last executing test programs: 7m49.191738409s ago: executing program 32 (id=92): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 7m34.137777568s ago: executing program 1 (id=205): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000001780)={0x1, 0x4, 0x1, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 7m32.751161846s ago: executing program 1 (id=213): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x11) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f000000b040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x1, {{0x5, 0x80000000000ce7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r2, 0x5, &(0x7f0000000200)={0x1}) 7m29.436974506s ago: executing program 1 (id=236): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 7m28.414711096s ago: executing program 1 (id=245): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 7m28.160811457s ago: executing program 1 (id=247): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m27.63218921s ago: executing program 1 (id=251): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m27.061350867s ago: executing program 33 (id=251): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 6m27.424169138s ago: executing program 0 (id=719): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x19, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) set_mempolicy(0x3, 0x0, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@var={0x3, 0x0, 0x0, 0xe, 0x2, 0x1}, @fwd={0xd}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0xa}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xcd57}}, @ptr={0x6}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f00000004c0)=""/33, 0x9b, 0x21}, 0x28) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}}, 0x8000) 6m26.383500927s ago: executing program 0 (id=722): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 6m25.805653334s ago: executing program 0 (id=726): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$dri(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x6, 0x8}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x2408c0d4) 6m24.315681667s ago: executing program 0 (id=741): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) creat(&(0x7f0000000c40)='./file0\x00', 0x100) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_SET_LAPIC(r2, 0xc008aec1, &(0x7f0000000d00)={"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"}) 6m24.007842791s ago: executing program 0 (id=731): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000080)=@v3={0x3000000, [{0x8, 0x6000}, {0x5, 0x8000}]}, 0x18, 0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m23.399476976s ago: executing program 0 (id=736): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6m23.08411238s ago: executing program 34 (id=736): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5m55.670424774s ago: executing program 7 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x7, 0x20, 0xa6, 0x1, 0x5, 0xd, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000007}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m55.257056699s ago: executing program 7 (id=929): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001500)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5m55.121630924s ago: executing program 7 (id=932): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r3, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) 5m54.119415303s ago: executing program 7 (id=939): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) 5m54.050622758s ago: executing program 7 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x7, 0x20, 0xa6, 0x1, 0x5, 0xd, 0x3}, {0xfffffff9, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x4, 0x1000000000000007}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x101, 0x2, 0x0, 0x80], 0x8080000, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m53.74326902s ago: executing program 7 (id=943): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r0, 0x0) getresgid(&(0x7f0000006fc0), &(0x7f0000007000), &(0x7f0000007040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001100)={r2, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x4c08, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) 5m53.266626999s ago: executing program 35 (id=943): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r0, 0x0) getresgid(&(0x7f0000006fc0), &(0x7f0000007000), &(0x7f0000007040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001100)={r2, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r3, 0x4c08, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) 5m14.476093858s ago: executing program 8 (id=1214): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xc2100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0xbf, 0xbf00}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000200)='cpuset.mems\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x12, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) sendfile(r2, r2, 0x0, 0x35) 5m14.17941414s ago: executing program 8 (id=1217): mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 5m13.344606254s ago: executing program 8 (id=1226): madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.195508483s ago: executing program 8 (id=1228): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x104000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) 5m12.975984753s ago: executing program 8 (id=1230): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x908, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x11}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [], "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"}}}}}}, 0x93e) 5m12.888556728s ago: executing program 8 (id=1232): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x10}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x0, 0x3, 0x10}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 5m12.186994417s ago: executing program 36 (id=1232): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x10}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x0, 0x3, 0x10}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 4m11.61890293s ago: executing program 9 (id=1668): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x8, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0x8, 0xfe, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x81a0002, 0x6000, 0xc, 0x0, 0x0, 0x5, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m11.321342048s ago: executing program 9 (id=1659): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00151300000011"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4m8.139582851s ago: executing program 9 (id=1684): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) 4m6.805260425s ago: executing program 9 (id=1689): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 4m6.601398234s ago: executing program 9 (id=1692): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 4m6.285896231s ago: executing program 9 (id=1697): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000001080)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0) 4m5.606434549s ago: executing program 37 (id=1697): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000001080)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0) 8.173084463s ago: executing program 3 (id=3067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xfffffd75, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0xffffff81, 0x0, 0x8, 0x9215}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 7.845092508s ago: executing program 3 (id=3072): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) accept4(r1, 0x0, &(0x7f0000000080), 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x7, 0x2, {{0x16, 0x4, 0x1, 0x3, 0x58, 0x66, 0x0, 0xfb, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x10, 0x1, 0x7, [{@rand_addr=0x64010101, 0x8001}, {@loopback, 0x3}, {@private=0xa010100, 0x2}, {@broadcast, 0x80000001}, {@rand_addr=0x64010100, 0x3}, {@multicast2, 0xffffffff}]}, @timestamp={0x44, 0xc, 0x80, 0x0, 0x5, [0x4, 0x5]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x6c, 0x4, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x20, 0x0, 0x3, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x40, 0x700, 0x9, 0x7, {{0x16, 0x4, 0x2, 0x3d, 0x58, 0x64, 0x0, 0x5d, 0x2f, 0x0, @loopback, @private=0xa010100, {[@cipso={0x86, 0x15, 0xffffffffffffffff, [{0x1, 0xb, "a4fda1e37d073da505"}, {0x2, 0x4, "73de"}]}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x2, [{@rand_addr=0x64010101, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@empty, 0x2}, {@local, 0x84}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@RTM_NEWMDB={0x138, 0x54, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x0, 0x0, {@ip4=@rand_addr=0x64010101, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x1, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x20}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x6, 0x2, {@in6_addr=@rand_addr=' \x01\x00', 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x0, {@ip4=@multicast2, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x2, 0x0, 0x1, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x2, {@ip4=@multicast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@in6_addr=@private1, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x4, {@in6_addr=@local, 0x800}}}]}, 0x138}}, 0x44890) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000003c0)={0x40, 0x15, 0x3, "00e0df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.734940377s ago: executing program 4 (id=3077): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000000)=@known='system.posix_acl_default\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0xfffffffffffffe64) 5.905559429s ago: executing program 3 (id=3080): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.961737594s ago: executing program 2 (id=3081): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8932, &(0x7f0000000900)={'batadv_slave_1\x00'}) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x5084) sendto$inet(r2, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f66ee49d20487065dad7cffef082a59ee2b21eb73656d3dc03547888735a17218c20071551f0d51963eca94a593476b25dedb707e7b8ce8b652bc423029d796b484ee048820f540c45770a40a143a1596e1fbc57e45bd84e16556ffb7990bfd000073126510261a98fad73feacc4eb3c3fad519b362e5307e1e79c6b1", 0xcd, 0x4044880, 0x0, 0x0) 4.939401599s ago: executing program 6 (id=3082): unshare(0x600) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001400), 0x200000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.859974463s ago: executing program 3 (id=3083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x8, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0x10000, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="c15b00"}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4.681570591s ago: executing program 4 (id=3084): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r0, &(0x7f0000000100)='./cgroup\x00', 0x89801) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x7fffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timerfd_create(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x0) 4.347729066s ago: executing program 6 (id=3085): fsopen(&(0x7f0000000000)='fusectl\x00', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, &(0x7f0000000040)) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffed5, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000f00)={0x1, "a2"}) 4.259331108s ago: executing program 5 (id=3086): sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000000)=0x8) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffe", 0x3c}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001880)={0x44, 0x0, &(0x7f0000001680)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0x100a}, @flat=@binder={0x73622a85, 0x80, 0x3}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x1d0003, 0x0, {[0xffffffffffffffff, 0x0, 0x8, 0xfffffffdefffff16, 0x3, 0x10, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.937322398s ago: executing program 2 (id=3087): syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.845864456s ago: executing program 5 (id=3088): r0 = userfaultfd(0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2b10efa9e839505c}) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0xfff, 0x0, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x5, 0x4002004c4, 0x1004, 0x8000100000000000, 0xc595, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x9], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.613236588s ago: executing program 6 (id=3089): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x143bc2, 0x1c0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xc004004) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x20000b5c) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='system.posix_acl_default\x00', 0x0, 0xff3c, 0x1) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x11, 0xdd37, 0x80, 0xa3, 0x81}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) 3.471631783s ago: executing program 2 (id=3090): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') timer_gettime(r1, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) 3.462649981s ago: executing program 5 (id=3091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x7ffffc, 0x2, 0x40000002, 0x7, 0xa17433da3c5d69a1, 0x2, 0x81}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x7}}, 0xffffc39b, 0x0, 0x7, 0x80000000, 0x80, 0xe35, 0x80}, &(0x7f00000002c0)=0x9c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) 3.370663393s ago: executing program 2 (id=3092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0x9, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x57, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x5, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x1, 0x9, 0x8001, 0xffff, 0x5, 0x3a1838ea, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x1, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.220210933s ago: executing program 6 (id=3093): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x10}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="95", 0x1}, {&(0x7f0000000480)="9094", 0x2}], 0x2}, 0x0) 3.204312981s ago: executing program 4 (id=3094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 3.134975365s ago: executing program 5 (id=3095): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff3}, {0xffff, 0xffff}, {0x7, 0x6}}, [@qdisc_kind_options=@q_etf={{0x5}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfefffdfc, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) 2.206052971s ago: executing program 4 (id=3096): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.083402711s ago: executing program 3 (id=3097): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="b0000000"], 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 1.081082168s ago: executing program 6 (id=3098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.013144864s ago: executing program 5 (id=3099): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x800, &(0x7f0000000180)={0x2e, 0x1, 0x3}) r1 = io_uring_setup(0x3123, &(0x7f0000000040)={0x0, 0x247d, 0x2, 0x8, 0x2b7}) r2 = io_uring_setup(0x3a90, &(0x7f0000000180)={0x0, 0x20007ae8, 0x1, 0x0, 0x31d, 0x0, r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x2, 0x0, 0x1, [@generic="28315eac"]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c815}, 0xc000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendmmsg$inet(r5, &(0x7f00000083c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000140)='oP', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001640)='4', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000001b00)='\"', 0x1}], 0x1}}], 0x3, 0x4c801) close_range(r2, 0xffffffffffffffff, 0x0) 972.541822ms ago: executing program 2 (id=3100): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x23ec603c}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x684c}, {{0x0, 0x0, 0x0}, 0x3ab}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002880)=""/249, 0xf9}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f0000002980)=""/66, 0x42}, {&(0x7f0000002a00)=""/60, 0x3c}, {&(0x7f0000002a40)=""/202, 0xca}, {&(0x7f0000002b40)=""/59, 0x3b}], 0x6}, 0x4}], 0x8, 0x40000140, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x40, 0xad, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r2, 0x0, 0x0, 0x4000}}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) unshare(0x13060100) syz_emit_ethernet(0x51, &(0x7f0000000000)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x43, 