 0x0}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0xb, 0x63, "9778b7d7789c4bdb9a67e6c2d80cc84ce673f23f457d8ffef8e8b990d7619c85c33c43a765d5cfefb0f6fc96522e0cfceeac1d9d424bfca5d7e6de5f0369c543715e7251e24925ea67646254f1cfd17e644847ef0c3a8b58ef632784ae5aa3841a7d46"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1a}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x1, 0x47, "bace1d1123319671fcd7f94326164fe065dcda62c19cf713d1beb0362ab58048350379dec60d4bd294e8fee0a7e335723977c8e97540d63923a1a46cd74588400d36168e7804e1"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xbe}}) 11m47.780691938s ago: executing program 5 (id=3947): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000240)={[{@uid}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000009100)="$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") chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 11m46.297149516s ago: executing program 5 (id=3948): socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11m45.483059272s ago: executing program 5 (id=3949): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x18c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x150, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xa4, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-{\x00'}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x88, 0x17, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m45.150941966s ago: executing program 9 (id=3951): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308", @ANYRES8=r2, @ANYRES16=r0], 0x0) 11m42.741374327s ago: executing program 53 (id=3949): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x18c, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x150, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x130, 0x1, [@m_simple={0xa4, 0x1f, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '-{\x00'}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x88, 0x17, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 11m42.692000914s ago: executing program 9 (id=3954): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) 11m41.939499328s ago: executing program 9 (id=3957): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0xc0, &(0x7f0000000240)={[{@uid}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@gid}]}, 0x1, 0xc32, &(0x7f0000009100)="$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") chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 11m40.757712878s ago: executing program 9 (id=3958): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x444, 0x0, 0x1, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000001180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 11m40.141599568s ago: executing program 9 (id=3959): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 11m37.704827044s ago: executing program 54 (id=3959): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12.219027105s ago: executing program 1 (id=7005): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000002280)=ANY=[], 0x118) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)) 11.670615504s ago: executing program 1 (id=7008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.080675391s ago: executing program 1 (id=7012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) syz_clone(0x24420000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6.01558721s ago: executing program 7 (id=7031): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 6.001610887s ago: executing program 6 (id=7032): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff00000000242065580000000000000021000086dd080088be4305400f"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0xc7, 0x7c}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x4100}], 0x1, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a31"], 0xe4}}, 0x200000d4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.381849463s ago: executing program 2 (id=7035): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x309700) unshare(0x2040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) chroot(0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210026bd7000fcdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0800dc0001f0ffff10002d800a0000000202020202020000e7c8c920038d8dd79d6dedee319ecbaf6dc2d9aa92bb8ec31164a9bd18836f4773dc81f201"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000080)={0x7, 0xffff, 0x1}) getresuid(&(0x7f00000002c0), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) io_setup(0x6, &(0x7f0000000280)=0x0) io_submit(r8, 0x1, &(0x7f0000000240)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x81, r7, 0x0}]) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8f9f0200000000000000040000000c000180080003"], 0x20}}, 0x2000c090) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000a3e7", @ANYRES16=r9, @ANYBLOB="00022bbd7000fcdbdf250d0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) setreuid(r4, 0x0) 5.318859059s ago: executing program 7 (id=7037): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x427}], 0x2}, 0x0) 4.786990219s ago: executing program 7 (id=7038): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 4.596248497s ago: executing program 4 (id=7039): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@dax_never}, {@noblock_validity}, {@bh}, {@dioread_nolock}]}, 0x0, 0x63b, &(0x7f0000000a00)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r1, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x1, 0xc11, &(0x7f0000001ac0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) rename(0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents(r3, &(0x7f0000001fc0)=""/170, 0xaa) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 4.426155539s ago: executing program 2 (id=7040): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000002280)=ANY=[], 0x118) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)) 3.831310551s ago: executing program 6 (id=7041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32], 0x44}}, 0x0) 3.811599818s ago: executing program 2 (id=7042): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) mount(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) memfd_create(0x0, 0x3) syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x11fffffc}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x100) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 3.603108853s ago: executing program 7 (id=7043): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[{0x38, 0x110, 0xc, "8c253a2fa0e9805ef843a13ab2b0a09da3789e3268ed38f403ae5495a9df8bacebba74c733ae7818d350"}, {0xc, 0x11, 0xc}], 0x44}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000f15513d97512ab40de5cb200000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r2, 0x25, 0x9, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, &(0x7f0000000380)=[0x3], 0x8}}, 0x9) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000640)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r5 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fsmount(r5, 0x0, 0xf) setuid(0xee01) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r9}}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xed}}) syz_usb_connect$uac1(0x4, 0xfb, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x7c, 0xd0, 0xc0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe00, 0x7}, [@extension_unit={0xc, 0x24, 0x8, 0x4, 0xfffd, 0x95, "7cb5e3c09f"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x1, 0x1, "ada41e796f"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x4, 0x4, "0de9244e2a"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x1, 0x3, 0x2, 0x14}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x0, "ede67a447a"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x3, "118a7eac250a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4b, 0x6, 0xc, "03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x10, 0x1, {0x7, 0x25, 0x1, 0x0, 0x0, 0x480}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x10, 0x91, "a0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x47, 0x1, 0x81, 0x7, "c49c", "f4fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x1, 'O'}, @format_type_i_discrete={0xfffffffffffffca8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xd, 0x81, "1be208609c39a8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x4, "bc38", "a617"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x8, {0x7, 0x25, 0x1, 0x80, 0x3, 0x2}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x5, 0x7f, 0x20, 0x7}, 0x14e, &(0x7f0000000700)={0x5, 0xf, 0x14e, 0x4, [@ptm_cap={0x3}, @generic={0x78, 0x10, 0x2, "659054434fa8dc2ab99322f0c3b8f8ae637496cc30d8862768f5a9f1da99b355f3a5aaf747d8242cec2869cca335d51a2a3aeab122226f8ca1cc43491f2c4ba8da676b08e9f36510470441b852de7f82e19397e1c40cfecedfba405a84991132fa6a73429c20253f4791d677e044f9364a1fba4b93"}, @generic={0xc7, 0x10, 0x4, "43457d0ddf7b644cfa7e53ab846d61ade2ac3c3732360872f4c77857984a4ec41634ea92a7ee52c382807468b0911e4c38e781de562f606ee3c17db7bfee9e9cff933e837ef3f44113e75cf536ba374b29fa9063c937122dd15b030c4ad5552cf91a6b70e9a4a17745c75a99b2f1a0c781926b69d5576485a5158b9e2ab09823516f9872527aeb4f3db61554ce37193220e0d36ed2d92757ab50303b4312cf15cede77810dfb922df81e24aedd5ecd0bdac6d28597cbb47b76abd5ecd74536a74c41c280"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x1, 0x1}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0xa6, &(0x7f0000000540)=@string={0xa6, 0x3, "7c9512a3634a73b5a9799f8ed788224b02802b68921c892c18323f906f4782945ce587d8d7c1d545a6eba0f39bf5949e4490a897e80e73c203e9717d7f8af65edbd0742939e34cf54551152e0668feb6209edefadbc316f6047f34471e2638eb5426c37254c730cc4345965be30666d27d6c272e033db60363db2d6931a3a447db23cb0d234d9629b0ca479a85ba206c988aea6723b2f0d76385b809e3ea545cc8036618"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xc, &(0x7f00000002c0)=@string={0xc, 0x3, "cb2a073145930363fa16"}}, {0x65, &(0x7f0000000880)=@string={0x65, 0x3, "3b0928b0b2c6b0ee378905b11df3751aa8ea28e974dec3550495b95856c2b5bd19a451f2117f269d4ec1247388baa4a5650d6f45aba1be748455e646c09b5e05f3002cab5141ca68f25164cee21151d8218f006f3bbc9baa2298e195a2095a7bbef766"}}, {0x51, &(0x7f0000000900)=@string={0x51, 0x3, "3ff9b9baff82d98f74cd3c374df3e1c1b43a56eeefe1acedd3132125244079ad1b7190e2a3b2d704240791d53be86bd50372348ce2eba5e7acf7ed6bbd99456ef15e6110d554efb6697d6962053fd6"}}]}) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x2c) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c080002"], 0x10}}, 0x40) 3.291705272s ago: executing program 2 (id=7044): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 3.258557686s ago: executing program 4 (id=7045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.078381968s ago: executing program 6 (id=7046): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/61, 0x3d, 0x4000005) 2.754385512s ago: executing program 2 (id=7047): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101101, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)='[', 0x1}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r0) 2.699261116s ago: executing program 6 (id=7048): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setreuid(0x0, 0x0) 2.58538158s ago: executing program 4 (id=7049): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x400000}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) 2.34182933s ago: executing program 7 (id=7050): io_setup(0x3, &(0x7f0000000000)) r0 = timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_adjtime(0x0, 0x0) 2.15030906s ago: executing program 1 (id=7051): timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf00000204"]) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011d019bde521023398a71d7d80102030109022400010509401909047b07021950d5980905eb022000020205090504"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c9641, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x7d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r3, &(0x7f00000000c0)=""/175, 0x20) pipe(&(0x7f0000000140)={0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x7fffffffffffffff, 0x0) write$eventfd(r4, &(0x7f0000000000)=0x1c00ec4d, 0x8) 2.019443623s ago: executing program 6 (id=7052): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000002280)=ANY=[], 0x118) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)) 1.751106495s ago: executing program 4 (id=7053): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 1.483349634s ago: executing program 6 (id=7054): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe80fe43c8a0000000000000000000bb00000000000000000000ffff00000000242065580000000000000021000086dd080088be4305400f"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0xc7, 0x7c}}]}}]}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x4100}], 0x1, 0x1) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a31"], 0xe4}}, 0x200000d4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.153682536s ago: executing program 7 (id=7055): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000040)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@dax_never}, {@noblock_validity}, {@bh}, {@dioread_nolock}]}, 0x0, 0x63b, &(0x7f0000000a00)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r1, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x1, 0xc11, &(0x7f0000001ac0)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) rename(0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents(r3, &(0x7f0000001fc0)=""/170, 0xaa) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x100) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 859.518169ms ago: executing program 1 (id=7056): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) mount(0x0, &(0x7f0000000300)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x200440, 0x0) memfd_create(0x0, 0x3) syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x11fffffc}, &(0x7f0000000100), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x100) ioctl$EVIOCGREP(r0, 0x80084503, 0x0) 769.244193ms ago: executing program 4 (id=7057): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 377.56284ms ago: executing program 1 (id=7058): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/61, 0x3d, 0x4000005) 283.006426ms ago: executing program 2 (id=7059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=7060): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[{0x40, 0x110, 0xc, "8c253a2fa0e9805ef843a13ab2b0a09da3789e3268ed38f403ae5495a9df8bacebba74c733ae7818d350b5cf9a0990a0a0"}, {0xc, 0x11, 0xc}], 0x4c}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000f15513d97512ab40de5cb200000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, r2, 0x25, 0x9, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, &(0x7f0000000380)=[0x3], 0x8}}, 0x9) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000640)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r5 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fsmount(r5, 0x0, 0xf) setuid(0xee01) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r9}}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300, 0xed}}) syz_usb_connect$uac1(0x4, 0xfb, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe9, 0x3, 0x1, 0x7c, 0xd0, 0xc0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe00, 0x7}, [@extension_unit={0xc, 0x24, 0x8, 0x4, 0xfffd, 0x95, "7cb5e3c09f"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x1, 0x1, "ada41e796f"}, @processing_unit={0xc, 0x24, 0x7, 0x6, 0x4, 0x4, "0de9244e2a"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x1ff, 0x1, 0x3, 0x2, 0x14}, @extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x0, "ede67a447a"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x3, "118a7eac250a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4b, 0x6, 0xc, "03"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x10, 0x1, {0x7, 0x25, 0x1, 0x0, 0x0, 0x480}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x10, 0x91, "a0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x47, 0x1, 0x81, 0x7, "c49c", "f4fa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x1, 0x6, 0x1, 'O'}, @format_type_i_discrete={0xfffffffffffffca8, 0x24, 0x2, 0x1, 0x4, 0x1, 0xd, 0x81, "1be208609c39a8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x3, 0x5, 0x4, "bc38", "a617"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x8, 0x8, 0x8, {0x7, 0x25, 0x1, 0x80, 0x3, 0x2}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x2, 0x5, 0x7f, 0x20, 0x7}, 0x14e, &(0x7f0000000700)={0x5, 0xf, 0x14e, 0x4, [@ptm_cap={0x3}, @generic={0x78, 0x10, 0x2, "659054434fa8dc2ab99322f0c3b8f8ae637496cc30d8862768f5a9f1da99b355f3a5aaf747d8242cec2869cca335d51a2a3aeab122226f8ca1cc43491f2c4ba8da676b08e9f36510470441b852de7f82e19397e1c40cfecedfba405a84991132fa6a73429c20253f4791d677e044f9364a1fba4b93"}, @generic={0xc7, 0x10, 0x4, "43457d0ddf7b644cfa7e53ab846d61ade2ac3c3732360872f4c77857984a4ec41634ea92a7ee52c382807468b0911e4c38e781de562f606ee3c17db7bfee9e9cff933e837ef3f44113e75cf536ba374b29fa9063c937122dd15b030c4ad5552cf91a6b70e9a4a17745c75a99b2f1a0c781926b69d5576485a5158b9e2ab09823516f9872527aeb4f3db61554ce37193220e0d36ed2d92757ab50303b4312cf15cede77810dfb922df81e24aedd5ecd0bdac6d28597cbb47b76abd5ecd74536a74c41c280"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x1, 