0x65, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x8, [{@rand_addr=0x64010100, 0x1}]}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x80, 0x0, {0x5, 0x4, 0x0, 0x5, 0x3, 0x68, 0x1, 0x7f, 0x0, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, "17deba919bfcd0"}}}}}, 0x0) 863.676051ms ago: executing program 4 (id=3101): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x200004}}, 0x10) close(0x3) 758.800437ms ago: executing program 6 (id=3102): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x443, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66b848f7288366efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x5a}], 0xaaaaaaaaaaaad59, 0x30, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x6440, 0x81) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r3, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 728.338068ms ago: executing program 3 (id=3103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xbc, 0xb7, 0xf6, 0x20, 0xfe9, 0xd501, 0x2350, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)='=', 0x1}], 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0x5, 0x0, 0x70bd2c, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x28}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x7, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x7, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 703.433829ms ago: executing program 4 (id=3104): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 702.364139ms ago: executing program 2 (id=3105): syz_open_dev$vbi(0x0, 0x2, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404080, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=3106): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r0, &(0x7f0000000f40)=[{&(0x7f0000000800)=""/147, 0x93}], 0x1, 0x3, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x482) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) r4 = socket(0x2d, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) connect$qrtr(r4, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) r5 = syz_open_dev$media(&(0x7f0000000080), 0x8, 0x6100) splice(r5, &(0x7f0000000180)=0x7, r2, &(0x7f00000001c0)=0xffffffffffffff80, 0xfff, 0x3) writev(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)="5f18", 0x2}], 0x1) kernel console output (not intermixed with test programs): b 3-1: Manufacturer: syz [ 429.167557][ T5693] usb 3-1: SerialNumber: syz [ 429.184199][ T5693] usb 3-1: config 0 descriptor?? [ 429.216976][ T5693] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 429.248791][ T5693] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 429.820887][ T5693] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 429.827973][T13693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2390'. [ 430.153762][ T9] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 430.237641][ T5715] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 430.249016][ T5715] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 430.257567][ T5693] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 430.265354][ T5715] asix 5-1:0.188: probe with driver asix failed with error -71 [ 430.268600][ T5693] em28xx 3-1:0.0: board has no eeprom [ 430.290378][ T5715] usb 5-1: USB disconnect, device number 39 [ 430.335526][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.335559][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.335592][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.335614][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.341535][T13697] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 430.369125][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 430.646168][T11081] usb 6-1: USB disconnect, device number 38 [ 430.663030][ T5693] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 430.672031][ T5693] em28xx 3-1:0.0: dvb set to bulk mode. [ 430.685756][ T5701] em28xx 3-1:0.0: Binding DVB extension [ 431.278927][T13722] netlink: 'syz.6.2410': attribute type 1 has an invalid length. [ 431.378916][T13728] bond7: entered promiscuous mode [ 431.405794][T13728] bond7: entered allmulticast mode [ 431.429287][T13728] 8021q: adding VLAN 0 to HW filter on device bond7 [ 431.455147][T13729] syzkaller0: entered promiscuous mode [ 431.462549][T13729] syzkaller0: entered allmulticast mode [ 431.515864][T13722] bridge5: entered promiscuous mode [ 431.538930][T13722] bridge5: entered allmulticast mode [ 431.567267][T13722] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 431.614613][T11493] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.670608][T13728] bridge6: entered promiscuous mode [ 431.680495][T13728] bridge6: entered allmulticast mode [ 431.688034][T13728] bond7: (slave bridge6): Enslaving as a backup interface with a down link [ 431.773319][ T1111] wlan1: Trigger new scan to find an IBSS to join [ 431.806765][ T7330] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 431.943965][T13674] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 431.977618][ T5693] usb 3-1: USB disconnect, device number 13 [ 432.001341][ T5693] em28xx 3-1:0.0: Disconnecting em28xx [ 432.144452][ T5701] em28xx 3-1:0.0: Registering input extension [ 432.170646][ T5693] em28xx 3-1:0.0: Closing input extension [ 432.473245][ T5693] em28xx 3-1:0.0: Freeing device [ 432.582660][ T5701] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 432.582844][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 432.677602][T13746] tipc: Started in network mode [ 432.690359][T13746] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 432.711357][T13746] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 432.738795][T13746] tipc: Enabled bearer , priority 10 [ 432.755319][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 432.775104][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 432.793922][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 432.794152][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 432.822451][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 432.834952][ T9] usb 5-1: Product: syz [ 432.839222][ T9] usb 5-1: Manufacturer: syz [ 432.844329][ T9] usb 5-1: SerialNumber: syz [ 432.855444][ T9] usb 5-1: config 0 descriptor?? [ 432.855936][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.872496][ T9] usb 5-1: selecting invalid altsetting 0 [ 432.912103][ T5701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.961387][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 432.992042][ T5701] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 433.004608][ T5701] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 433.019030][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.037894][ T5701] hub 4-1:1.0: bad descriptor, ignoring hub [ 433.047754][ T5701] hub 4-1:1.0: probe with driver hub failed with error -5 [ 433.086570][ T5701] cdc_wdm 4-1:1.0: skipping garbage [ 433.100948][ T5701] cdc_wdm 4-1:1.0: skipping garbage [ 433.134167][ T5701] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 433.148257][ T5701] cdc_wdm 4-1:1.0: Unknown control protocol [ 433.352057][ T9] usb 5-1: USB disconnect, device number 40 [ 433.666857][T13758] syzkaller0: entered promiscuous mode [ 433.678598][T13758] syzkaller0: entered allmulticast mode [ 433.812303][T13739] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 433.861843][T11079] tipc: Node number set to 1 [ 434.418436][ T9] usb 4-1: USB disconnect, device number 10 [ 434.816045][T11493] wlan1: Trigger new scan to find an IBSS to join [ 435.000449][T13775] syzkaller0: entered promiscuous mode [ 435.022704][T13775] syzkaller0: entered allmulticast mode [ 436.113177][ T5715] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 436.321563][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.399115][ T5715] usb 5-1: config 0 has no interfaces? [ 436.427334][ T5715] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 436.442762][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.468211][ T5715] usb 5-1: config 0 descriptor?? [ 436.734342][T13793] syzkaller0: entered promiscuous mode [ 436.757681][T13793] syzkaller0: entered allmulticast mode [ 437.161555][T13801] syzkaller0: entered promiscuous mode [ 437.169008][T13801] syzkaller0: entered allmulticast mode [ 437.279644][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.292113][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.461550][ T5693] usb 5-1: USB disconnect, device number 41 [ 437.772924][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.251865][T13816] syzkaller0: entered promiscuous mode [ 438.271032][T13816] syzkaller0: entered allmulticast mode [ 438.442813][ T5715] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 438.552617][T13827] binder_alloc: 13826: pid 13826 spamming oneway? 1 buffers allocated for a total size of 4096 [ 438.622721][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 438.651991][ T5715] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.690952][ T5715] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 438.724026][ T5715] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 438.751906][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.783898][ T5715] usb 6-1: Product: syz [ 438.795707][ T5715] usb 6-1: Manufacturer: syz [ 438.817541][ T5715] usb 6-1: SerialNumber: syz [ 438.851011][ T5715] usb 6-1: config 0 descriptor?? [ 438.904419][T13838] mac80211_hwsim hwsim16 syzkaller0: left promiscuous mode [ 438.915031][T13838] mac80211_hwsim hwsim16 syzkaller0: left allmulticast mode [ 439.159655][T13846] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 439.559173][T13846] bond1: entered promiscuous mode [ 439.565169][T13846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.606276][T13848] 8021q: adding VLAN 0 to HW filter on device bond2 [ 439.631634][T13848] bond1: (slave bond2): making interface the new active one [ 439.651644][T13848] bond2: entered promiscuous mode [ 439.658644][T13848] bond1: (slave bond2): Enslaving as an active interface with an up link [ 439.668783][T13849] syzkaller0: delete flow: hash 611471826 index 1 [ 439.945631][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.961138][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.991046][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.000364][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.019662][ T29] kauditd_printk_skb: 3189 callbacks suppressed [ 440.019677][ T29] audit: type=1326 audit(1778933697.372:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13861 comm="syz.4.2449" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x0 [ 441.976763][T13851] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 441.989358][T13851] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 442.018717][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 442.072414][ T5701] usb 6-1: USB disconnect, device number 39 [ 442.142946][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2451'. [ 442.338305][T13879] syzkaller0: entered promiscuous mode [ 442.360482][T13879] syzkaller0: entered allmulticast mode [ 442.599910][T13887] syzkaller0: entered promiscuous mode [ 442.605683][T13887] syzkaller0: entered allmulticast mode [ 442.773147][ T5701] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 442.942453][ T29] audit: type=1326 audit(1778933700.302:9663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13896 comm="syz.3.2462" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x0 [ 443.120417][T13903] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 443.198581][ T5701] usb 6-1: unable to get BOS descriptor or descriptor too short [ 443.202441][ T5701] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 443.202493][ T5701] usb 6-1: can't read configurations, error -71 [ 443.903620][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 443.959832][T13919] syzkaller0: entered promiscuous mode [ 443.966979][T13919] syzkaller0: entered allmulticast mode [ 444.088570][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 444.143179][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 444.179424][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.202520][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 444.230986][ T9] usb 3-1: Product: syz [ 444.242792][ T9] usb 3-1: Manufacturer: syz [ 444.255644][ T9] usb 3-1: SerialNumber: syz [ 444.277450][ T9] usb 3-1: config 0 descriptor?? [ 444.291084][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.301060][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.318761][ T9] usb 3-1: selecting invalid altsetting 0 [ 444.336670][T13929] syzkaller0: entered promiscuous mode [ 444.364198][T13929] syzkaller0: entered allmulticast mode [ 444.554223][T13938] syzkaller0: entered promiscuous mode [ 444.560357][T13938] syzkaller0: entered allmulticast mode [ 444.608255][ T5701] usb 3-1: USB disconnect, device number 14 [ 444.627940][T11079] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 444.752687][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 444.782707][T11079] usb 4-1: Using ep0 maxpacket: 16 [ 444.794971][T11079] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 444.805755][T11079] usb 4-1: config 251 has no interface number 0 [ 444.825604][T11079] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 444.853233][T11079] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 444.876357][T11079] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 444.912661][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 444.913534][T11079] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 444.924363][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 444.943877][T11079] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 444.956430][T11079] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.968286][T11079] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.979746][T11079] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.989923][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 445.015701][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 445.029794][T11079] usb 4-1: config 251 interface 202 has no altsetting 0 [ 445.054653][ T10] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 445.070127][T11079] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 445.070946][ T10] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 445.084937][T11079] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 445.096699][T11079] usb 4-1: Product: syz [ 445.102101][T11079] usb 4-1: SerialNumber: syz [ 445.103165][ T10] usb 5-1: Product: syz [ 445.111480][ T10] usb 5-1: Manufacturer: syz [ 445.116471][ T10] usb 5-1: SerialNumber: syz [ 445.127773][ T10] usb 5-1: config 0 descriptor?? [ 445.138018][ T10] smsusb:smsusb_probe: board id=2, interface number 0 [ 445.145982][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 445.331320][T11079] cxacru 4-1:251.202: cxacru_bind: interface has incorrect endpoints [ 445.339823][T11079] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 445.359539][T11079] usb 4-1: USB disconnect, device number 11 [ 445.647247][T13959] netlink: 'syz.5.2482': attribute type 1 has an invalid length. [ 445.689484][T13959] bond8: (slave geneve4): making interface the new active one [ 445.697978][T13959] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 445.706682][ T46] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 445.726036][ T46] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 445.742959][ T46] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 445.751905][ T46] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 445.811334][T13962] netlink: 'syz.5.2483': attribute type 1 has an invalid length. [ 445.850263][T13962] 8021q: adding VLAN 0 to HW filter on device bond9 [ 445.866673][T13965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2484'. [ 445.889225][T13965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2484'. [ 445.942417][T13962] bond9: (slave veth9): Enslaving as an active interface with a down link [ 445.986891][T13966] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 445.998082][T13966] bond9: (slave batadv1): making interface the new active one [ 446.007409][T13966] batadv1: entered promiscuous mode [ 446.013711][T13966] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 446.037626][T13970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.060927][T13970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.084870][T13962] bond9 (unregistering): (slave veth9): Releasing active interface [ 446.109617][T13962] bond9 (unregistering): (slave batadv1): Releasing active interface [ 446.121575][T13962] bond9 (unregistering): Released all slaves [ 447.489876][T11079] usb 5-1: USB disconnect, device number 42 [ 447.647542][T13996] syzkaller0: entered promiscuous mode [ 447.674377][T13996] syzkaller0: entered allmulticast mode [ 447.887255][T14001] mac80211_hwsim hwsim16 syzkaller0: entered promiscuous mode [ 447.904719][T14001] mac80211_hwsim hwsim16 syzkaller0: entered allmulticast mode [ 448.160054][T14007] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 448.304839][ T29] audit: type=1804 audit(1778933705.662:9664): pid=14018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2501" name="/newroot/468/file1" dev="fuse" ino=1 res=1 errno=0 [ 448.852651][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 449.032652][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 449.044572][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 449.067633][ T10] usb 6-1: config 0 has no interface number 0 [ 449.081536][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 449.099095][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 449.114280][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.132056][ T10] usb 6-1: Product: syz [ 449.141867][ T10] usb 6-1: Manufacturer: syz [ 449.153140][ T10] usb 6-1: SerialNumber: syz [ 449.174620][ T10] usb 6-1: config 0 descriptor?? [ 449.253950][T11081] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 449.425040][T11081] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 449.448712][T11081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.484966][T11081] usb 5-1: config 0 descriptor?? [ 449.511169][T11081] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 449.744558][T14039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.759757][T14039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.217637][T14048] tipc: Failed to remove unknown binding: 66,0,0/1:3876183177/3876183179 [ 450.236801][T14047] tipc: Failed to remove unknown binding: 66,0,0/1:1890944884/1890944885 [ 450.272004][T14047] tipc: Failed to remove unknown binding: 66,0,0/1:1890944884/1890944885 [ 450.296975][T14050] create_pit_timer: 48 callbacks suppressed [ 450.297011][T14050] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 450.368551][T14050] kvm: pic: non byte read [ 450.387576][T14050] kvm: pic: level sensitive irq not supported [ 450.387637][T14050] kvm: pic: non byte read [ 450.398199][T14050] kvm: pic: level sensitive irq not supported [ 450.398266][T14050] kvm: pic: non byte read [ 450.510771][T14055] syzkaller0: entered promiscuous mode [ 450.516921][T14055] syzkaller0: entered allmulticast mode [ 451.236381][T14062] bridge0: port 3(macvlan2) entered blocking state [ 451.274213][T14062] bridge0: port 3(macvlan2) entered disabled state [ 451.326550][T14062] macvlan2: entered allmulticast mode [ 451.371228][T14062] ip6gretap0: entered allmulticast mode [ 451.446964][T14062] macvlan2: entered promiscuous mode [ 451.647067][T11079] usb 5-1: USB disconnect, device number 43 [ 451.881054][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 451.915364][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 451.949162][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 451.985662][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 452.027209][ T10] usb 6-1: USB disconnect, device number 42 [ 453.053796][T11081] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 453.254011][T11081] usb 4-1: Using ep0 maxpacket: 16 [ 453.280386][T11081] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 453.294501][ T29] audit: type=1804 audit(1778933710.642:9665): pid=14102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2532" name="/newroot/495/file1" dev="fuse" ino=1 res=1 errno=0 [ 453.330509][T11081] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 453.367476][T11081] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.387357][T11081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.437906][T11081] usb 4-1: Product: syz [ 453.454631][T11081] usb 4-1: Manufacturer: syz [ 453.484461][T11081] usb 4-1: SerialNumber: syz [ 453.519337][T11081] usb 4-1: config 0 descriptor?? [ 453.545310][T11081] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 453.556330][T11081] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 453.933062][ T5715] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 454.160633][ T5715] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 454.193327][T11081] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 454.206456][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.231629][T11081] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 454.279152][ T5715] usb 6-1: Product: syz [ 454.295860][ T5715] usb 6-1: Manufacturer: syz [ 454.327551][ T5715] usb 6-1: SerialNumber: syz [ 454.802762][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 454.861648][T11081] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 454.892978][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 455.708434][T11081] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 455.743150][T11081] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 455.769092][T11081] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 455.795336][T11081] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 455.843718][T11081] usb 4-1: USB disconnect, device number 12 [ 456.688033][T14137] binder: 14136:14137 ioctl c0306201 80000280 returned -14 [ 456.980995][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO [ 457.045766][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 457.112385][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 457.186472][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 457.321859][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 457.384979][ T5715] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 457.434988][ T5715] usb 6-1: USB disconnect, device number 43 [ 457.636968][T14147] syzkaller0: entered promiscuous mode [ 457.656911][T14147] syzkaller0: entered allmulticast mode [ 457.793765][T14151] syzkaller0: entered promiscuous mode [ 457.821111][T14151] syzkaller0: entered allmulticast mode [ 457.994235][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2549'. [ 458.302316][T14159] syzkaller0: entered promiscuous mode [ 458.318872][T14159] syzkaller0: entered allmulticast mode [ 458.603096][ T5685] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 458.769329][ T5685] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 458.778754][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.791804][ T5685] usb 4-1: Product: syz [ 458.800404][ T5685] usb 4-1: Manufacturer: syz [ 458.807374][ T5685] usb 4-1: SerialNumber: syz [ 459.173737][ T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 459.268822][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 459.312718][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 459.356584][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.382670][ T10] usb 6-1: config 0 has no interface number 0 [ 459.401146][ T10] usb 6-1: config 0 interface 1 has no altsetting 0 [ 459.423450][ T10] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 459.454616][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.463288][ T5715] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 459.503505][ T10] usb 6-1: config 0 descriptor?? [ 459.545290][ T10] usb 6-1: selecting invalid altsetting 1 [ 459.584866][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 459.604276][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 459.742349][T14175] dtv5100: wlen = 0, aborting. [ 459.895645][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 459.927535][ T10] DVB: Unable to find symbol cx22700_attach() [ 459.940381][ T5715] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 459.971362][ T5715] usb 5-1: can't read configurations, error -71 [ 460.107734][ T10] DVB: Unable to find symbol tda10046_attach() [ 460.137817][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 460.203052][ T10] usb 6-1: USB disconnect, device number 44 [ 460.582384][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 460.633294][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 460.673016][T14191] syzkaller0: entered promiscuous mode [ 460.715107][T14191] syzkaller0: entered allmulticast mode [ 461.046640][T14196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2564'. [ 461.099868][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 461.102886][ T5715] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 461.152120][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 461.192782][ T5685] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 461.218054][ T5685] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 461.255042][ T5685] usb 4-1: USB disconnect, device number 13 [ 461.303010][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 461.333783][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.349638][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.360375][ T5715] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 461.371378][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.385051][ T5715] usb 5-1: config 0 descriptor?? [ 461.482805][T11081] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 461.490538][T14211] netlink: 'syz.6.2569': attribute type 1 has an invalid length. [ 461.517450][T14211] bond8: entered promiscuous mode [ 461.523336][T14211] 8021q: adding VLAN 0 to HW filter on device bond8 [ 461.559089][T14211] vlan6: entered allmulticast mode [ 461.565092][T14211] bond8: entered allmulticast mode [ 461.606470][T14211] bond8: (slave bridge7): making interface the new active one [ 461.624975][T14211] bridge7: entered promiscuous mode [ 461.634452][T14211] bridge7: entered allmulticast mode [ 461.643075][T11081] usb 3-1: Using ep0 maxpacket: 32 [ 461.652248][T14211] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 461.684200][T11081] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.702980][T11081] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.748003][T11081] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 461.772706][T11081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.803567][T11081] usb 3-1: Product: syz [ 461.822313][T11081] usb 3-1: Manufacturer: syz [ 461.840664][T11081] usb 3-1: SerialNumber: syz [ 461.848190][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 461.882716][T11081] usb 3-1: config 0 descriptor?? [ 461.941227][ T5715] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 462.136839][ T5715] corsair 0003:1B1C:1B02.0012: Failed to get K90 initial state (error -71). [ 462.213488][ T5715] usb 5-1: USB disconnect, device number 45 [ 462.562692][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 462.606622][T14231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.617000][T14231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.722690][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 462.730056][ T10] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 462.738335][ T10] usb 4-1: config 0 has no interface number 0 [ 462.744532][ T10] usb 4-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.755702][ T10] usb 4-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.767177][ T10] usb 4-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.796658][ T10] usb 4-1: config 0 interface 6 has no altsetting 0 [ 462.822797][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 462.845815][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.867872][ T10] usb 4-1: config 0 descriptor?? [ 463.222104][ T29] audit: type=1326 audit(1778933720.582:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14235 comm="syz.5.2577" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7501c code=0x0 [ 463.314999][T14246] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) ! [ 463.325037][ T10] uclogic 0003:28BD:0933.0013: interface is invalid, ignoring [ 463.691422][T11079] usb 4-1: USB disconnect, device number 14 [ 463.926499][T14251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.959331][T14251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.972008][T14251] netlink: 'syz.6.2581': attribute type 10 has an invalid length. [ 463.981429][T14251] team0: left allmulticast mode [ 463.996354][T14251] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.025098][T14251] team0: entered allmulticast mode [ 464.054124][T14251] bond0: (slave team0): Enslaving as an active interface with an up link [ 464.299352][ T10] usb 3-1: USB disconnect, device number 15 [ 464.332675][ T5715] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 464.352351][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2584'. [ 464.457251][T14259] syzkaller0: entered promiscuous mode [ 464.462964][T14259] syzkaller0: entered allmulticast mode [ 464.493471][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 464.506137][ T5715] usb 5-1: config 162 has an invalid interface number: 84 but max is 2 [ 464.519214][ T5715] usb 5-1: config 162 has an invalid interface number: 3 but max is 2 [ 464.527800][ T5715] usb 5-1: config 162 has no interface number 0 [ 464.537181][ T5715] usb 5-1: config 162 has no interface number 1 [ 464.557684][ T5715] usb 5-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 464.574910][ T5715] usb 5-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 464.585747][ T5715] usb 5-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 464.597855][ T5715] usb 5-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 464.612366][ T5715] usb 5-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 464.626114][ T5715] usb 5-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 464.640092][ T5715] usb 5-1: config 162 interface 84 has no altsetting 0 [ 464.648050][ T5715] usb 5-1: config 162 interface 2 has no altsetting 0 [ 464.661843][ T5715] usb 5-1: config 162 interface 3 has no altsetting 0 [ 464.671514][ T5715] usb 5-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 464.681046][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.690428][ T5715] usb 5-1: Product: syz [ 464.695280][ T5715] usb 5-1: Manufacturer: syz [ 464.700023][ T5715] usb 5-1: SerialNumber: syz [ 464.928136][T14254] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 464.963294][T14254] set match dimension is over the limit! [ 464.987032][T14254] IPv6: NLM_F_REPLACE set, but no existing node found! [ 465.119320][ T49] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 465.133599][T11081] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 465.142915][ T5715] usb 5-1: USB disconnect, device number 46 [ 465.189099][T14283] netlink: 'syz.3.2592': attribute type 2 has an invalid length. [ 465.202843][T14283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2592'. [ 465.328303][T11081] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.383268][T11081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.430697][T11081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.483337][T11081] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.526262][T11081] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.569280][T11081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.610210][T11081] usb 3-1: config 0 descriptor?? [ 465.795849][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.881562][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.099684][T11081] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 466.186113][T11081] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 466.453465][ T5631] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 466.538517][T14302] kvm: pic: non byte read [ 466.548348][T14302] kvm: pic: non byte read [ 466.560344][T14302] kvm: pic: non byte read [ 466.571294][T14302] kvm: pic: non byte read [ 466.585414][T14302] kvm: pic: non byte read [ 466.595973][T14302] kvm: pic: non byte read [ 466.605485][T14302] kvm: pic: non byte read [ 466.612949][T14302] kvm: pic: non byte read [ 466.620763][T14302] kvm: pic: non byte read [ 466.625574][T14302] kvm: pic: non byte read [ 466.632686][ T5631] usb 6-1: Using ep0 maxpacket: 32 [ 466.648676][ T5631] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 466.667912][ T5631] usb 6-1: config 0 has no interface number 0 [ 466.690665][ T5631] usb 6-1: config 0 interface 6 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.712695][ T5715] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 466.729584][ T5631] usb 6-1: config 0 interface 6 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.746058][ T5631] usb 6-1: config 0 interface 6 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.764208][ T5631] usb 6-1: config 0 interface 6 has no altsetting 0 [ 466.770921][ T5631] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 466.795798][ T5631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.809637][ T5631] usb 6-1: config 0 descriptor?? [ 466.839319][T14305] netlink: 'syz.6.2599': attribute type 1 has an invalid length. [ 466.897612][ T5715] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 466.922612][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.949512][T14305] 8021q: adding VLAN 0 to HW filter on device bond9 [ 466.958018][ T5715] usb 5-1: Product: syz [ 466.979083][ T5715] usb 5-1: Manufacturer: syz [ 466.993631][T14309] bond9: (slave veth5): Enslaving as an active interface with a down link [ 466.995956][ T5715] usb 5-1: SerialNumber: syz [ 467.058513][ T5715] usb 5-1: config 0 descriptor?? [ 467.058754][T14305] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 467.074632][T14305] bond9: (slave batadv1): making interface the new active one [ 467.083675][T14305] batadv1: entered promiscuous mode [ 467.090801][T14305] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 467.174391][T14305] bond9 (unregistering): (slave veth5): Releasing active interface [ 467.185566][T14305] bond9 (unregistering): (slave batadv1): Releasing active interface [ 467.196393][T14305] bond9 (unregistering): Released all slaves [ 467.267885][ T5631] uclogic 0003:28BD:0933.0015: interface is invalid, ignoring [ 467.522668][T11081] usb 3-1: reset high-speed USB device number 16 using dummy_hcd [ 467.564542][ T5685] usb 6-1: USB disconnect, device number 45 [ 467.686793][ T5715] usb 5-1: Firmware: major: 24, minor: 33, hardware type: ATUSB (2) [ 467.810334][T14318] syzkaller0: entered promiscuous mode [ 467.815944][T14318] syzkaller0: entered allmulticast mode [ 467.901975][ T5715] usb 5-1: failed to fetch extended address, random address set [ 467.969409][ T5715] usb 5-1: USB disconnect, device number 47 [ 468.356103][T11079] usb 3-1: USB disconnect, device number 16 [ 468.435550][ T29] audit: type=1326 audit(1778933725.792:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.507321][T14335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.518116][T14335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.528336][ T29] audit: type=1326 audit(1778933725.802:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.571612][ T5631] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 468.603061][ T29] audit: type=1326 audit(1778933725.802:9669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.641352][ T29] audit: type=1326 audit(1778933725.802:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.684285][ T29] audit: type=1326 audit(1778933725.802:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.751462][ T29] audit: type=1326 audit(1778933725.802:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.802408][ T5631] usb 6-1: config 0 has no interfaces? [ 468.814063][ T29] audit: type=1326 audit(1778933725.802:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.815167][ T5631] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 468.913686][ T29] audit: type=1326 audit(1778933725.802:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 468.971449][ T5631] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.973225][ T29] audit: type=1326 audit(1778933725.802:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 469.011614][ T29] audit: type=1326 audit(1778933725.802:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz.2.2607" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa901c code=0x7ffc0000 [ 469.058903][ T5631] usb 6-1: config 0 descriptor?? [ 469.826600][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.882061][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.939142][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2606'. [ 469.994084][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2606'. [ 470.016165][ T1111] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 470.054971][T14328] macvtap1: entered promiscuous mode [ 470.101766][T14328] syz_tun: entered promiscuous mode [ 470.151253][T14328] macvtap1: entered allmulticast mode [ 470.193214][T14328] syz_tun: entered allmulticast mode [ 470.217956][T14351] syz_tun: left allmulticast mode [ 470.226668][T14351] syz_tun: left promiscuous mode [ 470.250871][ T5685] usb 6-1: USB disconnect, device number 46 [ 470.616975][T14364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.626815][ T5631] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 470.635092][T14364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.798515][ T5631] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.809488][T14366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2619'. [ 470.822439][ T5631] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 470.833815][ T5631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.849298][ T5631] usb 4-1: config 0 descriptor?? [ 470.869031][T14366] netlink: 'syz.4.2619': attribute type 5 has an invalid length. [ 470.877921][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 470.889809][ T5631] pwc: Askey VC010 type 2 USB webcam detected. [ 470.904627][T14366] netlink: 'syz.4.2619': attribute type 5 has an invalid length. [ 470.922467][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 471.272339][ T5631] pwc: recv_control_msg error -32 req 02 val 2b00 [ 471.283386][ T5715] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 471.295216][ T5631] pwc: recv_control_msg error -32 req 02 val 2700 [ 471.304947][ T5631] pwc: recv_control_msg error -32 req 02 val 2c00 [ 471.325482][ T5631] pwc: recv_control_msg error -32 req 04 val 1000 [ 471.341581][ T5631] pwc: recv_control_msg error -32 req 04 val 1300 [ 471.362280][ T5631] pwc: recv_control_msg error -32 req 04 val 1400 [ 471.379617][ T5631] pwc: recv_control_msg error -32 req 02 val 2000 [ 471.389531][ T5631] pwc: recv_control_msg error -32 req 02 val 2100 [ 471.405018][ T5631] pwc: recv_control_msg error -32 req 04 val 1500 [ 471.415858][ T5631] pwc: recv_control_msg error -32 req 02 val 2500 [ 471.485406][ T5715] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 471.494105][ T5715] usb 5-1: config 0 has no interface number 0 [ 471.514933][ T5715] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 471.530023][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.544793][ T5715] usb 5-1: Product: syz [ 471.550068][ T5715] usb 5-1: Manufacturer: syz [ 471.559255][ T5715] usb 5-1: SerialNumber: syz [ 471.581082][ T5715] usb 5-1: config 0 descriptor?? [ 471.630239][ T5631] pwc: recv_control_msg error -71 req 02 val 2600 [ 471.640270][ T5631] pwc: recv_control_msg error -71 req 02 val 2900 [ 471.648700][ T5631] pwc: recv_control_msg error -71 req 02 val 2800 [ 471.656247][ T5631] pwc: recv_control_msg error -71 req 04 val 1100 [ 471.671924][ T5631] pwc: recv_control_msg error -71 req 04 val 1200 [ 471.713735][ T5631] pwc: Registered as video103. [ 471.732197][ T5631] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 471.745630][ T5685] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 471.822219][ T5631] usb 4-1: USB disconnect, device number 15 [ 471.922698][ T5685] usb 3-1: Using ep0 maxpacket: 8 [ 471.961898][ T5685] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 472.001152][ T5685] usb 3-1: config 0 has no interface number 0 [ 472.020609][ T5685] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.037925][ T5685] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 472.050628][ T5685] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.062001][ T5685] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 472.076224][ T5685] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 472.087275][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.117659][ T5685] usb 3-1: config 0 descriptor?? [ 472.147270][ T5685] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 472.205211][ T5715] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 472.231478][ T5715] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 472.244333][ T5715] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 472.252919][ T5715] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 472.264732][ T5715] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 472.429152][ T5685] usb 3-1: USB disconnect, device number 17 [ 472.429334][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 472.498011][ T5715] usb 5-1: USB disconnect, device number 48 [ 472.508042][ T5685] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 472.515015][T14375] ldusb: No device or device unplugged -19 [ 472.549551][ T5715] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 472.570302][ T5715] keyspan 5-1:0.133: device disconnected [ 472.638004][T14391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.650459][T14391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.664754][T14391] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 472.678581][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2628'. [ 472.852650][ T5631] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 473.022900][ T5631] usb 4-1: Using ep0 maxpacket: 32 [ 473.032382][ T5631] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 473.043186][ T5631] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.096844][T14412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 473.349210][T14389] batman_adv: batadv0: Adding interface: dummy0 [ 473.385387][T14389] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.469320][T14389] batman_adv: batadv0: Interface activated: dummy0 [ 473.551232][T14427] batadv0: mtu less than device minimum [ 473.571929][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.583920][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.595020][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.606102][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.617188][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.628285][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.639347][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.650415][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.661466][T14427] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 473.783532][ T5685] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 473.818867][ T5631] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 473.832476][ T5631] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 473.862777][T14432] netem: change failed [ 473.863255][ T5631] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 473.963844][ T5685] usb 6-1: Using ep0 maxpacket: 16 [ 473.970622][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2643'. [ 473.976319][ T5685] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.013882][ T5685] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 474.037116][ T5685] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.068297][ T5685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.087281][ T5685] usb 6-1: Product: syz [ 474.101320][ T5685] usb 6-1: Manufacturer: syz [ 474.120379][ T5685] usb 6-1: SerialNumber: syz [ 474.159596][ T5685] usb 6-1: 0:2 : does not exist [ 474.306185][T14443] binder_alloc: 14441: binder_alloc_buf size -624 failed, no address space [ 474.317686][T14443] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176) [ 474.362671][ T5685] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 474.467713][T14447] binder_alloc: 14445: pid 14445 spamming oneway? 1 buffers allocated for a total size of 4096 [ 474.487336][ T5685] usb 6-1: USB disconnect, device number 47 [ 474.508093][T14447] binder_alloc: 14445: pid 14445 spamming oneway? 2 buffers allocated for a total size of 5120 [ 474.603879][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.661947][T14452] syzkaller0: entered promiscuous mode [ 474.675008][T14452] syzkaller0: entered allmulticast mode [ 476.142703][T11081] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 476.302679][T11081] usb 3-1: Using ep0 maxpacket: 32 [ 476.321095][T11081] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 476.332806][T11081] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 476.346531][T11081] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.359691][T11081] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 476.394342][T11081] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 476.423208][T11081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.485769][T11081] usb 3-1: Product: syz [ 476.505698][T11081] usb 3-1: Manufacturer: syz [ 476.522645][T11081] usb 3-1: SerialNumber: syz [ 476.566807][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 476.579399][T11081] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input19 [ 476.782676][T11081] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 476.791201][T11081] (id 0x00) [ 477.015285][T11081] rc_core: IR keymap rc-imon-pad not found [ 477.058922][T11081] Registered IR keymap rc-empty [ 477.064485][T11081] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 477.077848][T11081] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 477.160358][T14499] netlink: 'syz.6.2667': attribute type 1 has an invalid length. [ 477.163349][T11081] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 477.212390][T14499] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.232458][T11081] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input20 [ 477.257125][T11081] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:18> initialized [ 477.411125][T14502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.427852][T14502] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 477.438646][ T5685] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 477.452137][T14502] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 477.477473][T14499] gretap1: entered promiscuous mode [ 477.485506][T14499] bond9: (slave gretap1): making interface the new active one [ 477.494143][T14499] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 477.592651][ T5685] usb 6-1: Using ep0 maxpacket: 16 [ 477.604511][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.621495][ T5685] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.642761][ T5685] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 477.662698][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.701838][ T5685] usb 6-1: config 0 descriptor?? [ 477.844068][T14480] imon:send_packet: task interrupted [ 477.873164][T14480] imon:send_packet: packet tx failed (-512) [ 477.938169][T14480] imon:vfd_write: send packet #1 failed [ 477.987944][T14480] imon:send_packet: task interrupted [ 478.007064][T14480] imon:send_packet: packet tx failed (-512) [ 478.039025][T14480] imon:vfd_write: send packet #0 failed [ 478.069618][T14480] imon:send_packet: packet tx failed (-32) [ 478.097623][T14480] imon:vfd_write: send packet #0 failed [ 478.311665][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2666'. [ 478.649380][ T5685] corsair 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 478.916871][ T5685] corsair 0003:1B1C:1B02.0016: Failed to get K90 initial state (error -71). [ 478.991068][ T5685] usb 6-1: USB disconnect, device number 48 [ 479.027127][T14511] fido_id[14511]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1B1C:1B02.0016/report_descriptor': No such device [ 479.156201][ T5715] usb 3-1: USB disconnect, device number 18 [ 479.284378][T14520] syzkaller0: entered promiscuous mode [ 479.291707][T14520] syzkaller0: entered allmulticast mode [ 479.437448][T14526] syzkaller0: entered promiscuous mode [ 479.457844][T14526] syzkaller0: entered allmulticast mode [ 479.506252][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2675'. [ 479.701662][T14536] syzkaller0: entered promiscuous mode [ 479.724278][T14536] syzkaller0: entered allmulticast mode [ 480.163431][T14557] syzkaller0: entered promiscuous mode [ 480.185741][T14557] syzkaller0: entered allmulticast mode [ 480.312751][ T5685] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 480.477009][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.508355][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.534361][ T5685] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 480.553570][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.570853][ T5685] usb 3-1: config 0 descriptor?? [ 480.928437][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 481.014604][ T5685] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 481.052305][T14569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2690'. [ 481.072858][T11081] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 481.199350][ T5685] playstation 0003:054C:0DF2.0017: Invalid reportID received, expected 9 got 114 [ 481.208677][ T5685] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -22 [ 481.219269][ T5685] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 481.229865][ T5685] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 481.241161][T14571] picdev_read: 1374 callbacks suppressed [ 481.241173][T14571] kvm: pic: non byte read [ 481.242748][T11081] usb 6-1: Using ep0 maxpacket: 8 [ 481.251930][T14571] kvm: pic: level sensitive irq not supported [ 481.256471][T14571] kvm: pic: non byte read [ 481.258518][ T5685] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -22 [ 481.286212][T14571] kvm: pic: level sensitive irq not supported [ 481.286210][T11081] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 481.286232][T11081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.313987][T11081] usb 6-1: Product: syz [ 481.318214][T11081] usb 6-1: Manufacturer: syz [ 481.323896][T11081] usb 6-1: SerialNumber: syz [ 481.329412][T14571] kvm: pic: non byte read [ 481.338016][T11081] usb 6-1: config 0 descriptor?? [ 481.352857][T14571] kvm: pic: level sensitive irq not supported [ 481.352902][T14571] kvm: pic: non byte read [ 481.385916][T14571] kvm: pic: level sensitive irq not supported [ 481.385979][T14571] kvm: pic: non byte read [ 481.412096][T14571] kvm: pic: level sensitive irq not supported [ 481.412154][T14571] kvm: pic: non byte read [ 481.429826][ T10] usb 3-1: USB disconnect, device number 19 [ 481.440642][T14571] kvm: pic: level sensitive irq not supported [ 481.440699][T14571] kvm: pic: non byte read [ 481.456564][T14571] kvm: pic: level sensitive irq not supported [ 481.456627][T14571] kvm: pic: non byte read [ 481.467833][T14571] kvm: pic: level sensitive irq not supported [ 481.467890][T14571] kvm: pic: non byte read [ 481.480861][T14571] kvm: pic: level sensitive irq not supported [ 481.480907][T14571] kvm: pic: non byte read [ 481.492153][T14571] kvm: pic: level sensitive irq not supported [ 481.567975][T11081] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 481.729437][T14581] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1514) ! [ 482.268270][T14590] syzkaller0: entered promiscuous mode [ 482.283444][T14590] syzkaller0: entered allmulticast mode [ 482.312264][T14590] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) ! [ 483.004961][T11081] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 483.060415][T11081] usb 6-1: USB disconnect, device number 49 [ 483.540916][ T29] audit: type=1800 audit(1778933740.902:9677): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2694" name="bus" dev="ramfs" ino=74273 res=0 errno=0 [ 484.081180][ T5685] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 484.252782][ T5685] usb 6-1: Using ep0 maxpacket: 8 [ 484.264610][ T5685] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 484.282769][ T5685] usb 6-1: config 0 has no interface number 0 [ 484.292169][ T5685] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 484.314239][ T5685] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 484.343659][ T5685] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.362861][ T5685] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 484.387644][ T5685] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 484.407645][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.425719][ T5685] usb 6-1: config 0 descriptor?? [ 484.454225][ T5685] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 484.761404][ T5715] usb 6-1: USB disconnect, device number 50 [ 484.761421][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 484.838282][ T5715] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 484.838595][T14606] ldusb: No device or device unplugged -19 [ 485.424047][ T5715] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 485.595594][ T5715] usb 5-1: Using ep0 maxpacket: 8 [ 485.607054][ T5715] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 485.625709][ T5715] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 485.655296][ T5715] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.666758][ T5715] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 485.678425][ T5715] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 485.690098][ T5715] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.724460][ T5715] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.740884][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.977332][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.003627][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.050532][ T5715] usb 5-1: GET_CAPABILITIES returned 0 [ 486.067390][ T5715] usbtmc 5-1:16.0: can't read capabilities [ 486.311578][T14623] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 486.335236][T11081] usb 5-1: USB disconnect, device number 49 [ 486.679567][T14642] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 486.966692][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2715'. [ 486.996774][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2715'. [ 487.224289][T14665] netlink: 'syz.4.2721': attribute type 2 has an invalid length. [ 487.232233][T14665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2721'. [ 487.342702][ T5685] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 487.522649][ T5685] usb 3-1: Using ep0 maxpacket: 32 [ 487.544604][ T5685] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 487.576674][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.613066][ T5685] usb 3-1: config 0 descriptor?? [ 487.650431][ T5685] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 488.876862][T14680] netlink: 'syz.6.2737': attribute type 2 has an invalid length. [ 488.889917][T14680] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2737'. [ 490.330112][ T5685] gspca_vc032x: reg_r err -71 [ 490.360800][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.385652][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.412659][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.437797][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.461492][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.492241][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.518399][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.538062][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.559370][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.577161][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.595170][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.606840][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.622676][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.644663][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.660352][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.679113][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.689467][ T5685] gspca_vc032x: I2c Bus Busy Wait 00 [ 490.708428][ T5685] gspca_vc032x: Unknown sensor... [ 490.715041][ T5685] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 490.749429][ T5685] usb 3-1: USB disconnect, device number 20 [ 490.773410][T14696] syzkaller0: entered promiscuous mode [ 490.784417][T14696] syzkaller0: entered allmulticast mode [ 490.951064][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2734'. [ 490.989961][T14704] bond3: entered promiscuous mode [ 490.995759][T14704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.035748][T14704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.043245][T14704] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 491.055184][T14704] bond3: (slave sit1): Error -95 calling set_mac_address [ 491.122698][T11081] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 491.282653][T11081] usb 6-1: Using ep0 maxpacket: 32 [ 491.296650][T11081] usb 6-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 491.306164][T11081] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.314398][T11081] usb 6-1: Product: syz [ 491.318695][T11081] usb 6-1: Manufacturer: syz [ 491.323592][T11081] usb 6-1: SerialNumber: syz [ 491.548848][T11081] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 491.587004][T11081] usb 6-1: unit 2 not found! [ 491.702441][T11081] usb 6-1: USB disconnect, device number 51 [ 491.882893][ T5701] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 492.065891][ T5701] usb 5-1: Using ep0 maxpacket: 8 [ 492.092363][ T5701] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 492.134591][ T5701] usb 5-1: config 0 has no interface number 0 [ 492.148195][ T5701] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 492.200549][ T5701] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 492.242413][ T5701] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 492.274779][ T5701] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 492.302701][ T5701] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 492.324304][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.358687][ T5701] usb 5-1: config 0 descriptor?? [ 492.423480][ T5701] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 492.763445][T14736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.775299][ T5701] usb 5-1: USB disconnect, device number 50 [ 492.781216][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 492.788749][T14736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.848601][ T5701] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 492.864224][T14715] ldusb: No device or device unplugged -19 [ 492.947422][T14736] picdev_read: 26 callbacks suppressed [ 492.947434][T14736] kvm: pic: non byte read [ 492.994680][T14736] kvm: pic: non byte read [ 493.019440][T14736] kvm: pic: non byte read [ 493.050099][T14736] kvm: pic: non byte read [ 493.072171][T14736] kvm: pic: non byte read [ 493.110943][T14736] kvm: pic: non byte read [ 493.144526][T14736] kvm: pic: non byte read [ 493.181159][T14736] kvm: pic: non byte read [ 493.205811][T14736] kvm: pic: non byte read [ 493.230095][T14736] kvm: pic: non byte read [ 493.427088][ T5701] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 493.655965][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 493.730630][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.779050][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.852455][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 493.946392][ T5701] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 494.069566][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.163436][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 494.193001][ T5701] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 494.206130][ T5701] usb 5-1: Manufacturer: syz [ 494.219270][ T5701] usb 5-1: config 0 descriptor?? [ 494.442371][T14750] syzkaller0: entered promiscuous mode [ 494.468791][T14750] syzkaller0: entered allmulticast mode [ 494.562742][ T5701] rc_core: IR keymap rc-hauppauge not found [ 494.591136][ T5701] Registered IR keymap rc-empty [ 494.613998][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.633614][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.679201][ T5701] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 494.706641][ T29] audit: type=1326 audit(1778933752.062:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14755 comm="syz.6.2749" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x0 [ 494.740005][ T5701] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 494.766883][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.792817][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.825733][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.854192][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.876895][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.906733][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.943260][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 494.963163][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.002794][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.052844][ T5701] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 495.098561][ T5701] mceusb 5-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 495.109683][ T5701] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 495.136975][ T5701] usb 5-1: USB disconnect, device number 51 [ 495.178949][T14771] netlink: 'syz.5.2754': attribute type 1 has an invalid length. [ 495.225483][T14771] 8021q: adding VLAN 0 to HW filter on device bond9 [ 495.256858][T14771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2754'. [ 495.280094][T14771] bond9: entered allmulticast mode [ 495.301302][T14771] bond9: (slave dummy0): making interface the new active one [ 495.320769][T14771] dummy0: entered allmulticast mode [ 495.331611][T14771] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 495.919437][T14789] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 496.255416][T14797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 497.215199][T14818] netlink: 'syz.5.2767': attribute type 2 has an invalid length. [ 497.224348][T14818] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2767'. [ 498.929218][ T29] audit: type=1326 audit(1778933756.292:9679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.6.2775" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x0 [ 499.062365][ T29] audit: type=1326 audit(1778933756.422:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14834 comm="syz.6.2775" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f6601c code=0x0 [ 499.572698][ T5715] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 499.722667][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 499.731285][ T5715] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 499.740603][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.748927][ T5715] usb 6-1: Product: syz [ 499.753405][ T5715] usb 6-1: Manufacturer: syz [ 499.758044][ T5715] usb 6-1: SerialNumber: syz [ 499.765744][ T5715] usb 6-1: config 0 descriptor?? [ 499.777125][ T5715] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 499.841665][T14857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.866347][T14857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.386147][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.392656][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.709415][T14887] netlink: 'syz.2.2787': attribute type 2 has an invalid length. [ 501.719977][T14887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2787'. [ 502.012788][ T7330] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 502.229498][ T5715] gspca_ov534_9: reg_r err -71 [ 502.242728][ T5701] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 502.300828][T14903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.319777][T14903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.350700][T14903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.368387][T14903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.417645][ T5701] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 502.437798][ T5701] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 502.442665][ T5715] gspca_ov534_9: Unknown sensor 0000 [ 502.454704][ T5715] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 502.473968][ T5701] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 502.488265][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.501678][ T5715] usb 6-1: USB disconnect, device number 52 [ 502.545959][T14894] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 502.574982][ T5701] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 502.941381][ T5715] usb 5-1: USB disconnect, device number 52 [ 503.404855][T14916] syzkaller0: entered promiscuous mode [ 503.435218][T14916] syzkaller0: entered allmulticast mode [ 503.847102][T14921] picdev_read: 1374 callbacks suppressed [ 503.847113][T14921] kvm: pic: non byte read [ 503.910554][T14921] pic_ioport_write: 25 callbacks suppressed [ 503.910570][T14921] kvm: pic: level sensitive irq not supported [ 503.948767][T14921] kvm: pic: non byte read [ 504.023016][T14921] kvm: pic: level sensitive irq not supported [ 504.023078][T14921] kvm: pic: non byte read [ 504.073439][T14921] kvm: pic: level sensitive irq not supported [ 504.073503][T14921] kvm: pic: non byte read [ 504.133328][T14921] kvm: pic: level sensitive irq not supported [ 504.133391][T14921] kvm: pic: non byte read [ 504.178708][T14921] kvm: pic: level sensitive irq not supported [ 504.182933][T14921] kvm: pic: non byte read [ 