0x1}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x410}}, {0xa6, &(0x7f0000000540)=@string={0xa6, 0x3, "7c9512a3634a73b5a9799f8ed788224b02802b68921c892c18323f906f4782945ce587d8d7c1d545a6eba0f39bf5949e4490a897e80e73c203e9717d7f8af65edbd0742939e34cf54551152e0668feb6209edefadbc316f6047f34471e2638eb5426c37254c730cc4345965be30666d27d6c272e033db60363db2d6931a3a447db23cb0d234d9629b0ca479a85ba206c988aea6723b2f0d76385b809e3ea545cc8036618"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xc, &(0x7f00000002c0)=@string={0xc, 0x3, "cb2a073145930363fa16"}}, {0x65, &(0x7f0000000880)=@string={0x65, 0x3, "3b0928b0b2c6b0ee378905b11df3751aa8ea28e974dec3550495b95856c2b5bd19a451f2117f269d4ec1247388baa4a5650d6f45aba1be748455e646c09b5e05f3002cab5141ca68f25164cee21151d8218f006f3bbc9baa2298e195a2095a7bbef766"}}, {0x51, &(0x7f0000000900)=@string={0x51, 0x3, "3ff9b9baff82d98f74cd3c374df3e1c1b43a56eeefe1acedd3132125244079ad1b7190e2a3b2d704240791d53be86bd50372348ce2eba5e7acf7ed6bbd99456ef15e6110d554efb6697d6962053fd6"}}]}) syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x2c) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x22, 0x14}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c080002"], 0x10}}, 0x40) kernel console output (not intermixed with test programs): T5860] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2030.540445][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2030.549881][ T5860] usb 7-1: Product: syz [ 2030.554336][ T5860] usb 7-1: Manufacturer: syz [ 2030.560180][ T5860] usb 7-1: SerialNumber: syz [ 2030.892212][ T5860] usb 7-1: 0:2 : does not exist [ 2030.897975][ T5860] usb 7-1: unit 18 not found! [ 2030.912906][T19673] binder: 19671:19673 ioctl c0306201 800003c0 returned -14 [ 2031.026568][ T5860] usb 7-1: USB disconnect, device number 56 [ 2031.112979][T15723] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 2031.253502][ T9640] udevd[9640]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2031.305386][T15723] usb 8-1: device descriptor read/64, error -71 [ 2031.561640][T15723] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 2031.735697][T15723] usb 8-1: device descriptor read/64, error -71 [ 2031.858381][T15723] usb usb8-port1: attempt power cycle [ 2032.265648][T15723] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2032.295249][ T9201] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2032.317221][T15723] usb 8-1: device descriptor read/8, error -71 [ 2032.358959][T19690] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2032.493071][ T9201] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.503878][ T9201] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2032.513356][ T9201] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2032.579742][ T9201] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2032.589628][ T9201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.598328][ T9201] usb 3-1: Product: syz [ 2032.602847][ T9201] usb 3-1: Manufacturer: syz [ 2032.608360][ T9201] usb 3-1: SerialNumber: syz [ 2032.617197][T15723] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2032.683777][T15723] usb 8-1: device descriptor read/8, error -71 [ 2032.701077][ T9201] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 2032.708780][ T9201] cdc_ncm 3-1:1.0: bind() failure [ 2032.802542][T15723] usb usb8-port1: unable to enumerate USB device [ 2033.257877][ T9201] usb 3-1: USB disconnect, device number 74 [ 2034.926324][T19721] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2036.468796][ T9201] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2036.666925][ T9201] usb 2-1: device descriptor read/64, error -71 [ 2036.922206][T19747] loop4: detected capacity change from 0 to 256 [ 2036.945865][ T9201] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2036.972901][T19747] exfat: Unknown parameter 'al€ow_utime' [ 2037.114943][ T9201] usb 2-1: device descriptor read/64, error -71 [ 2037.237492][ T9201] usb usb2-port1: attempt power cycle [ 2037.617275][ T9201] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2037.658463][ T9201] usb 2-1: device descriptor read/8, error -71 [ 2037.925011][ T9201] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2037.983306][ T9201] usb 2-1: device descriptor read/8, error -71 [ 2038.110188][ T9201] usb usb2-port1: unable to enumerate USB device [ 2043.023219][ T5860] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2043.218284][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 2043.263487][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2043.309219][ T5860] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2043.322109][ T5860] usb 7-1: can't read configurations, error -71 [ 2043.675016][ T9200] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2043.845449][ T9200] usb 5-1: device descriptor read/64, error -71 [ 2044.116082][ T9200] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2046.985727][ T9200] usb 5-1: device descriptor read/64, error -71 [ 2047.098873][ T9200] usb usb5-port1: attempt power cycle [ 2049.034930][ T9200] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2049.225378][ T9200] usb 5-1: Using ep0 maxpacket: 8 [ 2049.287272][ T9200] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2049.324924][ T9200] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2049.332995][ T9200] usb 5-1: can't read configurations, error -71 [ 2049.804833][ T9201] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2050.099626][ T9201] usb 7-1: Using ep0 maxpacket: 16 [ 2050.410236][ T9201] usb 7-1: no configurations [ 2050.415317][ T9201] usb 7-1: can't read configurations, error -22 [ 2050.605380][ T9201] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2050.809107][ T9201] usb 7-1: Using ep0 maxpacket: 16 [ 2050.835565][ T9201] usb 7-1: no configurations [ 2050.840742][ T9201] usb 7-1: can't read configurations, error -22 [ 2050.890665][ T9201] usb usb7-port1: attempt power cycle [ 2051.317330][ T9201] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2051.375296][ T9201] usb 7-1: Using ep0 maxpacket: 16 [ 2051.410192][ T9201] usb 7-1: no configurations [ 2051.416203][ T9201] usb 7-1: can't read configurations, error -22 [ 2051.580742][ T9201] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2051.739901][ T9201] usb 7-1: Using ep0 maxpacket: 16 [ 2051.755168][ T9201] usb 7-1: no configurations [ 2051.760350][ T9201] usb 7-1: can't read configurations, error -22 [ 2051.792301][ T9201] usb usb7-port1: unable to enumerate USB device [ 2054.695359][ T9201] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2054.816032][ T5860] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2054.854996][ T9201] usb 7-1: device descriptor read/64, error -71 [ 2054.995650][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 2055.030173][ T5860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.040990][ T5860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2055.071994][ T5860] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2055.082324][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.090786][ T5860] usb 2-1: Product: syz [ 2055.099370][ T5860] usb 2-1: Manufacturer: syz [ 2055.104282][ T5860] usb 2-1: SerialNumber: syz [ 2055.105714][ T9201] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2055.236557][ T9201] usb 7-1: device descriptor read/64, error -71 [ 2055.346628][ T9201] usb usb7-port1: attempt power cycle [ 2055.371856][ T5860] usb 2-1: 0:2 : does not exist [ 2055.377384][ T5860] usb 2-1: unit 6 not found! [ 2055.436171][ T9200] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 2055.530554][ T5860] usb 2-1: USB disconnect, device number 45 [ 2055.625249][ T9200] usb 8-1: Using ep0 maxpacket: 16 [ 2055.646136][ T9200] usb 8-1: no configurations [ 2055.651073][ T9200] usb 8-1: can't read configurations, error -22 [ 2055.717401][ T9640] udevd[9640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2055.725213][ T9201] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2055.788250][ T9201] usb 7-1: device descriptor read/8, error -71 [ 2055.825730][ T9200] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 2056.009959][ T9200] usb 8-1: Using ep0 maxpacket: 16 [ 2056.033820][ T9200] usb 8-1: no configurations [ 2056.039175][ T9200] usb 8-1: can't read configurations, error -22 [ 2056.050391][ T9201] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2056.096419][ T9200] usb usb8-port1: attempt power cycle [ 2056.122035][ T9201] usb 7-1: device descriptor read/8, error -71 [ 2056.236136][ T9201] usb usb7-port1: unable to enumerate USB device [ 2056.535084][ T9200] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 2056.557179][ T9200] usb 8-1: Using ep0 maxpacket: 16 [ 2056.572897][ T9200] usb 8-1: no configurations [ 2056.578313][ T9200] usb 8-1: can't read configurations, error -22 [ 2056.743568][ T9200] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2056.799569][ T9200] usb 8-1: Using ep0 maxpacket: 16 [ 2056.825258][ T9200] usb 8-1: no configurations [ 2056.830263][ T9200] usb 8-1: can't read configurations, error -22 [ 2056.842553][ T9200] usb usb8-port1: unable to enumerate USB device [ 2059.095314][ T5860] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 2059.513492][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 2059.526975][ T5860] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2059.537808][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2059.609508][ T5860] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2059.619144][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.628666][ T5860] usb 5-1: Product: syz [ 2059.633121][ T5860] usb 5-1: Manufacturer: syz [ 2059.639126][ T5860] usb 5-1: SerialNumber: syz [ 2059.997162][ T5860] usb 5-1: 0:2 : does not exist [ 2060.002430][ T5860] usb 5-1: unit 6 not found! [ 2060.087581][ T5860] usb 5-1: USB disconnect, device number 79 [ 2060.393223][ T9640] udevd[9640]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2060.487355][ T9200] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2060.654948][ T9200] usb 3-1: device descriptor read/64, error -71 [ 2060.936947][ T9200] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2061.085044][ T9200] usb 3-1: device descriptor read/64, error -71 [ 2061.203485][ T9200] usb usb3-port1: attempt power cycle [ 2061.586023][ T9200] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2061.628651][ T9200] usb 3-1: device descriptor read/8, error -71 [ 2061.893944][ T9200] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2061.945256][ T9200] usb 3-1: device descriptor read/8, error -71 [ 2062.075186][ T9200] usb usb3-port1: unable to enumerate USB device [ 2062.431847][T19989] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.593281][T19989] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.872592][T19989] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.968379][T19989] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.361265][T19989] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.439436][T19989] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.471983][T19989] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.511900][T19989] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2063.981544][T19997] loop4: detected capacity change from 0 to 4096 [ 2064.043352][T19997] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 2064.085662][ T5860] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 2064.306781][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 2064.330178][T19997] ntfs3(loop4): ino=1a, mi_enum_attr [ 2064.337329][T19997] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 2064.385177][ T5860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2064.395787][ T5860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2064.467052][ T5860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2064.476740][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2064.485342][ T5860] usb 8-1: Product: syz [ 2064.489822][ T5860] usb 8-1: Manufacturer: syz [ 2064.494802][ T5860] usb 8-1: SerialNumber: syz [ 2064.794626][ T5860] usb 8-1: 0:2 : does not exist [ 2064.799875][ T5860] usb 8-1: unit 6 not found! [ 2064.973541][ T5860] usb 8-1: USB disconnect, device number 97 [ 2065.339834][ T9640] udevd[9640]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2066.074415][T20023] loop7: detected capacity change from 0 to 256 [ 2066.118391][T20023] exfat: Unknown parameter 'al€ow_utime' [ 2067.935513][ T9201] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2068.135022][ T9201] usb 2-1: Using ep0 maxpacket: 16 [ 2068.177629][ T9201] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.188592][ T9201] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2068.257467][T20053] loop4: detected capacity change from 0 to 1024 [ 2068.298307][ T9201] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2068.311630][ T9201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.321920][ T9201] usb 2-1: Product: syz [ 2068.326553][ T9201] usb 2-1: Manufacturer: syz [ 2068.331510][ T9201] usb 2-1: SerialNumber: syz [ 2068.696742][ T9201] usb 2-1: 0:2 : does not exist [ 2068.702019][ T9201] usb 2-1: unit 6 not found! [ 2068.892359][ T9201] usb 2-1: USB disconnect, device number 46 [ 2068.905754][ T14] hfsplus: b-tree write err: -5, ino 4 [ 2069.180522][ T9640] udevd[9640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2072.455404][ T9201] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2072.506616][ T5860] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2072.615053][ T9201] usb 3-1: device descriptor read/64, error -71 [ 2072.712620][ T5860] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.723374][ T5860] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2072.732972][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2072.828176][ T5860] usb 2-1: config 0 descriptor?? [ 2072.857359][ T5860] pwc: Askey VC010 type 2 USB webcam detected. [ 2072.867988][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2072.875001][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2072.886090][ T9201] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2073.075372][ T9201] usb 3-1: device descriptor read/64, error -71 [ 2073.165060][ T9200] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 2073.187183][ T9201] usb usb3-port1: attempt power cycle [ 2073.284900][ T5860] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2073.298980][ T5860] pwc: recv_control_msg error -32 req 02 val 2700 [ 2073.313785][ T5860] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2073.351618][ T5860] pwc: recv_control_msg error -32 req 04 val 1000 [ 2073.364769][ T9200] usb 8-1: Using ep0 maxpacket: 16 [ 2073.366819][ T5860] pwc: recv_control_msg error -32 req 04 val 1300 [ 2073.405642][ T5860] pwc: recv_control_msg error -32 req 04 val 1400 [ 2073.408218][ T9200] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.426999][ T9200] usb 8-1: config 0 has no interfaces? [ 2073.430821][ T5860] pwc: recv_control_msg error -32 req 02 val 2000 [ 2073.461864][ T5860] pwc: recv_control_msg error -32 req 02 val 2100 [ 2073.480613][ T5860] pwc: recv_control_msg error -32 req 04 val 1500 [ 2073.496910][ T9200] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 2073.507642][ T9200] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.515213][ T5860] pwc: recv_control_msg error -32 req 02 val 2500 [ 2073.516331][ T9200] usb 8-1: Product: syz [ 2073.530669][ T9200] usb 8-1: Manufacturer: syz [ 2073.536975][ T9200] usb 8-1: SerialNumber: syz [ 2073.556548][ T5860] pwc: recv_control_msg error -32 req 02 val 2400 [ 2073.574914][ T5860] pwc: recv_control_msg error -32 req 02 val 2600 [ 2073.605134][ T9201] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2073.633064][ T9200] usb 8-1: config 0 descriptor?? [ 2073.649583][ T9201] usb 3-1: device descriptor read/8, error -71 [ 2073.799982][ T5860] pwc: recv_control_msg error -71 req 02 val 2800 [ 2073.827674][ T5860] pwc: recv_control_msg error -71 req 04 val 1100 [ 2073.850122][ T5860] pwc: recv_control_msg error -71 req 04 val 1200 [ 2073.873526][ T5860] pwc: Registered as video103. [ 2073.883367][ T5860] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input87 [ 2073.917928][ T9201] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2073.919691][ T5860] usb 2-1: USB disconnect, device number 47 [ 2073.982684][ T9201] usb 3-1: device descriptor read/8, error -71 [ 2074.106705][ T9201] usb usb3-port1: unable to enumerate USB device [ 2076.077661][ T9201] usb 8-1: USB disconnect, device number 98 [ 2077.511257][T20166] loop4: detected capacity change from 0 to 64 [ 2077.950075][ T9201] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 2078.125093][ T9201] usb 8-1: device descriptor read/64, error -71 [ 2078.251301][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4541'. [ 2078.375265][ T9201] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 2078.547797][ T9201] usb 8-1: device descriptor read/64, error -71 [ 2078.662946][ T9201] usb usb8-port1: attempt power cycle [ 2079.045064][ T9201] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 2079.105313][ T9201] usb 8-1: device descriptor read/8, error -71 [ 2079.344879][ T9201] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 2079.387514][ T9201] usb 8-1: device descriptor read/8, error -71 [ 2079.499016][ T9201] usb usb8-port1: unable to enumerate USB device [ 2081.275028][T20212] loop7: detected capacity change from 0 to 256 [ 2081.297799][T20212] exfat: Unknown parameter 'al€ow_utime' [ 2083.715812][ T9201] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2083.884874][ T9201] usb 5-1: device descriptor read/64, error -71 [ 2083.902379][T20233] loop7: detected capacity change from 0 to 8192 [ 2084.010853][T20233] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2084.155119][ T9201] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2084.325588][ T9201] usb 5-1: device descriptor read/64, error -71 [ 2084.475720][ T9201] usb usb5-port1: attempt power cycle [ 2084.855471][ T9201] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2084.916869][ T9201] usb 5-1: device descriptor read/8, error -71 [ 2085.185169][ T9201] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2085.247265][ T9201] usb 5-1: device descriptor read/8, error -71 [ 2085.375827][ T9201] usb usb5-port1: unable to enumerate USB device [ 2087.893307][T20290] batman_adv: batadv0: Adding interface: dummy0 [ 2087.900203][T20290] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.926562][T20290] batman_adv: batadv0: Interface activated: dummy0 [ 2088.234348][T20290] batadv0: mtu less than device minimum [ 2088.243085][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.256708][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.270103][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.283453][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.296930][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.310285][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.323660][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.337169][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2088.350558][T20290] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2089.574832][ T9201] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 2089.776208][ T9201] usb 8-1: device descriptor read/64, error -71 [ 2090.054852][ T9201] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 2090.204795][ T9201] usb 8-1: device descriptor read/64, error -71 [ 2090.336511][ T9201] usb usb8-port1: attempt power cycle [ 2090.734944][ T9201] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 2090.797948][ T9201] usb 8-1: device descriptor read/8, error -71 [ 2091.114843][ T9201] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 2091.157741][ T9201] usb 8-1: device descriptor read/8, error -71 [ 2091.188150][ T5153] udevd[5153]: worker [9640] terminated by signal 33 (Unknown signal 33) [ 2091.208638][ T5153] udevd[5153]: worker [9640] failed while handling '/devices/virtual/block/loop8' [ 2091.272137][ T9201] usb usb8-port1: unable to enumerate USB device [ 2094.167148][T20355] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4610'. [ 2098.095662][T20394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4625'. [ 2098.562593][T20399] loop7: detected capacity change from 0 to 512 [ 2098.604260][T20399] EXT4-fs (loop7): orphan cleanup on readonly fs [ 2098.641991][T20399] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 2098.653391][T20399] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 2098.663382][T20399] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4628: Failed to acquire dquot type 1 [ 2098.825642][T20399] EXT4-fs (loop7): 1 truncate cleaned up [ 2098.834387][T20399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2099.260510][T18512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2099.915836][T20414] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2100.045496][ T9201] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2100.260259][ T9201] usb 5-1: no configurations [ 2100.265376][ T9201] usb 5-1: can't read configurations, error -22 [ 2100.427625][ T9201] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2100.648152][ T9201] usb 5-1: no configurations [ 2100.653254][ T9201] usb 5-1: can't read configurations, error -22 [ 2100.718735][ T9201] usb usb5-port1: attempt power cycle [ 2101.105119][ T9201] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2101.189786][ T9201] usb 5-1: no configurations [ 2101.195809][ T9201] usb 5-1: can't read configurations, error -22 [ 2101.374971][ T9201] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2101.457647][ T9201] usb 5-1: no configurations [ 2101.462699][ T9201] usb 5-1: can't read configurations, error -22 [ 2101.529886][ T9201] usb usb5-port1: unable to enumerate USB device [ 2102.358680][ T9201] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 2102.543870][ T9201] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2102.554323][ T9201] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.597884][ T9201] usb 8-1: config 0 descriptor?? [ 2102.637677][ T9201] cp210x 8-1:0.0: cp210x converter detected [ 2102.920296][ T9201] usb 8-1: cp210x converter now attached to ttyUSB0 [ 2103.130362][T15723] usb 8-1: USB disconnect, device number 107 [ 2103.189844][T15723] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2103.201412][T15723] cp210x 8-1:0.0: device disconnected [ 2105.184995][T20469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4655'. [ 2105.406252][T20472] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4657'. [ 2105.447738][T20472] netlink: 'syz.1.4657': attribute type 10 has an invalid length. [ 2105.457268][T20472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4657'. [ 2105.625218][ T9201] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2105.812647][ T9201] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2105.823513][ T9201] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2105.835135][ T9201] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2105.848584][ T9201] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2105.858101][ T9201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.018927][ T9201] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2106.027961][ T9201] usb 3-1: invalid MIDI out EP 0 [ 2106.201779][ T9200] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2106.400700][ T9200] usb 2-1: no configurations [ 2106.405880][ T9200] usb 2-1: can't read configurations, error -22 [ 2106.607164][ T9200] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2106.653168][ T9201] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2106.688495][T19589] udevd[19589]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2106.740142][ T9201] usb 3-1: USB disconnect, device number 83 [ 2106.851230][ T9200] usb 2-1: no configurations [ 2106.857160][ T9200] usb 2-1: can't read configurations, error -22 [ 2106.890745][ T9200] usb usb2-port1: attempt power cycle [ 2107.175418][ T1911] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 2107.274948][ T9200] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2107.333556][ T9200] usb 2-1: no configurations [ 2107.338746][ T9200] usb 2-1: can't read configurations, error -22 [ 2107.393751][ T1911] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2107.404129][ T1911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.435518][T20491] loop6: detected capacity change from 0 to 512 [ 2107.464905][T20491] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 2107.465425][ T1911] usb 8-1: config 0 descriptor?? [ 2107.489796][ T1911] cp210x 8-1:0.0: cp210x converter detected [ 2107.527762][ T9200] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2107.539422][T20491] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2107.560695][T20491] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4664: Block bitmap for bg 0 marked uninitialized [ 2107.596099][ T9200] usb 2-1: no configurations [ 2107.601244][ T9200] usb 2-1: can't read configurations, error -22 [ 2107.609346][ T9200] usb usb2-port1: unable to enumerate USB device [ 2107.619458][T20491] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 2107.645316][T20491] EXT4-fs (loop6): 1 orphan inode deleted [ 2107.655521][T20491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 2107.745369][T20491] EXT4-fs (loop6): shut down requested (1) [ 2107.788994][ T1911] usb 8-1: cp210x converter now attached to ttyUSB0 [ 2107.957075][T15723] usb 8-1: USB disconnect, device number 108 [ 2108.027062][T15723] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2108.047503][T15723] cp210x 8-1:0.0: device disconnected [ 2108.148930][T20491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2109.175083][ T5860] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2109.195308][T20506] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4669'. [ 2109.316066][T20506] netlink: 'syz.4.4669': attribute type 10 has an invalid length. [ 2109.316178][T20506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4669'. [ 2109.488452][ T5860] usb 7-1: Using ep0 maxpacket: 16 [ 2109.513641][ T5860] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2109.513820][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.513964][ T5860] usb 7-1: Product: syz [ 2109.514077][ T5860] usb 7-1: Manufacturer: syz [ 2109.514200][ T5860] usb 7-1: SerialNumber: syz [ 2109.520894][ T5860] usb 7-1: config 0 descriptor?? [ 2109.549202][ T5860] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 2109.552448][ T5860] usb 7-1: Detected FT-X [ 2109.732730][ T5860] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2110.153340][ T5860] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 2110.193443][ T5860] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2110.247331][ T5860] usb 7-1: USB disconnect, device number 67 [ 2110.306383][ T5860] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2110.320384][ T5860] ftdi_sio 7-1:0.0: device disconnected [ 2110.421085][T20518] batman_adv: batadv0: Adding interface: dummy0 [ 2110.428543][T20518] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2110.455150][T20518] batman_adv: batadv0: Interface activated: dummy0 [ 2111.817261][ T5860] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2112.057702][ T5860] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2112.067411][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.127429][ T5860] usb 3-1: config 0 descriptor?? [ 2112.199992][ T5860] cp210x 3-1:0.0: cp210x converter detected [ 2112.206684][T20540] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4682'. [ 2112.287966][T20540] netlink: 'syz.6.4682': attribute type 10 has an invalid length. [ 2112.296296][T20540] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4682'. [ 2112.388064][ T5860] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2112.398708][ T5860] cp210x 3-1:0.0: querying part number failed [ 2112.464095][ T5860] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2112.513169][ T5860] usb 3-1: USB disconnect, device number 84 [ 2112.538021][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2112.547326][ T5860] cp210x 3-1:0.0: device disconnected [ 2114.418489][T20563] fuse: Unknown parameter 'group_id00000000000000000000' [ 2115.278856][T20573] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4695'. [ 2115.333939][T20582] netlink: 'syz.6.4695': attribute type 10 has an invalid length. [ 2115.343066][T20582] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4695'. [ 2115.484810][ T5860] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2115.687275][ T5860] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2115.697734][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.769758][ T5860] usb 5-1: config 0 descriptor?? [ 2115.805221][ T5860] cp210x 5-1:0.0: cp210x converter detected [ 2115.902794][T20584] loop7: detected capacity change from 0 to 64 [ 2116.042762][ T5860] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2116.050787][ T5860] cp210x 5-1:0.0: querying part number failed [ 2116.118112][ T5860] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2116.181237][ T5860] usb 5-1: USB disconnect, device number 88 [ 2116.408706][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2116.411605][ T5860] cp210x 5-1:0.0: device disconnected [ 2116.468461][T18512] hfs: node 4:3 still has 2 user(s)! [ 2118.265519][T20609] fuse: Unknown parameter 'group_id00000000000000000000' [ 2118.949526][T20618] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4710'. [ 2119.023906][T20624] netlink: 'syz.1.4710': attribute type 10 has an invalid length. [ 2119.032767][T20624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4710'. [ 2119.317903][T20630] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 2119.755799][ T1911] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2119.944891][ T1911] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2119.955188][ T1911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.001515][ T1911] usb 7-1: config 0 descriptor?? [ 2120.045279][ T1911] cp210x 7-1:0.0: cp210x converter detected [ 2120.280713][ T1911] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2120.290379][ T1911] cp210x 7-1:0.0: querying part number failed [ 2120.362012][ T1911] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2120.451562][ T1911] usb 7-1: USB disconnect, device number 68 [ 2120.502913][ T1911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2120.514564][ T1911] cp210x 7-1:0.0: device disconnected [ 2121.622889][T20657] fuse: Bad value for 'user_id' [ 2121.628889][T20657] fuse: Bad value for 'user_id' [ 2122.424102][T20666] Bluetooth: MGMT ver 1.23 [ 2122.561048][T20669] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4725'. [ 2122.601070][T20669] netlink: 'syz.4.4725': attribute type 10 has an invalid length. [ 2122.609658][T20669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4725'. [ 2124.025078][ T5860] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2124.227034][ T5860] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2124.236995][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.299308][ T5860] usb 5-1: config 0 descriptor?? [ 2124.328678][ T5860] cp210x 5-1:0.0: cp210x converter detected [ 2124.565309][ T5860] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2124.573432][ T5860] cp210x 5-1:0.0: querying part number failed [ 2124.643795][ T5860] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2124.707421][ T5860] usb 5-1: USB disconnect, device number 89 [ 2124.737134][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2124.749499][ T5860] cp210x 5-1:0.0: device disconnected [ 2124.805058][T20692] fuse: Bad value for 'user_id' [ 2124.810256][T20692] fuse: Bad value for 'user_id' [ 2125.927922][T20705] netlink: 'syz.1.4739': attribute type 10 has an invalid length. [ 2125.941359][T20705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4739'. [ 2126.404317][T20709] loop4: detected capacity change from 0 to 1024 [ 2126.647224][T20709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2126.832957][T20709] EXT4-fs (loop4): shut down requested (0) [ 2127.202791][T14907] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2127.652223][T20727] fuse: Bad value for 'user_id' [ 2127.657608][T20727] fuse: Bad value for 'user_id' [ 2128.044737][ T1911] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2128.268115][ T1911] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2128.278085][ T1911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.328161][ T1911] usb 2-1: config 0 descriptor?? [ 2128.373763][ T1911] cp210x 2-1:0.0: cp210x converter detected [ 2128.622849][ T1911] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2128.632772][ T1911] cp210x 2-1:0.0: querying part number failed [ 2128.671337][ T1911] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2128.727898][ T1911] usb 2-1: USB disconnect, device number 52 [ 2128.790503][ T1911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2128.802344][ T1911] cp210x 2-1:0.0: device disconnected [ 2129.003970][T20745] netlink: 'syz.4.4753': attribute type 10 has an invalid length. [ 2129.012839][T20745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4753'. [ 2129.491309][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 2130.521348][T20762] fuse: Bad value for 'fd' [ 2130.949324][T20767] loop7: detected capacity change from 0 to 16 [ 2131.038622][T20767] erofs (device loop7): mounted with root inode @ nid 36. [ 2131.157411][T20767] syz.7.4762: attempt to access beyond end of device [ 2131.157411][T20767] loop7: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 2131.545013][ T5860] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2131.656347][T20778] netlink: 'syz.4.4767': attribute type 10 has an invalid length. [ 2131.664973][T20778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4767'. [ 2131.737624][ T5860] usb 3-1: device descriptor read/64, error -71 [ 2131.799251][T15723] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2131.978965][T15723] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2131.988798][T15723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.008043][ T5860] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 2132.078929][T15723] usb 7-1: config 0 descriptor?? [ 2132.122083][T15723] cp210x 7-1:0.0: cp210x converter detected [ 2132.175093][ T5860] usb 3-1: device descriptor read/64, error -71 [ 2132.312268][ T5860] usb usb3-port1: attempt power cycle [ 2132.342145][T15723] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2132.350396][T15723] cp210x 7-1:0.0: querying part number failed [ 2132.414194][T15723] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2132.477119][T15723] usb 7-1: USB disconnect, device number 69 [ 2132.521034][T15723] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2132.532534][T15723] cp210x 7-1:0.0: device disconnected [ 2132.695283][ T5860] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 2132.767543][ T5860] usb 3-1: device descriptor read/8, error -71 [ 2133.044922][ T5860] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 2133.067849][ T5860] usb 3-1: device descriptor read/8, error -71 [ 2133.197399][ T5860] usb usb3-port1: unable to enumerate USB device [ 2133.257089][T20792] fuse: Bad value for 'fd' [ 2133.565751][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4775'. [ 2134.138855][T20809] loop7: detected capacity change from 0 to 16 [ 2134.205708][T20809] erofs (device loop7): mounted with root inode @ nid 36. [ 2134.307616][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2134.314619][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2134.409016][T20809] syz.7.4778: attempt to access beyond end of device [ 2134.409016][T20809] loop7: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 2134.977344][T20814] netlink: 'syz.4.4780': attribute type 10 has an invalid length. [ 2134.986036][T20814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4780'. [ 2135.819251][T20829] fuse: Bad value for 'fd' [ 2136.662105][T20843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 2136.967226][T20847] loop6: detected capacity change from 0 to 16 [ 2137.068045][T20847] erofs (device loop6): mounted with root inode @ nid 36. [ 2137.225964][T20847] syz.6.4793: attempt to access beyond end of device [ 2137.225964][T20847] loop6: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 2137.895859][T20858] netlink: 'syz.4.4797': attribute type 10 has an invalid length. [ 2137.904132][T20858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4797'. [ 2138.015168][ T5860] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2138.215582][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 2138.314113][ T5860] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2138.324150][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.332665][ T5860] usb 2-1: Product: syz [ 2138.337279][ T5860] usb 2-1: Manufacturer: syz [ 2138.342164][ T5860] usb 2-1: SerialNumber: syz [ 2138.407808][ T5860] usb 2-1: config 0 descriptor?? [ 2138.423677][ T5860] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2138.435601][ T5860] usb 2-1: Detected FT-X [ 2138.632474][ T5860] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2138.855176][ T5860] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 2138.902221][ T5860] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2138.953632][ T5860] usb 2-1: USB disconnect, device number 53 [ 2139.022204][ T5860] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2139.035230][ T5860] ftdi_sio 2-1:0.0: device disconnected [ 2139.774258][T20878] loop7: detected capacity change from 0 to 64 [ 2139.975286][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4806'. [ 2140.194831][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4807'. [ 2141.163109][T20897] netlink: 'syz.1.4811': attribute type 10 has an invalid length. [ 2141.172021][T20897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4811'. [ 2142.453476][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4819'. [ 2148.162583][T20994] loop7: detected capacity change from 0 to 128 [ 2148.207979][T20994] EXT4-fs: Ignoring removed nobh option [ 2148.350087][T20994] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2148.385047][T20994] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2148.454984][ T30] audit: type=1800 audit(2000000022.010:59): pid=20994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4850" name="file2" dev="loop7" ino=12 res=0 errno=0 [ 2148.771037][T18512] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2150.304207][T21011] loop7: detected capacity change from 0 to 8192 [ 2150.365938][T21011] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2152.069002][T21042] loop6: detected capacity change from 0 to 1024 [ 2152.286635][T21042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2152.747066][T18625] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2153.485173][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4876'. [ 2155.294739][T15723] usb 8-1: new full-speed USB device number 109 using dummy_hcd [ 2155.498199][T15723] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2155.511910][T15723] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 2155.521662][T15723] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.636592][T15723] usb 8-1: config 0 descriptor?? [ 2155.680000][T15723] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 2156.077188][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4890'. [ 2158.139208][ T1911] usb 8-1: USB disconnect, device number 109 [ 2158.535464][T21136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4903'. [ 2159.638223][ T1911] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 2159.877505][ T1911] usb 8-1: Using ep0 maxpacket: 16 [ 2159.907261][ T1911] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2159.916864][ T1911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.925469][ T1911] usb 8-1: Product: syz [ 2159.929914][ T1911] usb 8-1: Manufacturer: syz [ 2159.935049][ T1911] usb 8-1: SerialNumber: syz [ 2160.008766][ T1911] usb 8-1: config 0 descriptor?? [ 2160.042409][ T1911] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 2160.059960][ T1911] usb 8-1: Detected FT-X [ 2160.227833][ T1911] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2160.472080][ T1911] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 2160.496169][ T1911] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2160.538693][ T1911] usb 8-1: USB disconnect, device number 110 [ 2160.607829][ T1911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2160.621423][ T1911] ftdi_sio 8-1:0.0: device disconnected [ 2161.155652][ T5860] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 2161.343257][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.353880][ T5860] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 2161.363762][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.467970][ T5860] usb 2-1: config 0 descriptor?? [ 2161.526479][ T5860] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2161.636681][T21171] binder: 21169:21171 ioctl c0306201 80001900 returned -14 [ 2164.138442][ T5860] usb 2-1: USB disconnect, device number 54 [ 2165.570855][T21224] loop7: detected capacity change from 0 to 1024 [ 2165.748959][T21224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2165.880969][T21224] EXT4-fs (loop7): shut down requested (0) [ 2166.069069][T18512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2166.284906][ T5860] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2166.509254][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.521483][ T5860] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 2166.531190][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.595021][ T5860] usb 2-1: config 0 descriptor?? [ 2166.664052][ T5860] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2169.317618][ T1911] usb 2-1: USB disconnect, device number 55 [ 2170.475893][T21303] binder: 21301:21303 ioctl 4018620d 0 returned -22 [ 2171.350188][ T5860] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 2171.546273][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2171.557334][ T5860] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 2171.566979][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.627407][ T5860] usb 3-1: config 0 descriptor?? [ 2171.654690][ T5860] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2171.690092][T21321] loop6: detected capacity change from 0 to 64 [ 2172.580558][T21334] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4980'. [ 2174.347509][ T5860] usb 3-1: USB disconnect, device number 89 [ 2175.288529][T21375] binder: BINDER_SET_CONTEXT_MGR already set [ 2175.295377][T21375] binder: 21373:21375 ioctl 4018620d 80000040 returned -16 [ 2180.953840][T21465] fuse: Bad value for 'fd' [ 2180.991617][T21464] loop7: detected capacity change from 0 to 512 [ 2181.247937][T21464] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5032: bg 0: block 5: invalid block bitmap [ 2181.377871][T21464] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 2181.485661][T21464] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5032: invalid indirect mapped block 3 (level 2) [ 2181.585176][T21464] EXT4-fs (loop7): 2 truncates cleaned up [ 2181.593649][T21464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2181.923545][T18512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2187.004760][ T1911] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 2187.216704][ T1911] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 2187.229113][ T1911] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 65535, setting to 1024 [ 2187.241468][ T1911] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 2187.252185][ T1911] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 2187.261897][ T1911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.308970][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5074'. [ 2187.365941][ T1911] usb 8-1: config 0 descriptor?? [ 2187.374176][T21556] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2187.400488][ T1911] gspca_main: spca561-2.14.0 probing abcd:cdee [ 2187.679679][ T1911] spca561 8-1:0.0: probe with driver spca561 failed with error -22 [ 2187.691172][ T1911] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 2187.702186][ T1911] usb 8-1: MIDIStreaming interface descriptor not found [ 2188.054330][ T1911] usb 8-1: USB disconnect, device number 111 [ 2188.134068][T20484] udevd[20484]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2190.348463][T21597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5088'. [ 2190.979792][ T1911] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2191.047489][ T1911] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2191.668365][T21608] fido_id[21608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2192.944051][T21631] overlayfs: failed to clone upperpath [ 2194.910667][T21667] overlayfs: failed to clone upperpath [ 2195.741895][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2195.749033][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2197.967024][T21712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2199.385343][ T1911] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 2199.565635][ T1911] usb 8-1: Using ep0 maxpacket: 16 [ 2199.607118][ T1911] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2199.620737][ T1911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.629471][ T1911] usb 8-1: Product: syz [ 2199.633931][ T1911] usb 8-1: Manufacturer: syz [ 2199.638992][ T1911] usb 8-1: SerialNumber: syz [ 2199.709098][ T1911] usb 8-1: config 0 descriptor?? [ 2199.763487][ T1911] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 2199.774829][ T1911] usb 8-1: Detected FT-X [ 2199.934146][ T1911] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2200.361700][ T1911] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 2200.420273][ T1911] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2200.458356][ T1911] usb 8-1: USB disconnect, device number 112 [ 2200.518050][ T1911] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2200.531826][ T1911] ftdi_sio 8-1:0.0: device disconnected [ 2200.544001][T11204] udevd[11204]: setting mode of /dev/bus/usb/008/112 to 020664 failed: No such file or directory [ 2200.585638][T11204] udevd[11204]: setting owner of /dev/bus/usb/008/112 to uid=0, gid=0 failed: No such file or directory [ 2201.622196][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5155'. [ 2201.635017][T21764] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5155'. [ 2201.646564][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5155'. [ 2205.304760][ T5860] usb 8-1: new full-speed USB device number 113 using dummy_hcd [ 2205.517523][ T5860] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.531767][ T5860] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2205.616927][ T5860] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2205.629196][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.638987][ T5860] usb 8-1: Product: syz [ 2205.643461][ T5860] usb 8-1: Manufacturer: syz [ 2205.648954][ T5860] usb 8-1: SerialNumber: syz [ 2205.966791][ T5860] usb 8-1: 0:2 : does not exist [ 2206.076339][ T5860] usb 8-1: USB disconnect, device number 113 [ 2206.232761][T11204] udevd[11204]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2208.975355][ T5860] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 2209.038956][T21876] overlayfs: failed to resolve './file0': -2 [ 2209.154689][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 2209.203085][ T5860] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2209.215361][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.223812][ T5860] usb 8-1: Product: syz [ 2209.229032][ T5860] usb 8-1: Manufacturer: syz [ 2209.233950][ T5860] usb 8-1: SerialNumber: syz [ 2209.266497][ T5860] usb 8-1: config 0 descriptor?? [ 2209.301462][ T5860] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 2209.317800][ T5860] usb 8-1: Detected FT-X [ 2209.481613][ T5860] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 2209.917401][ T5860] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 2209.968794][ T5860] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2210.035332][ T5860] usb 8-1: USB disconnect, device number 114 [ 2210.062170][ T5860] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2210.075156][ T5860] ftdi_sio 8-1:0.0: device disconnected [ 2215.622440][T21988] batman_adv: batadv0: Adding interface: dummy0 [ 2215.632768][T21988] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2215.662372][T21988] batman_adv: batadv0: Interface activated: dummy0 [ 2220.304797][ T1911] usb 8-1: new full-speed USB device number 115 using dummy_hcd [ 2220.500773][ T1911] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.511789][ T1911] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2220.568460][ T1911] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2220.579768][ T1911] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.588609][ T1911] usb 8-1: Product: syz [ 2220.593079][ T1911] usb 8-1: Manufacturer: syz [ 2220.598805][ T1911] usb 8-1: SerialNumber: syz [ 2220.900634][ T1911] usb 8-1: 0:2 : does not exist [ 2221.002321][ T1911] usb 8-1: USB disconnect, device number 115 [ 2221.201022][T11204] udevd[11204]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2222.644807][T22087] batman_adv: batadv0: Adding interface: dummy0 [ 2222.651573][T22087] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2222.678109][T22087] batman_adv: batadv0: Interface activated: dummy0 [ 2223.561444][T22103] overlayfs: missing 'lowerdir' [ 2226.113241][T22142] overlay: Unknown parameter ':' [ 2227.205785][T22163] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5316'. [ 2227.215373][T22163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5316'. [ 2229.085073][T22192] overlay: Unknown parameter ':' [ 2229.765932][T22204] ALSA: mixer_oss: invalid OSS volume '3' [ 2229.772246][T22204] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 2229.779194][T22204] ALSA: mixer_oss: invalid OSS volume '4' [ 2229.789322][T22204] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 2229.797273][T22204] ALSA: mixer_oss: invalid OSS volume '5' [ 2229.803293][T22204] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 2229.810155][T22204] ALSA: mixer_oss: invalid OSS volume '6' [ 2231.395600][T22223] loop7: detected capacity change from 0 to 1024 [ 2231.786507][T22230] overlay: Unknown parameter ':' [ 2231.928262][T22223] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2232.262101][T18512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2232.896903][ T5860] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 2233.075249][ T5860] usb 8-1: Using ep0 maxpacket: 32 [ 2233.099992][ T5860] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 2233.108820][ T5860] usb 8-1: config 0 has no interface number 0 [ 2233.115631][ T5860] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2233.127119][ T5860] usb 8-1: config 0 interface 85 has no altsetting 0 [ 2233.242646][ T5860] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2233.252515][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.261178][ T5860] usb 8-1: Product: syz [ 2233.265801][ T5860] usb 8-1: Manufacturer: syz [ 2233.273201][ T5860] usb 8-1: SerialNumber: syz [ 2233.327153][ T5860] usb 8-1: config 0 descriptor?? [ 2233.765507][ T5860] appletouch 8-1:0.85: Failed to request geyser raw mode [ 2233.773777][ T5860] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 2233.856420][ T5860] usb 8-1: USB disconnect, device number 116 [ 2233.900066][T11204] udevd[11204]: setting mode of /dev/bus/usb/008/116 to 020664 failed: No such file or directory [ 2233.940100][T11204] udevd[11204]: setting owner of /dev/bus/usb/008/116 to uid=0, gid=0 failed: No such file or directory [ 2234.850214][T22271] binder: BINDER_SET_CONTEXT_MGR already set [ 2234.856675][T22271] binder: 22268:22271 ioctl 4018620d 80000040 returned -16 [ 2238.056581][T22326] net_ratelimit: 10 callbacks suppressed [ 2238.056676][T22326] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 2242.515509][ T1911] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 2242.708057][ T1911] usb 8-1: Using ep0 maxpacket: 32 [ 2242.743557][ T1911] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2242.753215][ T1911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.793423][ T1911] usb 8-1: config 0 descriptor?? [ 2243.040219][ T1911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2243.067922][ T1911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2243.137551][ T1911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2243.152135][ T1911] usb 8-1: media controller created [ 2243.259272][ T1911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2244.227875][ T1911] stb0899_attach: Driver disabled by Kconfig [ 2244.234193][ T1911] az6027: no front-end attached [ 2244.234193][ T1911] [ 2244.256697][ T1911] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2244.273424][ T1911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input89 [ 2244.345654][ T1911] dvb-usb: schedule remote query interval to 400 msecs. [ 2244.353022][ T1911] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2244.458622][ T5860] usb 8-1: USB disconnect, device number 117 [ 2244.810374][ T5860] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2245.410188][T22408] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 2245.673039][T22411] loop7: detected capacity change from 0 to 1024 [ 2245.723848][T22411] EXT4-fs: Ignoring removed orlov option [ 2245.730269][T22411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2245.814575][T22411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2246.243183][T18512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2246.610232][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5433'. [ 2246.621474][T22432] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5433'. [ 2246.632562][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5433'. [ 2247.667322][T22448] fuse: Unknown parameter 'group_i00000000000000000000' [ 2248.431059][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5446'. [ 2248.440761][T22461] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5446'. [ 2248.451587][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5446'. [ 2249.713788][T22479] fuse: Unknown parameter 'group_i00000000000000000000' [ 2249.816260][ T1911] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 2250.045019][ T1911] usb 8-1: Using ep0 maxpacket: 32 [ 2250.099160][ T1911] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2250.108906][ T1911] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2250.168086][ T1911] usb 8-1: config 0 descriptor?? [ 2250.467723][ T1911] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 2250.500178][ T1911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2250.565146][ T1911] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 2250.572859][ T1911] usb 8-1: media controller created [ 2250.650310][T19369] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2250.688001][ T1911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2250.726924][T19369] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2250.736810][T19369] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2250.751277][T19369] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2250.763405][T19369] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2250.816385][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5459'. [ 2250.826403][T22488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5459'. [ 2250.842374][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5459'. [ 2251.775075][ T1911] stb0899_attach: Driver disabled by Kconfig [ 2251.781573][ T1911] az6027: no front-end attached [ 2251.781573][ T1911] [ 2251.834043][T22487] chnl_net:caif_netlink_parms(): no params data found [ 2251.836026][ T1911] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 2251.852624][ T1911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input90 [ 2251.938679][ T1911] dvb-usb: schedule remote query interval to 400 msecs. [ 2251.951532][ T1911] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 2252.112513][ T1911] usb 8-1: USB disconnect, device number 118 [ 2252.489409][ T1911] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 2252.846455][T19369] Bluetooth: hci4: command tx timeout [ 2253.098106][T22516] fuse: Unknown parameter 'group_id00000000000000000000' [ 2253.553719][T22487] bridge0: port 1(bridge_slave_0) entered blocking state [ 2253.561832][T22487] bridge0: port 1(bridge_slave_0) entered disabled state [ 2253.569912][T22487] bridge_slave_0: entered allmulticast mode [ 2253.580331][T22487] bridge_slave_0: entered promiscuous mode [ 2253.629800][T22487] bridge0: port 2(bridge_slave_1) entered blocking state [ 2253.638044][T22487] bridge0: port 2(bridge_slave_1) entered disabled state [ 2253.650169][T22487] bridge_slave_1: entered allmulticast mode [ 2253.660359][T22487] bridge_slave_1: entered promiscuous mode [ 2254.040001][T22487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2254.148621][T22487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2254.205616][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5472'. [ 2254.215141][T22524] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5472'. [ 2254.225935][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5472'. [ 2254.581737][T22487] team0: Port device team_slave_0 added [ 2254.658529][T22487] team0: Port device team_slave_1 added [ 2254.927029][T19369] Bluetooth: hci4: command tx timeout [ 2254.965392][T22487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2254.972671][T22487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2255.004723][T22487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2255.029154][T22532] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5475'. [ 2255.219583][T22487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2255.228195][T22487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2255.256468][T22487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2255.380917][ T3532] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.617956][ T3532] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2255.811173][T22487] hsr_slave_0: entered promiscuous mode [ 2255.822213][T22487] hsr_slave_1: entered promiscuous mode [ 2255.831501][T22487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2255.839524][T22487] Cannot create hsr debugfs directory [ 2255.862263][ T3532] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.025482][ T3532] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.996326][T19369] Bluetooth: hci4: command tx timeout [ 2257.182239][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2257.189646][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2257.238918][ T3532] bond0 (unregistering): Released all slaves [ 2257.627090][ T3532] IPVS: stopping master sync thread 20630 ... [ 2257.987358][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5485'. [ 2257.996905][T22556] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5485'. [ 2258.007722][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5485'. [ 2258.178240][ T3532] hsr_slave_0: left promiscuous mode [ 2258.198175][ T3532] hsr_slave_1: left promiscuous mode [ 2258.209631][ T3532] batman_adv: batadv0: Interface deactivated: dummy0 [ 2258.218054][ T3532] batman_adv: batadv0: Removing interface: dummy0 [ 2258.268550][ T3532] veth1_macvtap: left promiscuous mode [ 2258.274770][ T3532] veth0_macvtap: left promiscuous mode [ 2258.281017][ T3532] veth1_vlan: left promiscuous mode [ 2258.286997][ T3532] veth0_vlan: left promiscuous mode [ 2258.503264][T22561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5487'. [ 2259.076273][T19369] Bluetooth: hci4: command tx timeout [ 2260.662685][T22487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2260.747928][T22487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2260.846210][T22487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2260.936625][T22487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2261.119972][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'. [ 2261.131487][T22587] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5497'. [ 2261.143176][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'. [ 2261.906632][T22596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5503'. [ 2261.952360][T22487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2262.088516][T22487] 8021q: adding VLAN 0 to HW filter on device team0 [ 2262.168062][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.175882][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2262.280140][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.287991][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2263.465424][T15723] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 2263.669993][T15723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2263.685126][T15723] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2263.695400][T15723] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2263.708821][T15723] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2263.718397][T15723] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.828438][T15723] usb 8-1: config 0 descriptor?? [ 2264.210541][T22487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2264.289560][T15723] plantronics 0003:047F:FFFF.0017: collection stack underflow [ 2264.301054][T15723] plantronics 0003:047F:FFFF.0017: item 0 2 0 12 parsing failed [ 2264.361106][T15723] plantronics 0003:047F:FFFF.0017: parse failed [ 2264.368461][T15723] plantronics 0003:047F:FFFF.0017: probe with driver plantronics failed with error -22 [ 2264.371798][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5512'. [ 2264.389854][T22625] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5512'. [ 2264.403998][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5512'. [ 2264.487276][ T9200] usb 8-1: USB disconnect, device number 119 [ 2265.053324][T22635] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5515'. [ 2266.122958][ T30] audit: type=1326 audit(2000000139.660:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.147576][ T30] audit: type=1326 audit(2000000139.660:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.171078][ T30] audit: type=1326 audit(2000000139.690:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.193585][ T30] audit: type=1326 audit(2000000139.690:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.216292][ T30] audit: type=1326 audit(2000000139.690:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.238805][ T30] audit: type=1326 audit(2000000139.690:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.263131][ T30] audit: type=1326 audit(2000000139.700:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.286383][ T30] audit: type=1326 audit(2000000139.700:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.308834][ T30] audit: type=1326 audit(2000000139.710:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.331405][ T30] audit: type=1326 audit(2000000139.710:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22648 comm="syz.1.5519" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48539 code=0x7ffc0000 [ 2266.717978][T22487] veth0_vlan: entered promiscuous mode [ 2266.807295][T22487] veth1_vlan: entered promiscuous mode [ 2267.080509][T22487] veth0_macvtap: entered promiscuous mode [ 2267.142653][T22487] veth1_macvtap: entered promiscuous mode [ 2267.213759][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5524'. [ 2267.223839][T22663] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5524'. [ 2267.235752][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5524'. [ 2267.332519][T22487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2267.409764][T22487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2267.500596][T22487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.510017][T22487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.520069][T22487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2267.529378][T22487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.017598][T22673] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5527'. [ 2272.450973][ T5860] IPVS: starting estimator thread 0... [ 2272.555267][T22735] IPVS: using max 192 ests per chain, 9600 per kthread [ 2274.002143][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.011188][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.202430][T14988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.210920][T14988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2276.295640][T22778] sctp: [Deprecated]: syz.6.5564 (pid 22778) Use of int in max_burst socket option deprecated. [ 2276.295640][T22778] Use struct sctp_assoc_value instead [ 2277.328960][T22787] loop4: detected capacity change from 0 to 128 [ 2277.763029][T14070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2277.773439][T14070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2277.786924][T14070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2277.801318][T14070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2277.816978][T14070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2277.834829][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2277.834922][ T30] audit: type=1800 audit(2000000151.360:88): pid=22787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5568" name="file2" dev="loop4" ino=1048737 res=0 errno=0 [ 2277.868175][T22787] syz.4.5568: attempt to access beyond end of device [ 2277.868175][T22787] loop4: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 2279.297000][ T5860] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 2279.545102][ T5860] usb 8-1: Using ep0 maxpacket: 16 [ 2279.579451][ T5860] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.590318][ T5860] usb 8-1: config 0 has no interfaces? [ 2279.659595][ T5860] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 2279.669889][ T5860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.678561][ T5860] usb 8-1: Product: syz [ 2279.683036][ T5860] usb 8-1: Manufacturer: syz [ 2279.688050][ T5860] usb 8-1: SerialNumber: syz [ 2279.818439][ T5860] usb 8-1: config 0 descriptor?? [ 2279.879706][T14070] Bluetooth: hci5: command tx timeout [ 2280.105804][T22790] chnl_net:caif_netlink_parms(): no params data found [ 2281.505946][T22790] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.513678][T22790] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.524808][T22790] bridge_slave_0: entered allmulticast mode [ 2281.535418][T22790] bridge_slave_0: entered promiscuous mode [ 2281.608135][T22790] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.616342][T22790] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.624706][T22790] bridge_slave_1: entered allmulticast mode [ 2281.635210][T22790] bridge_slave_1: entered promiscuous mode [ 2281.957782][T14070] Bluetooth: hci5: command tx timeout [ 2282.075609][T22790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2282.176910][T22790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2282.258261][ T1911] usb 8-1: USB disconnect, device number 120 [ 2282.489182][T22790] team0: Port device team_slave_0 added [ 2282.563378][T22790] team0: Port device team_slave_1 added [ 2282.816332][T22790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2282.823755][T22790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2282.853006][T22790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2282.916985][T22790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2282.924610][T22790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2282.953748][T22790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2283.213337][T22790] hsr_slave_0: entered promiscuous mode [ 2283.224712][T22790] hsr_slave_1: entered promiscuous mode [ 2283.233886][T22790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2283.244576][T22790] Cannot create hsr debugfs directory [ 2284.035233][T14070] Bluetooth: hci5: command tx timeout [ 2284.416702][T22790] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.579589][T22790] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.716520][T22790] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2284.877285][T22790] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.421112][T22790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2285.537801][T22790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2285.627339][T22790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2285.726539][T22790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2286.117943][T14070] Bluetooth: hci5: command tx timeout [ 2287.027859][T22790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2287.273637][T22790] 8021q: adding VLAN 0 to HW filter on device team0 [ 2287.385148][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.392812][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.489042][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.496771][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2289.816898][T22790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2289.993326][T22894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5610'. [ 2290.352522][T22790] veth0_vlan: entered promiscuous mode [ 2290.481222][T22790] veth1_vlan: entered promiscuous mode [ 2290.820889][T22790] veth0_macvtap: entered promiscuous mode [ 2290.905509][T22790] veth1_macvtap: entered promiscuous mode [ 2291.074059][T22790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.165286][T22790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.239996][T22790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.250410][T22790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.259766][T22790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2291.269109][T22790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2294.878519][T22958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5635'. [ 2295.062231][T22963] fuse: Bad value for 'fd' [ 2296.074063][T22978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5642'. [ 2297.478421][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.486987][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2297.497687][T22993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5648'. [ 2297.761638][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2297.770078][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2299.402237][T23021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5662'. [ 2300.097995][T23037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5665'. [ 2300.101441][T23036] fuse: Bad value for 'group_id' [ 2300.116763][T23036] fuse: Bad value for 'group_id' [ 2301.729167][T23056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5676'. [ 2302.893933][T23072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5683'. [ 2303.939915][T23084] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5689'. [ 2305.381501][T23103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5698'. [ 2306.216927][T23114] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5701'. [ 2307.946259][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5713'. [ 2308.574180][T23147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5715'. [ 2310.659302][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5728'. [ 2311.024280][T23178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5729'. [ 2312.743086][T23209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5744'. [ 2313.238940][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5746'. [ 2314.993602][T23241] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5759'. [ 2315.550664][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5765'. [ 2316.690184][T23269] fuse: Unknown parameter 'grou00000000000000000000' [ 2316.715374][T23274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5773'. [ 2317.775509][T23290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5781'. [ 2318.616134][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2318.623136][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2318.648496][T23303] fuse: Unknown parameter 'grou00000000000000000000' [ 2318.837278][T23306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5789'. [ 2319.097908][T23312] fuse: Bad value for 'fd' [ 2320.137661][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5799'. [ 2320.247642][T23334] fuse: Unknown parameter 'grou00000000000000000000' [ 2320.656989][T23336] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5803'. [ 2322.419879][T23370] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5817'. [ 2322.732398][T23372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5818'. [ 2324.504614][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5833'. [ 2326.238949][T23434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5848'. [ 2328.783269][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5863'. [ 2329.295541][T23477] netlink: 'syz.1.5866': attribute type 1 has an invalid length. [ 2330.609152][T23504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5879'. [ 2330.934161][T14070] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2331.224204][T23512] 9pnet_virtio: no channels available for device syz [ 2332.791551][T23536] syz_tun: entered promiscuous mode [ 2332.807093][T23536] batadv_slave_0: entered promiscuous mode [ 2332.817455][T23536] hsr1: entered allmulticast mode [ 2332.822887][T23536] syz_tun: entered allmulticast mode [ 2332.828656][T23536] batadv_slave_0: entered allmulticast mode [ 2333.133775][T23543] fuse: Bad value for 'user_id' [ 2333.139623][T23543] fuse: Bad value for 'user_id' [ 2335.075312][T23575] fuse: Bad value for 'user_id' [ 2335.080588][T23575] fuse: Bad value for 'user_id' [ 2338.976285][T23631] 9pnet_virtio: no channels available for device syz [ 2339.870275][T14070] Bluetooth: hci1: Malformed LE Event: 0x0b [ 2341.569187][T14070] Bluetooth: hci3: Malformed LE Event: 0x0b [ 2342.865724][T23690] syz.2.5968 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2343.005506][T23694] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5970'. [ 2343.017239][T23694] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5970'. [ 2354.276228][T23855] 9pnet_virtio: no channels available for device syz [ 2356.377484][T14070] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2357.310943][T23900] overlayfs: failed to clone upperpath [ 2359.506209][T14070] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2362.502736][T14070] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2364.606084][T23991] 9pnet_virtio: no channels available for device syz [ 2365.191652][T14070] Bluetooth: hci5: Malformed LE Event: 0x0d [ 2365.920744][T24008] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 2366.998681][T24021] 9pnet_virtio: no channels available for device syz [ 2367.973079][T14070] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2369.519835][T24051] 9pnet_virtio: no channels available for device syz [ 2369.570018][T24051] 9pnet_fd: Insufficient options for proto=fd [ 2370.627761][T14070] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2371.587759][T24082] 9pnet_virtio: no channels available for device syz [ 2371.674201][T24082] 9pnet_fd: Insufficient options for proto=fd [ 2373.677555][T24112] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 2375.162523][T24136] syz_tun: entered promiscuous mode [ 2375.176259][T24136] batadv_slave_0: entered promiscuous mode [ 2375.186162][T24136] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2375.194141][T24136] Cannot create hsr debugfs directory [ 2375.203574][T24136] hsr1: entered allmulticast mode [ 2375.209086][T24136] syz_tun: entered allmulticast mode [ 2375.214868][T24136] batadv_slave_0: entered allmulticast mode [ 2376.995828][T24134] Bluetooth: hci4: command 0x0406 tx timeout [ 2377.264485][ T30] audit: type=1326 audit(2000000250.780:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24158 comm="syz.4.6188" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 2380.075396][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2380.082610][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2382.288104][T24245] 9pnet_virtio: no channels available for device syz [ 2388.777470][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2388.788332][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2391.998938][T24346] syz_tun: entered promiscuous mode [ 2392.010478][T24346] batadv_slave_0: entered promiscuous mode [ 2392.024961][T24346] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2392.032945][T24346] Cannot create hsr debugfs directory [ 2392.039449][T24346] hsr1: entered allmulticast mode [ 2392.044870][T24346] syz_tun: entered allmulticast mode [ 2392.050426][T24346] batadv_slave_0: entered allmulticast mode [ 2392.939167][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2392.947832][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2395.073686][T24372] netlink: 'syz.6.6274': attribute type 58 has an invalid length. [ 2395.261406][T24374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2395.683219][T24374] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2395.856422][T24377] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6273'. [ 2395.869781][T24377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2395.887731][T24385] 9pnet_virtio: no channels available for device syz [ 2396.997294][T14070] Bluetooth: hci3: unexpected event 0x3e length: 262 > 260 [ 2396.997467][T14070] Bluetooth: hci3: unexpected subevent 0x0d length: 261 > 260 [ 2397.016933][T14070] Bluetooth: hci3: adv larger than maximum supported [ 2397.017064][T14070] Bluetooth: hci3: adv larger than maximum supported [ 2398.984708][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6295'. [ 2399.276420][T24424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6293'. [ 2399.576830][T24424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6293'. [ 2399.589741][T24424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2400.005845][T24430] syz_tun: entered promiscuous mode [ 2400.018552][T24430] batadv_slave_0: entered promiscuous mode [ 2400.028316][T24430] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2400.036322][T24430] Cannot create hsr debugfs directory [ 2400.042453][T24430] hsr1: entered allmulticast mode [ 2400.050758][T24430] syz_tun: entered allmulticast mode [ 2400.057222][T24430] batadv_slave_0: entered allmulticast mode [ 2402.341767][T24461] 9pnet_fd: Insufficient options for proto=fd [ 2402.599757][T24134] Bluetooth: hci5: command 0x0406 tx timeout [ 2402.706608][T24465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6310'. [ 2402.974767][T24465] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2403.034503][T24465] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6310'. [ 2403.246165][T24465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2405.712755][T24506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6327'. [ 2406.020905][T24509] syz_tun: entered promiscuous mode [ 2406.033492][T24509] batadv_slave_0: entered promiscuous mode [ 2406.047618][T24509] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2406.055709][T24509] Cannot create hsr debugfs directory [ 2406.061834][T24509] hsr1: entered allmulticast mode [ 2406.067316][T24509] syz_tun: entered allmulticast mode [ 2406.072893][T24509] batadv_slave_0: entered allmulticast mode [ 2408.861478][T24541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6340'. [ 2410.243884][T24554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2410.251565][T24554] IPv6: NLM_F_CREATE should be set when creating new route [ 2410.259253][T24554] IPv6: NLM_F_CREATE should be set when creating new route [ 2414.246199][T24593] 9pnet_virtio: no channels available for device syz [ 2417.945073][T24619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6371'. [ 2430.186672][T24741] vxcan1: entered promiscuous mode [ 2434.855708][T24791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6444'. [ 2441.522945][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2441.530046][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2443.297118][T24862] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6474'. [ 2444.205785][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6477'. [ 2445.056480][T24879] 9pnet_virtio: no channels available for device syz [ 2447.055717][T24898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6488'. [ 2447.903096][T24895] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6489'. [ 2447.956666][T24895] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6489'. [ 2451.517972][ T8643] bond0 (unregistering): Released all slaves [ 2452.381130][T24936] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6503'. [ 2452.525147][ T8643] hsr_slave_0: left promiscuous mode [ 2452.549991][ T8643] hsr_slave_1: left promiscuous mode [ 2452.558537][ T8643] batman_adv: batadv0: Interface deactivated: dummy0 [ 2452.566688][ T8643] batman_adv: batadv0: Removing interface: dummy0 [ 2452.667914][ T8643] veth1_macvtap: left promiscuous mode [ 2452.673796][ T8643] veth0_macvtap: left promiscuous mode [ 2452.683496][ T8643] veth1_vlan: left promiscuous mode [ 2452.689524][ T8643] veth0_vlan: left promiscuous mode [ 2456.285084][T24964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6514'. [ 2456.999057][T24946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6505'. [ 2457.046617][T24970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6505'. [ 2457.701021][T24979] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6520'. [ 2460.286615][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6528'. [ 2461.329022][T25010] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6532'. [ 2464.036724][T25040] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6544'. [ 2464.849080][T25048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6549'. [ 2466.910019][T25074] netlink: 'syz.7.6558': attribute type 58 has an invalid length. [ 2466.921705][T25074] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6558'. [ 2469.589407][T25104] netlink: 'syz.2.6572': attribute type 58 has an invalid length. [ 2469.597711][T25104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6572'. [ 2472.130418][T25144] netlink: 'syz.1.6585': attribute type 58 has an invalid length. [ 2472.141195][T25144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6585'. [ 2472.393176][T25147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6587'. [ 2474.478676][T25169] 9pnet_fd: Insufficient options for proto=fd [ 2475.745579][T25179] netlink: 'syz.1.6598': attribute type 58 has an invalid length. [ 2475.756158][T25179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6598'. [ 2477.776168][T25199] 9pnet_fd: Insufficient options for proto=fd [ 2478.557115][T25213] netlink: 'syz.2.6611': attribute type 58 has an invalid length. [ 2478.565608][T25213] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6611'. [ 2480.386718][T25231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6617'. [ 2480.541358][T25234] 9pnet_fd: Insufficient options for proto=fd [ 2481.635899][T25247] netlink: 'syz.1.6624': attribute type 58 has an invalid length. [ 2481.645429][T25247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6624'. [ 2483.655691][T25268] 9pnet_fd: Insufficient options for proto=fd [ 2484.567435][T25259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6628'. [ 2484.777508][T25259] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6628'. [ 2484.888804][T25259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6628'. [ 2486.820252][T25299] 9pnet_fd: Insufficient options for proto=fd [ 2488.022595][T25317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6655'. [ 2488.410044][T25310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6652'. [ 2488.437088][T25310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6652'. [ 2488.470002][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6652'. [ 2489.145799][T25333] 9pnet_fd: Insufficient options for proto=fd [ 2490.493942][T25352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6668'. [ 2492.770237][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6671'. [ 2492.870654][T25363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6671'. [ 2492.990137][T25363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6671'. [ 2495.205639][T25395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6683'. [ 2495.291359][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6683'. [ 2498.054137][T25435] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6698'. [ 2498.751579][T25422] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6693'. [ 2498.837780][T25422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6693'. [ 2500.356529][T14070] Bluetooth: hci5: adv larger than maximum supported [ 2500.356664][T14070] Bluetooth: hci5: adv larger than maximum supported [ 2500.593953][T25466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6711'. [ 2501.864057][T25476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6715'. [ 2501.912093][T25476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6715'. [ 