504.242611][T14921] kvm: pic: level sensitive irq not supported [ 504.244161][T14921] kvm: pic: non byte read [ 504.283133][T14921] kvm: pic: level sensitive irq not supported [ 504.283192][T14921] kvm: pic: non byte read [ 504.319717][T14921] kvm: pic: level sensitive irq not supported [ 504.319776][T14921] kvm: pic: non byte read [ 504.362370][T14921] kvm: pic: level sensitive irq not supported [ 504.364096][T14921] kvm: pic: non byte read [ 504.390434][T14921] kvm: pic: level sensitive irq not supported [ 504.399991][T14929] netlink: 'syz.3.2803': attribute type 1 has an invalid length. [ 504.470023][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2803'. [ 504.511309][T14929] 8021q: adding VLAN 0 to HW filter on device bond4 [ 504.547064][T14931] bond4: entered promiscuous mode [ 504.553704][T14931] bond4: entered allmulticast mode [ 504.561510][T14932] batman_adv: batadv0: Interface deactivated: dummy0 [ 504.572126][T14932] batman_adv: batadv0: Removing interface: dummy0 [ 504.606155][T14932] bond4: (slave dummy0): making interface the new active one [ 504.629489][T14932] dummy0: entered promiscuous mode [ 504.646524][T14932] dummy0: entered allmulticast mode [ 504.670007][T14932] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 504.700999][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2805'. [ 504.745343][T14936] bond10: entered promiscuous mode [ 504.750968][T14936] 8021q: adding VLAN 0 to HW filter on device bond10 [ 504.794932][T14936] 8021q: adding VLAN 0 to HW filter on device bond10 [ 504.803932][T14936] bond10: (slave sit1): The slave device specified does not support setting the MAC address [ 504.818408][T14936] bond10: (slave sit1): Error -95 calling set_mac_address [ 504.865362][T14939] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 504.960051][T14943] syzkaller0: entered promiscuous mode [ 504.971051][T14943] syzkaller0: entered allmulticast mode [ 506.147147][ T29] audit: type=1326 audit(1778933763.512:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14969 comm="syz.5.2816" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f7501c code=0x0 [ 506.484926][T14979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.526493][T14979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.842558][T14986] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 507.213304][T14993] vlan7: entered allmulticast mode [ 507.232729][ T5715] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 507.250578][T14993] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2825'. [ 507.306829][T14993] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 507.321204][T14993] bond0 (unregistering): (slave team0): Releasing backup interface [ 507.337145][T14993] team0: left allmulticast mode [ 507.344648][T14993] bond0 (unregistering): Released all slaves [ 507.433035][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 507.440949][ T5715] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 507.458796][ T5715] usb 3-1: config 0 has no interface number 0 [ 507.485126][ T5715] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 507.533423][ T5715] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 507.559756][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.598736][ T5715] usb 3-1: Product: syz [ 507.611171][ T5715] usb 3-1: Manufacturer: syz [ 507.617058][ T5715] usb 3-1: SerialNumber: syz [ 507.633830][ T5715] usb 3-1: config 0 descriptor?? [ 507.649375][T14989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 507.873151][T14989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 509.635338][T15022] binder_alloc: 15021: binder_alloc_buf, no vma [ 510.120918][T15030] IPVS: length: 199 != 272630600 [ 510.315451][ T5715] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 510.355807][ T5715] asix 3-1:0.188: probe with driver asix failed with error -71 [ 510.408127][ T5715] usb 3-1: USB disconnect, device number 21 [ 510.429538][ T29] audit: type=1326 audit(1778933767.792:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.3.2845" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f01c code=0x0 [ 510.535550][ T29] audit: type=1326 audit(1778933767.902:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15042 comm="syz.3.2845" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704f01c code=0x0 [ 511.469362][T15055] netlink: 'syz.3.2848': attribute type 1 has an invalid length. [ 511.611668][T15055] bond5: entered promiscuous mode [ 511.611897][T15055] 8021q: adding VLAN 0 to HW filter on device bond5 [ 511.719936][T15058] bond5: (slave bridge1): making interface the new active one [ 511.765222][T15058] bridge1: entered promiscuous mode [ 511.820138][T15058] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 512.045071][T15061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.074080][T15061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.567651][T15067] syzkaller0: entered promiscuous mode [ 512.579083][T15067] syzkaller0: entered allmulticast mode [ 512.802147][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.818714][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.848445][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.866721][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.886571][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.918830][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.969523][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.008744][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.263797][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.295733][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.694837][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 513.968654][T15091] syzkaller0: entered promiscuous mode [ 515.644420][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 515.657631][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2866'. [ 515.684572][ T5701] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 515.863240][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 515.889875][ T5701] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.954804][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 516.004812][ T5701] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 516.059585][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.088302][ T29] audit: type=1326 audit(1778933773.452:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15146 comm="syz.6.2870" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f6601c code=0x0 [ 516.134652][ T5701] usb 5-1: config 0 descriptor?? [ 516.622192][ T5701] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 516.898781][T15158] syzkaller0: entered promiscuous mode [ 516.919119][T15158] syzkaller0: entered allmulticast mode [ 517.029655][ T5715] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 517.084707][ T5701] usb 5-1: USB disconnect, device number 53 [ 517.187578][ T5715] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.214885][ T5715] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 517.290207][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.327581][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.343023][ T5715] usb 6-1: config 0 descriptor?? [ 517.359601][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.369264][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 517.776314][ T5715] pwc: recv_control_msg error -32 req 02 val 2b00 [ 517.786704][ T5715] pwc: recv_control_msg error -32 req 02 val 2700 [ 517.796957][ T5715] pwc: recv_control_msg error -32 req 02 val 2c00 [ 517.816007][ T5715] pwc: recv_control_msg error -32 req 04 val 1000 [ 517.830105][ T5715] pwc: recv_control_msg error -32 req 04 val 1300 [ 517.846086][ T5715] pwc: recv_control_msg error -32 req 04 val 1400 [ 517.866974][ T5715] pwc: recv_control_msg error -32 req 02 val 2000 [ 517.884500][ T5715] pwc: recv_control_msg error -32 req 02 val 2100 [ 517.898609][ T5715] pwc: recv_control_msg error -32 req 04 val 1500 [ 517.914595][ T5715] pwc: recv_control_msg error -32 req 02 val 2500 [ 518.135702][ T5715] pwc: recv_control_msg error -71 req 02 val 2600 [ 518.154869][ T5715] pwc: recv_control_msg error -71 req 02 val 2900 [ 518.169705][ T5715] pwc: recv_control_msg error -71 req 02 val 2800 [ 518.184132][ T29] audit: type=1804 audit(1778933775.532:9685): pid=15180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2880" name="/newroot/622/file1" dev="fuse" ino=1 res=1 errno=0 [ 518.211842][ T5715] pwc: recv_control_msg error -71 req 04 val 1100 [ 518.225342][ T5715] pwc: recv_control_msg error -71 req 04 val 1200 [ 518.245821][ T5715] pwc: Registered as video103. [ 518.256513][ T29] audit: type=1804 audit(1778933775.612:9686): pid=15179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2880" name="/newroot/622/file1" dev="fuse" ino=1 res=1 errno=0 [ 518.281077][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input22 [ 518.301807][ T5715] usb 6-1: USB disconnect, device number 53 [ 518.563128][T15186] syzkaller0: entered promiscuous mode [ 518.594871][T15186] syzkaller0: entered allmulticast mode [ 518.761936][T15193] netlink: 'syz.6.2885': attribute type 1 has an invalid length. [ 518.859015][T15193] bond0: entered promiscuous mode [ 518.884863][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.991228][T15193] bond0: (slave bridge8): making interface the new active one [ 518.999355][T15193] bridge8: entered promiscuous mode [ 519.006601][T15193] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 519.111376][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.122371][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.143353][T15210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.154395][T15210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.168278][T15210] warning: `syz.6.2890' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 519.192738][ T5701] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 519.342719][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 519.355065][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.367469][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.379068][ T5701] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 519.388505][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.408922][ T5701] usb 3-1: config 0 descriptor?? [ 519.879339][ T5701] corsair 0003:1B1C:1B02.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 520.000763][T15214] vlan3: entered allmulticast mode [ 520.020876][T15218] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2891'. [ 520.035587][ T5701] corsair 0003:1B1C:1B02.0019: Read invalid backlight brightness: 34. [ 520.050893][T15214] bond0: entered allmulticast mode [ 520.060021][T15214] bond_slave_0: entered allmulticast mode [ 520.066575][T15214] bond_slave_1: entered allmulticast mode [ 520.117771][T15218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.143541][T15218] bond_slave_0: left allmulticast mode [ 520.169622][T15218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.191025][T15218] bond_slave_1: left allmulticast mode [ 520.207434][T15218] bond0 (unregistering): Released all slaves [ 520.316582][ T5701] usb 3-1: USB disconnect, device number 22 [ 520.482659][ T5715] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 520.661287][ T5715] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 520.699195][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 520.723281][ T5715] usb 5-1: Product: syz [ 520.730724][ T5715] usb 5-1: Manufacturer: syz [ 520.741611][ T5715] usb 5-1: SerialNumber: syz [ 520.758709][ T5715] usb 5-1: config 0 descriptor?? [ 521.011375][ T5715] usb 5-1: USB disconnect, device number 54 [ 522.411061][T15255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.442239][T15255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.228419][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2920'. [ 523.270298][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2920'. [ 523.307021][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2920'. [ 523.381839][T15276] netlink: 'syz.5.2911': attribute type 2 has an invalid length. [ 523.392120][T15276] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2911'. [ 523.409796][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2920'. [ 523.473255][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2920'. [ 524.211345][T15285] netlink: 'syz.6.2913': attribute type 8 has an invalid length. [ 525.691614][T15307] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1908810531 (122163873984 ns) > initial count (42142760512 ns). Using initial count to start timer. [ 525.951978][T15313] binder_alloc: 15311: binder_alloc_buf, no vma [ 526.144217][T15317] kvm: pic: single mode not supported [ 526.144232][T15317] pic_ioport_write: 28 callbacks suppressed [ 526.144240][T15317] kvm: pic: level sensitive irq not supported [ 526.468674][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.515478][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.719078][T15340] syzkaller0: entered promiscuous mode [ 527.726394][T15340] syzkaller0: entered allmulticast mode [ 528.144069][T15357] syzkaller0: entered promiscuous mode [ 528.149692][T15357] syzkaller0: entered allmulticast mode [ 528.162888][ T5701] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 528.311862][T15363] syzkaller0: entered promiscuous mode [ 528.317636][T15363] syzkaller0: entered allmulticast mode [ 528.345339][ T5701] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 528.354173][ T5701] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 528.364661][ T5701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 528.375115][ T5701] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 528.386921][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 528.398292][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.413257][ T5701] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 528.422340][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 528.434530][ T5701] usb 5-1: Product: syz [ 528.438990][ T5701] usb 5-1: Manufacturer: syz [ 528.447819][T15344] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 528.456521][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 528.461993][ T5701] cdc_wdm 5-1:1.0: skipping garbage [ 528.469413][ T5701] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 528.475621][ T5701] cdc_wdm 5-1:1.0: Unknown control protocol [ 528.551355][T15365] syzkaller0: entered promiscuous mode [ 528.557140][T15365] syzkaller0: entered allmulticast mode [ 528.696574][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.703396][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.709916][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.716518][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.722924][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.729518][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.735794][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.742399][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.748626][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.755205][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.761453][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.768050][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.774346][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.780945][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.787252][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.793847][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.800108][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.806713][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.813083][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 528.819682][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 528.850022][T15344] net_ratelimit: 10 callbacks suppressed [ 528.850040][T15344] openvswitch: netlink: EtherType 50a is less than min 600 [ 529.074227][ T5701] usb 5-1: USB disconnect, device number 55 [ 529.075602][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 529.090790][T15344] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 529.097389][T15373] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 531.786028][T12320] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.830369][T12320] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 531.885174][T12320] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.921973][T12320] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 531.950557][T12320] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.973684][T12320] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 