2502.872727][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2502.872878][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2502.956722][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2502.972920][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2503.230075][T25502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6725'. [ 2504.843289][T25522] netlink: 'syz.2.6733': attribute type 58 has an invalid length. [ 2505.216397][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2505.216546][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2505.607395][T25535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6738'. [ 2506.063699][T25524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6734'. [ 2506.123877][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6734'. [ 2507.377496][T25561] netlink: 'syz.6.6748': attribute type 58 has an invalid length. [ 2507.402235][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2507.402363][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2508.245333][T25574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6755'. [ 2509.075254][T25572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6754'. [ 2509.166532][T25572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6754'. [ 2509.240610][T25572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6754'. [ 2510.492612][T25599] netlink: 'syz.2.6764': attribute type 10 has an invalid length. [ 2510.501326][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6764'. [ 2510.526684][T14070] Bluetooth: hci3: adv larger than maximum supported [ 2510.526814][T14070] Bluetooth: hci3: adv larger than maximum supported [ 2512.725404][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2512.801636][T25615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2512.858495][T25615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6772'. [ 2513.473357][T14070] Bluetooth: hci5: adv larger than maximum supported [ 2513.473505][T14070] Bluetooth: hci5: adv larger than maximum supported [ 2513.745442][T25633] netlink: 'syz.7.6779': attribute type 10 has an invalid length. [ 2513.761220][T25633] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6779'. [ 2515.330543][T25659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6790'. [ 2515.607710][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2515.607853][T14070] Bluetooth: hci4: adv larger than maximum supported [ 2516.035844][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6787'. [ 2516.172143][T25649] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6787'. [ 2516.187073][T25649] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6787'. [ 2516.402340][T25669] netlink: 'syz.1.6793': attribute type 10 has an invalid length. [ 2516.410798][T25669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6793'. [ 2518.004858][T14070] Bluetooth: hci1: adv larger than maximum supported [ 2518.004999][T14070] Bluetooth: hci1: adv larger than maximum supported [ 2518.164115][ T9200] IPVS: starting estimator thread 0... [ 2518.265239][T25690] IPVS: using max 192 ests per chain, 9600 per kthread [ 2519.853901][T25699] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6804'. [ 2519.919381][T25699] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6804'. [ 2519.962183][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6804'. [ 2521.439232][T14070] Bluetooth: hci3: adv larger than maximum supported [ 2521.439360][T14070] Bluetooth: hci3: adv larger than maximum supported [ 2522.818196][T25735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6820'. [ 2522.885484][T25735] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6820'. [ 2523.330765][T25739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6822'. [ 2523.891564][T25737] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6821'. [ 2524.027531][T25737] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6821'. [ 2524.116486][T25737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6821'. [ 2524.725904][T14070] Bluetooth: hci2: adv larger than maximum supported [ 2524.726046][T14070] Bluetooth: hci2: adv larger than maximum supported [ 2526.766783][T25769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6834'. [ 2526.884112][T25770] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6834'. [ 2528.488870][T25783] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6840'. [ 2528.569587][T25783] 9pnet_fd: Insufficient options for proto=fd [ 2528.655476][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6841'. [ 2529.746510][T25800] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6847'. [ 2530.215885][T25793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6844'. [ 2530.327260][T25793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6844'. [ 2530.390039][T25802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6844'. [ 2530.523023][T25806] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2531.302929][T25806] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2531.661005][T25817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6854'. [ 2532.364150][T25822] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2532.609284][T25828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6858'. [ 2534.679065][T25838] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6861'. [ 2534.794028][T25838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6861'. [ 2534.866875][T25854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6861'. [ 2535.976687][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6869'. [ 2536.243248][T25868] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6871'. [ 2538.469151][T24134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2538.484151][T24134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2538.499592][T24134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2538.514004][T24134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2538.535328][T19369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2538.613557][T25892] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2538.892040][T25884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6878'. [ 2539.031210][T25884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6878'. [ 2539.104699][T25884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6878'. [ 2539.473567][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6883'. [ 2539.650874][T25892] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2539.717614][T25901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6883'. [ 2539.734962][T25901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2539.802351][T25888] chnl_net:caif_netlink_parms(): no params data found [ 2539.935705][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6884'. [ 2540.571885][T25915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6888'. [ 2540.677093][T14070] Bluetooth: hci0: command tx timeout [ 2541.035697][T18625] syz_tun (unregistering): left promiscuous mode [ 2541.263539][ T4098] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2541.470158][ T4098] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2541.702741][ T4098] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2541.959457][ T4098] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2541.986728][T25924] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2542.030330][T25930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6892'. [ 2542.065573][T25888] bridge0: port 1(bridge_slave_0) entered blocking state [ 2542.073477][T25888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2542.087456][T25888] bridge_slave_0: entered allmulticast mode [ 2542.097663][T25888] bridge_slave_0: entered promiscuous mode [ 2542.171898][T25888] bridge0: port 2(bridge_slave_1) entered blocking state [ 2542.187382][T25888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.195485][T25888] bridge_slave_1: entered allmulticast mode [ 2542.205544][T25888] bridge_slave_1: entered promiscuous mode [ 2542.756703][T14070] Bluetooth: hci0: command tx timeout [ 2542.768307][T25888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2542.781380][ T4098] bridge_slave_1: left allmulticast mode [ 2542.787694][ T4098] bridge_slave_1: left promiscuous mode [ 2542.799139][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 2542.893025][ T4098] bridge_slave_0: left allmulticast mode [ 2542.903780][ T4098] bridge_slave_0: left promiscuous mode [ 2542.910723][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 2543.518501][ T4098] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 2543.727456][T25935] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6893'. [ 2543.753200][ T4098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2543.801891][ T4098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2543.825411][ T4098] bond0 (unregistering): Released all slaves [ 2543.839846][T25945] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6893'. [ 2543.851700][ T4098] bond1 (unregistering): Released all slaves [ 2543.961099][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6893'. [ 2544.000035][T25888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2544.035519][T25940] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2544.367103][T25950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6897'. [ 2544.481301][T25888] team0: Port device team_slave_0 added [ 2544.501485][T25952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6897'. [ 2544.628042][T25888] team0: Port device team_slave_1 added [ 2544.843198][T14070] Bluetooth: hci0: command tx timeout [ 2545.271393][T25888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2545.278831][T25888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2545.305667][T25888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2545.361811][ T4098] batadv_slave_0: left promiscuous mode [ 2545.379969][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6898'. [ 2545.439646][ T4098] hsr_slave_0: left promiscuous mode [ 2545.469391][ T4098] hsr_slave_1: left promiscuous mode [ 2545.478366][ T4098] batman_adv: batadv0: Interface deactivated: dummy0 [ 2545.485697][ T4098] batman_adv: batadv0: Removing interface: dummy0 [ 2545.512552][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2545.521421][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2545.529949][T25957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6899'. [ 2545.585221][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2545.593495][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2545.651403][ T4098] veth1_macvtap: left promiscuous mode [ 2545.662036][ T4098] veth0_macvtap: left promiscuous mode [ 2545.668265][ T4098] veth1_vlan: left promiscuous mode [ 2545.673930][ T4098] veth0_vlan: left promiscuous mode [ 2546.496836][ T4098] team0 (unregistering): Port device team_slave_1 removed [ 2546.597728][ T4098] team0 (unregistering): Port device team_slave_0 removed [ 2546.914595][T14070] Bluetooth: hci0: command tx timeout [ 2546.923109][T25888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2546.931876][T25888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2546.959964][T25888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2547.016371][T25947] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2547.507227][T25888] hsr_slave_0: entered promiscuous mode [ 2547.518846][T25888] hsr_slave_1: entered promiscuous mode [ 2547.528101][T25888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2547.536069][T25888] Cannot create hsr debugfs directory [ 2547.714945][T25971] 9pnet_fd: Insufficient options for proto=fd [ 2548.560191][T25977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6905'. [ 2549.213057][T25888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2549.317961][T25888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2549.358489][T25984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6908'. [ 2549.366545][T25888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2549.400886][T25888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2549.421277][T25986] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6909'. [ 2549.525899][T25984] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6908'. [ 2549.539161][T25984] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2549.975310][T25981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6907'. [ 2549.985193][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6907'. [ 2550.056333][T25993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6907'. [ 2550.172830][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6907'. [ 2550.363852][T25888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2550.567385][T25888] 8021q: adding VLAN 0 to HW filter on device team0 [ 2550.595590][T25996] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2550.624052][T24941] bridge0: port 1(bridge_slave_0) entered blocking state [ 2550.632002][T24941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2550.788620][T24941] bridge0: port 2(bridge_slave_1) entered blocking state [ 2550.796393][T24941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2551.541687][T25996] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2552.002313][T26007] 9pnet_fd: Insufficient options for proto=fd [ 2552.793384][T25888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2554.667275][T26032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6920'. [ 2554.886331][T26036] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2554.909237][T25888] veth0_vlan: entered promiscuous mode [ 2555.024593][T25888] veth1_vlan: entered promiscuous mode [ 2555.298646][T26038] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2555.403670][T25888] veth0_macvtap: entered promiscuous mode [ 2555.488412][T25888] veth1_macvtap: entered promiscuous mode [ 2555.658684][T26035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6921'. [ 2555.668610][T26035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6921'. [ 2555.698557][T25888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2555.762755][T25888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2555.782211][T26043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6921'. [ 2555.831084][T26043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6921'. [ 2555.860481][T25888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.870573][T25888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.880886][T25888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2555.890677][T25888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2556.160138][T26038] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 2556.559127][T26050] 9pnet_fd: Insufficient options for proto=fd [ 2557.823453][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6932'. [ 2558.122585][T26070] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 2558.330014][T26084] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2559.100300][T26084] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2559.551833][T26090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6935'. [ 2559.563039][T26090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6935'. [ 2559.567976][T26098] 9pnet_fd: Insufficient options for proto=fd [ 2559.647898][T26101] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6935'. [ 2559.711661][T26101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6935'. [ 2560.311163][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2560.321502][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2560.561879][ T3714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2560.570543][ T3714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2560.940526][ T1911] IPVS: starting estimator thread 0... [ 2561.040003][T26112] IPVS: using max 192 ests per chain, 9600 per kthread [ 2562.610146][T26124] loop6: detected capacity change from 0 to 2048 [ 2562.677702][T26124] ext2: Unknown parameter 'smackfsroot' [ 2562.819765][T26103] udevd[26103]: incorrect ext4 checksum on /dev/loop6 [ 2563.082045][T26127] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 2563.107455][T15723] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 2563.322402][T19369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2563.340904][T19369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2563.412325][T19369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2563.492259][T19369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2563.508248][T19369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2564.270128][T26127] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 2564.382708][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2564.389920][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2564.963613][T26141] 9pnet_fd: Insufficient options for proto=fd [ 2564.995073][T26130] chnl_net:caif_netlink_parms(): no params data found [ 2565.554954][T14070] Bluetooth: hci2: command tx timeout [ 2566.169866][T26140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6949'. [ 2566.237363][T26151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6949'. [ 2566.405287][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6949'. [ 2566.457951][T26130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2566.465925][T26130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2566.473827][T26130] bridge_slave_0: entered allmulticast mode [ 2566.484029][T26130] bridge_slave_0: entered promiscuous mode [ 2566.567711][T26130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2566.575601][T26130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.583530][T26130] bridge_slave_1: entered allmulticast mode [ 2566.593624][T26130] bridge_slave_1: entered promiscuous mode [ 2566.996781][T18512] syz_tun (unregistering): left promiscuous mode [ 2567.073347][T26130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2567.176489][T26130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2567.192650][T24941] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.419579][T26160] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2567.446118][T24941] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.635544][T14070] Bluetooth: hci2: command tx timeout [ 2567.658035][T24941] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.722349][T26130] team0: Port device team_slave_0 added [ 2567.756573][T24941] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2567.788013][T26130] team0: Port device team_slave_1 added [ 2568.130166][T26130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2568.137866][T26130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2568.164896][T26130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2568.183702][T24941] bridge_slave_1: left allmulticast mode [ 2568.201308][T24941] bridge_slave_1: left promiscuous mode [ 2568.209926][T24941] bridge0: port 2(bridge_slave_1) entered disabled state [ 2568.315681][T24941] bridge_slave_0: left allmulticast mode [ 2568.321659][T24941] bridge_slave_0: left promiscuous mode [ 2568.328974][T24941] bridge0: port 1(bridge_slave_0) entered disabled state [ 2569.011247][T24941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2569.083952][T24941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2569.092748][T26174] 9pnet_fd: Insufficient options for proto=fd [ 2569.158405][T24941] bond0 (unregistering): Released all slaves [ 2569.271014][T26130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2569.278521][T26130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2569.305616][T26130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2569.489751][T26130] hsr_slave_0: entered promiscuous mode [ 2569.500461][T26130] hsr_slave_1: entered promiscuous mode [ 2569.509895][T26130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2569.521337][T26130] Cannot create hsr debugfs directory [ 2569.740152][T14070] Bluetooth: hci2: command tx timeout [ 2570.072107][T24941] batadv_slave_0: left promiscuous mode [ 2570.129056][T24941] hsr_slave_0: left promiscuous mode [ 2570.202359][T24941] hsr_slave_1: left promiscuous mode [ 2570.210767][T24941] batman_adv: batadv0: Interface deactivated: dummy0 [ 2570.218119][T24941] batman_adv: batadv0: Removing interface: dummy0 [ 2570.291047][T24941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2570.298983][T24941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2570.341623][T24941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2570.350968][T24941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2570.423134][T24941] veth1_macvtap: left promiscuous mode [ 2570.430789][T24941] veth0_macvtap: left promiscuous mode [ 2570.437106][T24941] veth1_vlan: left promiscuous mode [ 2570.446455][T24941] veth0_vlan: left promiscuous mode [ 2571.380985][T24941] team0 (unregistering): Port device team_slave_1 removed [ 2571.474526][T24941] team0 (unregistering): Port device team_slave_0 removed [ 2571.817424][T14070] Bluetooth: hci2: command tx timeout [ 2571.955289][T26163] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 2572.466117][T24941] IPVS: stop unused estimator thread 0... [ 2573.190918][T26130] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2573.316140][T26130] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2573.389045][T26130] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2573.477527][T26130] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2574.298411][T26214] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2574.389046][T26130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2574.453415][T26130] 8021q: adding VLAN 0 to HW filter on device team0 [ 2574.565764][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 2574.573391][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2574.643938][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 2574.651720][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2575.163060][T26214] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 2576.522893][T26130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2577.611576][T26251] ALSA: mixer_oss: invalid OSS volume '' [ 2578.143253][T26259] loop6: detected capacity change from 0 to 8 [ 2578.737625][T26130] veth0_vlan: entered promiscuous mode [ 2578.826512][T26130] veth1_vlan: entered promiscuous mode [ 2579.097280][T26130] veth0_macvtap: entered promiscuous mode [ 2579.167694][T26130] veth1_macvtap: entered promiscuous mode [ 2579.174650][T26271] loop6: detected capacity change from 0 to 1024 [ 2579.197814][T26271] EXT4-fs: Ignoring removed bh option [ 2579.224074][T26271] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 2579.237584][T26271] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 2579.251428][T26271] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2579.384657][T26130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2579.481654][T26130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2579.575518][T26130] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.584971][T26130] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.594054][T26130] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2579.603370][T26130] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2580.013277][T26271] EXT4-fs (loop6): failed to open journal device unknown-block(0,5) -6 [ 2580.502357][T26271] loop6: detected capacity change from 0 to 2048 [ 2580.598185][T26271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2582.745372][T15723] IPVS: starting estimator thread 0... [ 2582.846756][T26320] IPVS: using max 192 ests per chain, 9600 per kthread [ 2583.072113][T26327] ALSA: mixer_oss: invalid OSS volume '' [ 2585.716493][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2585.724901][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2585.984943][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2585.993221][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2586.265294][T26361] ALSA: mixer_oss: invalid OSS volume '' [ 2586.471793][T26363] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2586.695225][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6944'. [ 2587.230072][T26363] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2587.958921][T15723] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2588.125833][T15723] usb 7-1: Using ep0 maxpacket: 32 [ 2588.194772][T15723] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 2588.204534][T15723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2588.212884][T15723] usb 7-1: Product: syz [ 2588.217490][T15723] usb 7-1: Manufacturer: syz [ 2588.222370][T15723] usb 7-1: SerialNumber: syz [ 2588.277414][T15723] usb 7-1: config 0 descriptor?? [ 2588.569080][T15723] ath6kl: Failed to submit usb control message: -71 [ 2588.576474][T15723] ath6kl: unable to send the bmi data to the device: -71 [ 2588.583838][T15723] ath6kl: Unable to send get target info: -71 [ 2588.645968][T15723] ath6kl: Failed to init ath6kl core: -71 [ 2588.654807][T15723] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2588.756176][T15723] usb 7-1: USB disconnect, device number 71 [ 2589.865521][T26401] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7041'. [ 2590.075849][T26403] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 2590.876479][T26403] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 2592.284675][T25932] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2592.467714][T25932] usb 7-1: Using ep0 maxpacket: 32 [ 2592.521900][T25932] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 2592.532824][T25932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2592.541388][T25932] usb 7-1: Product: syz [ 2592.545935][T25932] usb 7-1: Manufacturer: syz [ 2592.550813][T25932] usb 7-1: SerialNumber: syz [ 2592.570116][T26433] loop7: detected capacity change from 0 to 1024 [ 2592.617396][T26433] EXT4-fs: Ignoring removed bh option [ 2592.646829][T26433] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 2592.658774][T26433] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 2592.672239][T26433] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 2592.708500][T25932] usb 7-1: config 0 descriptor?? [ 2592.951971][T25932] ath6kl: Failed to submit usb control message: -71 [ 2592.959405][T25932] ath6kl: unable to send the bmi data to the device: -71 [ 2592.967085][T25932] ath6kl: Unable to send get target info: -71 [ 2592.993153][T25932] ath6kl: Failed to init ath6kl core: -71 [ 2593.001921][T25932] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2593.025025][T25932] usb 7-1: USB disconnect, device number 72 [ 2593.422114][T26433] EXT4-fs (loop7): failed to open journal device unknown-block(0,5) -6 [ 2593.453654][T26445] ===================================================== [ 2593.464597][T26445] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2593.472198][T26445] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2593.477762][T26445] sctp_inq_push+0x2a6/0x350 [ 2593.487875][T26445] sctp_backlog_rcv+0x3c7/0xda0 [ 2593.494698][T26445] sk_backlog_rcv+0x13f/0x420 [ 2593.499757][T26445] __release_sock+0x1d3/0x330 [ 2593.505073][T26445] release_sock+0x6b/0x270 [ 2593.509773][T26445] sctp_wait_for_connect+0x458/0x820 [ 2593.515527][T26445] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2593.521159][T26445] sctp_sendmsg+0x3910/0x49f0 [ 2593.526302][T26445] inet_sendmsg+0x269/0x2a0 [ 2593.531159][T26445] __sock_sendmsg+0x278/0x3d0 [ 2593.536411][T26445] __sys_sendto+0x593/0x720 [ 2593.541204][T26445] __ia32_sys_sendto+0x12f/0x200 [ 2593.546588][T26445] ia32_sys_call+0x1397/0x42c0 [ 2593.551620][T26445] __do_fast_syscall_32+0xb0/0x150 [ 2593.557998][T26445] do_fast_syscall_32+0x38/0x80 [ 2593.563105][T26445] do_SYSENTER_32+0x1f/0x30 [ 2593.568009][T26445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.574795][T26445] [ 2593.577274][T26445] Uninit was created at: [ 2593.581923][T26445] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 2593.594079][T26445] kmalloc_reserve+0x22f/0x4b0 [ 2593.601176][T26445] __alloc_skb+0x347/0x7d0 [ 2593.606041][T26445] sctp_packet_transmit+0x18a1/0x46d0 [ 2593.611701][T26445] sctp_outq_flush+0x1c7d/0x67c0 [ 2593.617110][T26445] sctp_outq_uncork+0x9e/0xc0 [ 2593.622079][T26445] sctp_do_sm+0x8c8e/0x9720 [ 2593.627213][T26445] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 2593.632426][T26445] sctp_inq_push+0x2a6/0x350 [ 2593.637497][T26445] sctp_backlog_rcv+0x3c7/0xda0 [ 2593.642641][T26445] sk_backlog_rcv+0x13f/0x420 [ 2593.647798][T26445] __release_sock+0x1d3/0x330 [ 2593.652752][T26445] release_sock+0x6b/0x270 [ 2593.657617][T26445] sctp_wait_for_connect+0x458/0x820 [ 2593.663177][T26445] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2593.669015][T26445] sctp_sendmsg+0x3910/0x49f0 [ 2593.673937][T26445] inet_sendmsg+0x269/0x2a0 [ 2593.678854][T26445] __sock_sendmsg+0x278/0x3d0 [ 2593.683830][T26445] __sys_sendto+0x593/0x720 [ 2593.693952][T26445] __ia32_sys_sendto+0x12f/0x200 [ 2593.700715][T26445] ia32_sys_call+0x1397/0x42c0 [ 2593.705866][T26445] __do_fast_syscall_32+0xb0/0x150 [ 2593.711227][T26445] do_fast_syscall_32+0x38/0x80 [ 2593.716513][T26445] do_SYSENTER_32+0x1f/0x30 [ 2593.721288][T26445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.728140][T26445] [ 2593.730657][T26445] CPU: 1 UID: 0 PID: 26445 Comm: syz.2.7059 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 2593.743309][T26445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2593.753916][T26445] ===================================================== [ 2593.761213][T26445] Disabling lock debugging due to kernel taint [ 2593.767720][T26445] Kernel panic - not syncing: kmsan.panic set ... [ 2593.774334][T26445] CPU: 1 UID: 0 PID: 26445 Comm: syz.2.7059 Tainted: G B 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 2593.788376][T26445] Tainted: [B]=BAD_PAGE [ 2593.792686][T26445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2593.802934][T26445] Call Trace: [ 2593.806358][T26445] [ 2593.809422][T26445] __dump_stack+0x26/0x30 [ 2593.814008][T26445] dump_stack_lvl+0x53/0x270 [ 2593.818830][T26445] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2593.824929][T26445] dump_stack+0x1e/0x25 [ 2593.829320][T26445] panic+0x4bd/0xd50 [ 2593.833580][T26445] kmsan_report+0x31c/0x320 [ 2593.838348][T26445] ? __msan_warning+0x1b/0x30 [ 2593.843316][T26445] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2593.848672][T26445] ? sctp_inq_push+0x2a6/0x350 [ 2593.853685][T26445] ? sctp_backlog_rcv+0x3c7/0xda0 [ 2593.858945][T26445] ? sk_backlog_rcv+0x13f/0x420 [ 2593.864039][T26445] ? __release_sock+0x1d3/0x330 [ 2593.869107][T26445] ? release_sock+0x6b/0x270 [ 2593.873937][T26445] ? sctp_wait_for_connect+0x458/0x820 [ 2593.879629][T26445] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2593.885403][T26445] ? sctp_sendmsg+0x3910/0x49f0 [ 2593.890499][T26445] ? inet_sendmsg+0x269/0x2a0 [ 2593.895444][T26445] ? __sock_sendmsg+0x278/0x3d0 [ 2593.900536][T26445] ? __sys_sendto+0x593/0x720 [ 2593.905486][T26445] ? __ia32_sys_sendto+0x12f/0x200 [ 2593.910870][T26445] ? ia32_sys_call+0x1397/0x42c0 [ 2593.916007][T26445] ? __do_fast_syscall_32+0xb0/0x150 [ 2593.921518][T26445] ? do_fast_syscall_32+0x38/0x80 [ 2593.926766][T26445] ? do_SYSENTER_32+0x1f/0x30 [ 2593.931654][T26445] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2593.938447][T26445] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2593.944780][T26445] ? kmsan_get_metadata+0xfb/0x160 [ 2593.950155][T26445] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2593.956234][T26445] ? kmsan_get_metadata+0xfb/0x160 [ 2593.961614][T26445] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2593.967710][T26445] ? sctp_inq_pop+0x15ea/0x19e0 [ 2593.972807][T26445] ? kmsan_get_metadata+0xfb/0x160 [ 2593.978191][T26445] __msan_warning+0x1b/0x30 [ 2593.982964][T26445] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2593.988194][T26445] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 2593.993909][T26445] sctp_inq_push+0x2a6/0x350 [ 2593.998776][T26445] sctp_backlog_rcv+0x3c7/0xda0 [ 2594.003865][T26445] ? kmsan_get_metadata+0xfb/0x160 [ 2594.009259][T26445] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 2594.014875][T26445] sk_backlog_rcv+0x13f/0x420 [ 2594.019833][T26445] __release_sock+0x1d3/0x330 [ 2594.024767][T26445] release_sock+0x6b/0x270 [ 2594.029450][T26445] sctp_wait_for_connect+0x458/0x820 [ 2594.034973][T26445] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2594.041437][T26445] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2594.047037][T26445] ? kmsan_get_metadata+0xfb/0x160 [ 2594.052403][T26445] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2594.058558][T26445] sctp_sendmsg+0x3910/0x49f0 [ 2594.063457][T26445] ? __pfx_kmsan_internal_set_shadow_origin+0x10/0x10 [ 2594.070547][T26445] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2594.075784][T26445] inet_sendmsg+0x269/0x2a0 [ 2594.080505][T26445] __sock_sendmsg+0x278/0x3d0 [ 2594.085424][T26445] __sys_sendto+0x593/0x720 [ 2594.090181][T26445] ? do_futex+0x3a1/0x480 [ 2594.094856][T26445] ? kmsan_get_metadata+0xfb/0x160 [ 2594.100244][T26445] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2594.106359][T26445] __ia32_sys_sendto+0x12f/0x200 [ 2594.111586][T26445] ia32_sys_call+0x1397/0x42c0 [ 2594.116551][T26445] __do_fast_syscall_32+0xb0/0x150 [ 2594.121881][T26445] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 2594.127870][T26445] do_fast_syscall_32+0x38/0x80 [ 2594.132929][T26445] do_SYSENTER_32+0x1f/0x30 [ 2594.137644][T26445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2594.144262][T26445] RIP: 0023:0xf7f08539 [ 2594.148509][T26445] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2594.168372][T26445] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 2594.177029][T26445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 2594.185181][T26445] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 2594.193328][T26445] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 2594.201481][T26445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2594.209626][T26445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2594.217813][T26445] [ 2594.221328][T26445] Kernel Offset: disabled [ 2594.225767][T26445] Rebooting in 86400 seconds..