531.999988][T12320] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.025135][T12320] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 532.188979][T15410] kvm: pic: single mode not supported [ 532.192243][T15410] kvm: pic: single mode not supported [ 532.198028][T15410] kvm: pic: single mode not supported [ 532.204235][T15410] kvm: pic: level sensitive irq not supported [ 532.212899][T15410] kvm: pic: single mode not supported [ 532.219012][T15410] kvm: pic: level sensitive irq not supported [ 532.226527][T15410] kvm: pic: single mode not supported [ 532.232666][T15410] kvm: pic: level sensitive irq not supported [ 532.240204][T15410] kvm: pic: single mode not supported [ 532.246579][T15410] kvm: pic: level sensitive irq not supported [ 532.260164][T15410] kvm: pic: single mode not supported [ 532.270897][T15410] kvm: pic: single mode not supported [ 532.276420][T15410] kvm: pic: level sensitive irq not supported [ 532.282651][T15410] kvm: pic: level sensitive irq not supported [ 532.289703][T15410] kvm: pic: single mode not supported [ 532.295929][T15410] kvm: pic: level sensitive irq not supported [ 532.302186][T15410] kvm: pic: single mode not supported [ 532.308375][T15410] kvm: pic: level sensitive irq not supported [ 532.325968][T15410] kvm: pic: level sensitive irq not supported [ 532.342209][T15410] kvm: pic: level sensitive irq not supported [ 532.387307][T15420] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 532.648097][T15422] bond0: (slave veth5): Enslaving as an active interface with a down link [ 532.667835][T15420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2957'. [ 532.755102][T15423] bond0: (slave veth7): Enslaving as an active interface with a down link [ 532.791317][T15420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.927430][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2961'. [ 533.622695][ T5715] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 533.833712][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 533.849824][ T5715] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 533.878162][ T5715] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 533.911342][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.952041][ T5715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 533.987706][ T5715] usb 3-1: config 1 has no interface number 0 [ 534.008954][ T5715] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 534.047804][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.119949][ T5715] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 534.480790][T15467] tipc: Enabling of bearer rejected, already enabled [ 534.485040][T15450] syz.3.2967 (15450): drop_caches: 2 [ 534.538865][T15467] tipc: Resetting bearer [ 534.612725][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 534.832684][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 534.876818][ T10] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 534.923831][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.956470][ T10] usb 6-1: Product: syz [ 534.972287][ T10] usb 6-1: Manufacturer: syz [ 534.988215][ T10] usb 6-1: SerialNumber: syz [ 535.025018][ T10] usb 6-1: config 0 descriptor?? [ 535.028565][T15476] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2976'. [ 535.061840][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 535.602828][ T5723] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 535.892842][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 535.981166][ T5723] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 536.061915][ T5723] usb 5-1: config 0 has no interface number 0 [ 536.122870][ T5723] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 536.159766][ T5723] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 536.181043][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.198690][ T5723] usb 5-1: Product: syz [ 536.209502][ T5723] usb 5-1: Manufacturer: syz [ 536.220053][ T5723] usb 5-1: SerialNumber: syz [ 536.245906][ T5723] usb 5-1: config 0 descriptor?? [ 536.254474][T15482] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 536.379531][ T5715] snd_usb_pod 3-1:1.1: set_interface failed [ 536.416127][ T5715] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 536.446685][ T5715] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 536.495427][T15482] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 536.498314][ T5715] usb 3-1: USB disconnect, device number 23 [ 536.989072][T15493] syzkaller0: entered promiscuous mode [ 537.001444][T15493] syzkaller0: entered allmulticast mode [ 537.297468][ T5631] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 537.383619][ T5631] dvb_usb_az6027 4-1:64.0: probe with driver dvb_usb_az6027 failed with error -110 [ 537.458762][ T5631] usb 4-1: USB disconnect, device number 16 [ 537.682130][T15485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.727166][ T10] gspca_ov534_9: reg_r err -71 [ 537.952913][ T10] gspca_ov534_9: Unknown sensor 0000 [ 537.952999][ T10] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 537.987103][ T10] usb 6-1: USB disconnect, device number 54 [ 538.842790][ T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 539.008485][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.028920][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 539.044549][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.075419][ T10] usb 6-1: config 0 descriptor?? [ 539.100643][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 539.204165][ T5723] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 539.224024][ T5723] asix 5-1:0.188: probe with driver asix failed with error -71 [ 539.239421][ T5723] usb 5-1: USB disconnect, device number 56 [ 539.289736][T15512] netlink: 'syz.6.2989': attribute type 1 has an invalid length. [ 539.442379][T15514] bond11: (slave veth7): Enslaving as an active interface with a down link [ 539.510697][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 539.533252][T15512] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2989'. [ 539.549648][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 539.563939][T15516] bond11: (slave veth9): Enslaving as an active interface with a down link [ 539.579820][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 539.608933][T15512] 8021q: adding VLAN 0 to HW filter on device bond11 [ 539.626758][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 539.665139][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 539.705882][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 539.745318][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 539.779436][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 539.823022][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 539.851078][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 539.880956][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 540.128758][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 540.168081][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 540.210502][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 540.262553][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 540.348206][ T10] pwc: Registered as video103. [ 540.401171][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 540.563328][ T10] usb 6-1: USB disconnect, device number 55 [ 540.746876][T15529] netlink: 'syz.6.2991': attribute type 4 has an invalid length. [ 541.232839][ T5685] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 541.402934][ T5685] usb 5-1: Using ep0 maxpacket: 16 [ 541.413447][ T5685] usb 5-1: too many configurations: 112, using maximum allowed: 8 [ 541.432783][T11079] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 541.454555][ T5685] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 541.487001][ T5685] usb 5-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0 [ 541.525825][ T5685] usb 5-1: Product: syz [ 541.543313][ T5685] usb 5-1: Manufacturer: syz [ 541.587167][ T5685] r8152-cfgselector 5-1: Unknown version 0x0000 [ 541.596359][T11079] usb 4-1: Using ep0 maxpacket: 16 [ 541.617836][T11079] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 541.628924][ T5685] r8152-cfgselector 5-1: config 0 descriptor?? [ 541.655483][ T5685] cdc_acm 5-1:0.0: Zero length descriptor references [ 541.663055][T11079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.678654][ T5685] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 541.713676][T11079] usb 4-1: config 0 descriptor?? [ 541.713748][T15550] syzkaller0: entered promiscuous mode [ 541.734807][T11079] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 541.752537][T15550] syzkaller0: entered allmulticast mode [ 541.772014][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.806480][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.552923][ T5685] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 542.702729][ T5685] usb 6-1: Using ep0 maxpacket: 32 [ 542.733413][ T5685] usb 6-1: unable to get BOS descriptor or descriptor too short [ 542.753869][ T5685] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 542.763050][ T5685] usb 6-1: can't read configurations, error -71 [ 543.819210][ T5685] r8152-cfgselector 5-1: USB disconnect, device number 57 [ 544.089197][ T29] audit: type=1804 audit(1778933801.452:9687): pid=15586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3012" name="/newroot/584/file1" dev="fuse" ino=1 res=1 errno=0 [ 544.292694][ T5631] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 544.389691][T15590] tipc: Started in network mode [ 544.406713][T15590] tipc: Node identity 080211000001, cluster identity 4711 [ 544.428697][T15590] tipc: Enabled bearer , priority 0 [ 544.451442][T15590] tipc: Resetting bearer [ 544.467145][ T5631] usb 3-1: Using ep0 maxpacket: 16 [ 544.497067][ T5631] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 544.514067][ T5631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.533972][ T5631] usb 3-1: Product: syz [ 544.542498][ T5631] usb 3-1: Manufacturer: syz [ 544.570744][ T5631] usb 3-1: SerialNumber: syz [ 544.581575][ T5631] r8152-cfgselector 3-1: Unknown version 0x0000 [ 544.591707][T11079] gspca_sonixj: reg_w err -71 [ 544.592612][ T5631] r8152-cfgselector 3-1: config 0 descriptor?? [ 544.622971][T11079] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 544.653026][T11079] usb 4-1: USB disconnect, device number 17 [ 544.766873][T15575] syz.5.3009 (15575): drop_caches: 2 [ 544.913020][ T5685] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 545.072791][ T5685] usb 5-1: Using ep0 maxpacket: 32 [ 545.083110][ T5685] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 545.101714][ T5685] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 545.121052][ T5685] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.141541][ T5685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 545.175276][ T5685] usb 5-1: config 1 has no interface number 0 [ 545.176347][ T5723] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 545.192071][ T5685] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 545.221628][ T5685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.279661][ T5685] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 545.435982][T11079] tipc: Node number set to 134418688 [ 545.462432][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3020'. [ 546.413307][T15616] syzkaller0: entered promiscuous mode [ 546.424549][T15616] syzkaller0: entered allmulticast mode [ 546.452079][T15619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3025'. [ 546.550396][T15621] netlink: 'syz.3.3024': attribute type 2 has an invalid length. [ 546.576402][T15621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3024'. [ 546.657730][ T5685] snd_usb_pod 5-1:1.1: set_interface failed [ 546.663929][ T5685] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 546.671334][ T5685] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 546.684276][ T5685] usb 5-1: USB disconnect, device number 58 [ 547.028398][T15627] pic_ioport_write: 5 callbacks suppressed [ 547.028416][T15627] kvm: pic: single mode not supported [ 547.040797][T15627] pic_ioport_write: 3 callbacks suppressed [ 547.040807][T15627] kvm: pic: level sensitive irq not supported [ 547.054443][T15622] vlan0: entered allmulticast mode [ 547.080202][T15622] bridge0: entered allmulticast mode [ 547.088418][T15627] kvm: pic: single mode not supported [ 547.088553][T15627] kvm: pic: single mode not supported [ 547.101262][T15623] bridge0: port 1(erspan0) entered blocking state [ 547.123016][T15623] bridge0: port 1(erspan0) entered disabled state [ 547.124390][T15627] picdev_read: 30 callbacks suppressed [ 547.124403][T15627] kvm: pic: non byte read [ 547.153811][T15623] erspan0: entered allmulticast mode [ 547.166313][T15627] kvm: pic: single mode not supported [ 547.166487][T15627] kvm: pic: single mode not supported [ 547.176931][T15627] kvm: pic: non byte read [ 547.184341][T15623] erspan0: entered promiscuous mode [ 547.250475][T15627] kvm: pic: single mode not supported [ 547.250490][T15627] kvm: pic: level sensitive irq not supported [ 547.277411][T15627] kvm: pic: single mode not supported [ 547.920742][T15636] syzkaller0: entered promiscuous mode [ 547.955911][T15636] syzkaller0: entered allmulticast mode [ 548.088431][T15640] netlink: 'syz.4.3027': attribute type 4 has an invalid length. [ 548.173146][T11081] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 548.342695][T11081] usb 4-1: Using ep0 maxpacket: 16 [ 548.364490][T11081] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 548.384955][T11081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.411562][T11081] usb 4-1: Product: syz [ 548.420425][T11081] usb 4-1: Manufacturer: syz [ 548.425316][T11081] usb 4-1: SerialNumber: syz [ 548.435358][T11081] usb 4-1: config 0 descriptor?? [ 548.458432][T11081] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 548.634605][T15650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.650100][T15650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.665519][T11081] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 548.677598][T11081] visor 4-1:0.0: probe with driver visor failed with error -5 [ 548.692681][ T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 548.865193][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.878652][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 548.888168][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.901607][ T10] usb 5-1: config 0 descriptor?? [ 548.954330][T11081] usb 4-1: USB disconnect, device number 18 [ 549.358332][T15659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.385688][T15659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.482016][ T10] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 549.539748][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001A/input/input24 [ 549.637546][T15651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.820208][ T10] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 550.388976][ T29] audit: type=1326 audit(1778933807.752:9688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.398192][T15679] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3043'. [ 550.423254][ T29] audit: type=1326 audit(1778933807.752:9689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.465927][ T29] audit: type=1326 audit(1778933807.752:9690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.523423][ T29] audit: type=1326 audit(1778933807.752:9691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.561456][T15682] syzkaller0: entered promiscuous mode [ 550.576596][T15682] syzkaller0: entered allmulticast mode [ 550.605262][ T29] audit: type=1326 audit(1778933807.752:9692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.642701][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 550.657138][ T29] audit: type=1326 audit(1778933807.752:9693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.675414][T15684] netlink: 'syz.3.3045': attribute type 1 has an invalid length. [ 550.685712][ T29] audit: type=1326 audit(1778933807.752:9694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.714445][ T29] audit: type=1326 audit(1778933807.752:9695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.743122][ T29] audit: type=1326 audit(1778933807.752:9696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.769481][ T29] audit: type=1326 audit(1778933807.752:9697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.6.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6601c code=0x7ffc0000 [ 550.812751][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 550.827289][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 550.840777][T15684] 8021q: adding VLAN 0 to HW filter on device bond6 [ 550.847611][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.856714][ T10] usb 3-1: Product: syz [ 550.861859][T15685] ipvlan2: entered allmulticast mode [ 550.871496][T15685] bond6: entered allmulticast mode [ 550.891216][ T10] usb 3-1: Manufacturer: syz [ 550.899256][ T10] usb 3-1: SerialNumber: syz [ 550.904391][T15688] bond6: (slave bridge2): making interface the new active one [ 550.911933][T15688] bridge2: entered allmulticast mode [ 550.921481][T15688] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 551.172934][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 551.196985][ T10] usb 3-1: USB disconnect, device number 25 [ 551.479113][ T10] usb 5-1: USB disconnect, device number 59 [ 552.742912][T15723] syzkaller0: entered promiscuous mode [ 552.759737][T15723] syzkaller0: entered allmulticast mode [ 553.003185][T15713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.714435][ T5715] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 553.882819][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 553.898373][ T5715] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 553.914952][ T5715] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 553.936896][ T5715] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.962407][ T5715] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 553.981830][ T5715] usb 4-1: config 1 has no interface number 0 [ 553.996969][ T5715] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 554.013478][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.051804][ T5715] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 554.466170][T15735] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.755949][ T5715] snd_usb_pod 4-1:1.1: set_interface failed [ 554.771426][ T5715] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 554.786519][ T5715] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 554.807317][ T5715] usb 4-1: USB disconnect, device number 19 [ 554.881909][T15740] tipc: Enabled bearer , priority 0 [ 554.900207][T15740] syzkaller0: entered promiscuous mode [ 554.905974][T15740] syzkaller0: entered allmulticast mode [ 554.940210][T15740] tipc: Resetting bearer [ 554.953775][T15739] tipc: Resetting bearer [ 554.970930][T15739] tipc: Disabling bearer [ 555.089149][T15744] tipc: Resetting bearer [ 555.235939][T12320] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 555.248588][T12320] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 555.267915][T12320] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 555.289505][T12320] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 555.325388][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 555.356814][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 555.481506][T15750] syzkaller0: entered promiscuous mode [ 555.487318][T15750] syzkaller0: entered allmulticast mode [ 555.632250][T15746] syz.2.3062 (15746): drop_caches: 2 [ 556.004008][ T5723] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 556.162665][ T5723] usb 3-1: Using ep0 maxpacket: 16 [ 556.183667][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 556.212636][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 556.240252][ T5723] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 556.259686][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.282867][ T5723] usb 3-1: Product: syz [ 556.287077][ T5723] usb 3-1: Manufacturer: syz [ 556.291670][ T5723] usb 3-1: SerialNumber: syz [ 556.309232][ T5723] usb 3-1: config 0 descriptor?? [ 556.335966][ T5723] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 556.358532][ T5723] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 556.472734][ T5715] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 556.628057][ T5715] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 556.658673][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.674128][ T5715] usb 4-1: Product: syz [ 556.678439][ T5715] usb 4-1: Manufacturer: syz [ 556.715118][ T5715] usb 4-1: SerialNumber: syz [ 556.746153][ T5715] usb 4-1: config 0 descriptor?? [ 556.937993][ T5723] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 556.945577][ T5723] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 557.177278][ T5715] usb 4-1: Firmware: major: 0, minor: 224, hardware type: UNKNOWN (223) [ 557.389824][ T5715] usb 4-1: failed to fetch extended address, random address set [ 557.417659][ T5715] usb 4-1: atusb_probe: initialization failed, error = -524 [ 557.446942][ T5715] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 557.488926][ T5715] usb 4-1: USB disconnect, device number 20 [ 557.556755][ T5723] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 557.570835][ T5723] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 557.885581][T15793] syz.5.3078 (15793): drop_caches: 2 [ 558.202944][ T5723] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 558.264433][ T5723] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 558.294292][T15801] netlink: 'syz.3.3080': attribute type 1 has an invalid length. [ 558.391793][ T5723] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 558.398543][ T5715] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 558.413229][ T5723] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 558.425722][ T5723] usb 3-1: USB disconnect, device number 26 [ 558.473588][T15801] 8021q: adding VLAN 0 to HW filter on device bond7 [ 558.582144][T15802] vlan3: entered promiscuous mode [ 558.585152][ T5715] usb 6-1: config 0 has no interfaces? [ 558.618833][T15802] bond7: entered promiscuous mode [ 558.630210][ T5715] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 558.653080][T15802] vlan3: entered allmulticast mode [ 558.668691][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.690298][T15802] bond7: entered allmulticast mode [ 558.719031][ T5715] usb 6-1: Product: syz [ 558.736411][ T5715] usb 6-1: Manufacturer: syz [ 558.739800][T15804] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 558.769887][ T5715] usb 6-1: SerialNumber: syz [ 558.797994][ T5715] usb 6-1: config 0 descriptor?? [ 558.812322][T15804] bond7: (slave batadv1): making interface the new active one [ 558.856991][T15804] batadv1: entered promiscuous mode [ 558.872319][T15804] batadv1: entered allmulticast mode [ 558.891349][T15804] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 559.098211][ T5715] usb 6-1: USB disconnect, device number 58 [ 559.288731][T15808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.317711][T15808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.433211][T12320] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.447158][T12320] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.496870][T15818] syzkaller0: entered promiscuous mode [ 559.502351][T15818] syzkaller0: entered allmulticast mode [ 559.510162][T12320] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.593670][ T5723] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 559.686981][T15820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.725419][T15820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.782777][ T5723] usb 5-1: Using ep0 maxpacket: 32 [ 559.799668][ T5723] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 559.809219][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.841908][ T5723] usb 5-1: config 0 descriptor?? [ 559.864501][ T5723] as10x_usb: device has been detected [ 559.876777][ T5723] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 559.917715][ T5723] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 559.944096][ T5723] as10x_usb: error during firmware upload part1 [ 559.951240][ T5723] Registered device nBox DVB-T Dongle [ 560.129871][T15826] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 560.156970][ T5701] usb 5-1: USB disconnect, device number 60 [ 560.180514][T15826] kvm: pic: level sensitive irq not supported [ 560.180593][T15826] kvm: pic: non byte read [ 560.196047][T15826] kvm: pic: level sensitive irq not supported [ 560.198839][T15826] kvm: pic: non byte read [ 560.209348][ T5701] Unregistered device nBox DVB-T Dongle [ 560.214583][T15826] kvm: pic: level sensitive irq not supported [ 560.220200][T15826] kvm: pic: non byte read [ 560.226944][ T5701] as10x_usb: device has been disconnected [ 560.280124][T15826] kvm: pic: level sensitive irq not supported [ 560.280189][T15826] kvm: pic: non byte read [ 561.798853][T15863] netlink: 'syz.4.3096': attribute type 1 has an invalid length. [ 561.874859][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3096'. [ 562.824715][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.831065][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.854845][T15863] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 563.061672][T15872] tipc: Enabling of bearer rejected, already enabled [ 563.165602][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3099'. [ 563.188137][T15873] openvswitch: netlink: Actions may not be safe on all matching packets [ 563.602651][ T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 563.602894][ T5701] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 563.614481][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 563.614496][ T29] audit: type=1800 audit(1778933820.972:9793): pid=15883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3102" name="file0" dev="tmpfs" ino=3517 res=0 errno=0 [ 563.826262][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 563.840648][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.860400][ T5701] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.885425][ T5701] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 563.902811][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 563.918666][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.936030][ T5701] usb 4-1: Product: syz [ 563.943591][ T10] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 563.950468][ T5701] usb 4-1: Manufacturer: syz [ 563.961039][ T5701] usb 4-1: SerialNumber: syz [ 563.977272][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.983655][ T5701] usb 4-1: config 0 descriptor?? [ 564.017474][ T10] usb 5-1: config 0 descriptor?? [ 564.045190][ T10] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 564.226360][T15890] dtv5100: wlen = 0, aborting. [ 564.244045][T15890] ------------[ cut here ]------------ [ 564.249595][T15890] usb 7-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType c0 [ 564.258501][T15890] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.3.3103/15890 [ 564.269831][T15890] Modules linked in: [ 564.274040][T15890] CPU: 0 UID: 0 PID: 15890 Comm: syz.3.3103 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.285151][T15890] Tainted: [L]=SOFTLOCKUP [ 564.289513][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.299814][T15890] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 564.305594][T15890] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 564.305639][ T5701] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 564.332947][T15890] RSP: 0018:ffffc9000cc176c8 EFLAGS: 00010246 [ 564.339063][T15890] RAX: 0000000000000000 RBX: ffff8880579d0f00 RCX: 0000000080000280 [ 564.347340][T15890] RDX: ffff8880582ac8e0 RSI: ffffffff8c809320 RDI: ffffffff903e2f90 [ 564.355422][T15890] RBP: 1ffff1100fbc83bc R08: 00000000000000c0 R09: 0000000000000000 [ 564.363510][T15890] R10: ffffc9000cc177c0 R11: fffff52001982f04 R12: ffff8880572ca100 [ 564.370672][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3103'. [ 564.373199][T15890] R13: ffff88807de41de0 R14: 0000000080000280 R15: ffff8880582ac8e0 [ 564.388427][T15890] FS: 0000000000000000(0000) GS:ffff88812528a000(0063) knlGS:00000000f543db40 [ 564.397419][T15890] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 564.404057][T15890] CR2: 000000003381bff8 CR3: 000000009bc92000 CR4: 00000000003526f0 [ 564.404150][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3103'. [ 564.412036][T15890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000000004a0 [ 564.412051][T15890] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 564.412063][T15890] Call Trace: [ 564.440344][T15890] [ 564.443448][T15890] ? __init_swait_queue_head+0xa9/0x150 [ 564.449120][T15890] usb_start_wait_urb+0x13f/0x5b0 [ 564.454230][T15890] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 564.459811][T15890] usb_control_msg+0x234/0x3e0 [ 564.464646][T15890] dtv5100_i2c_msg+0x231/0x2f0 [ 564.469524][T15890] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 564.474443][T15890] __i2c_transfer+0x79a/0x1f70 [ 564.479254][T15890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.485178][T15890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.491011][T15890] ? i2c_transfer+0xc8/0x2d0 [ 564.495676][T15890] i2c_transfer+0x1cc/0x2d0 [ 564.500196][T15890] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 564.505918][T15890] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 564.512078][T15890] ? _copy_from_user+0x94/0xb0 [ 564.517033][T15890] i2cdev_write+0x113/0x1e0 [ 564.521629][T15890] vfs_writev+0x4bd/0x990 [ 564.522671][ T5701] usb 6-1: Using ep0 maxpacket: 8 [ 564.526061][T15890] ? __pfx_i2cdev_write+0x10/0x10 [ 564.534333][ T5701] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 564.536062][T15890] ? __pfx_vfs_writev+0x10/0x10 [ 564.549020][T15890] ? __fget_files+0x2a/0x420 [ 564.553699][T15890] ? __fget_files+0x3a0/0x420 [ 564.558389][T15890] ? __fget_files+0x2a/0x420 [ 564.563046][T15890] do_writev+0x154/0x2e0 [ 564.567311][T15890] ? __pfx_do_writev+0x10/0x10 [ 564.569604][ T5701] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 564.572116][T15890] __do_fast_syscall_32+0x229/0x6e0 [ 564.572142][T15890] ? do_fast_syscall_32+0x33/0x70 [ 564.572158][T15890] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.572178][T15890] ? asm_int80_emulation+0x1a/0x20 [ 564.572231][T15890] ? do_int80_emulation+0x286/0x530 [ 564.572247][T15890] ? trace_irq_disable+0x3b/0x140 [ 564.572275][T15890] do_fast_syscall_32+0x33/0x70 [ 564.572294][T15890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.572315][T15890] RIP: 0023:0xf704f01c [ 564.572341][T15890] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 564.572356][T15890] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 564.572377][T15890] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 564.572391][T15890] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.572401][T15890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.572411][T15890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.572422][T15890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.584053][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.586771][T15890] [ 564.591820][ T5701] usb 6-1: Product: syz [ 564.596978][T15890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 564.596997][T15890] CPU: 0 UID: 0 PID: 15890 Comm: syz.3.3103 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.597019][T15890] Tainted: [L]=SOFTLOCKUP [ 564.597025][T15890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 564.597034][T15890] Call Trace: [ 564.597041][T15890] [ 564.597049][T15890] vpanic+0x56c/0xa60 [ 564.597099][T15890] ? __pfx__printk+0x10/0x10 [ 564.597121][T15890] ? __pfx_vpanic+0x10/0x10 [ 564.597137][T15890] ? is_bpf_text_address+0x292/0x2b0 [ 564.597154][T15890] ? is_bpf_text_address+0x26/0x2b0 [ 564.597178][T15890] panic+0xc5/0xd0 [ 564.597196][T15890] ? __pfx_panic+0x10/0x10 [ 564.597232][T15890] __warn+0x315/0x4c0 [ 564.597249][T15890] ? usb_submit_urb+0x1053/0x18b0 [ 564.597268][T15890] ? usb_submit_urb+0x1053/0x18b0 [ 564.597287][T15890] __report_bug+0x29a/0x540 [ 564.597400][T15890] ? usb_submit_urb+0x1053/0x18b0 [ 564.597418][T15890] ? __pfx___report_bug+0x10/0x10 [ 564.597446][T15890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.597468][T15890] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.597491][T15890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.597511][T15890] ? stack_depot_save_flags+0x3f3/0x810 [ 564.597572][T15890] report_bug_entry+0x19a/0x290 [ 564.597595][T15890] ? usb_submit_urb+0x1115/0x18b0 [ 564.597618][T15890] ? usb_submit_urb+0x111a/0x18b0 [ 564.597634][T15890] handle_bug+0xce/0x200 [ 564.597652][T15890] exc_invalid_op+0x1a/0x50 [ 564.597669][T15890] asm_exc_invalid_op+0x1a/0x20 [ 564.597685][T15890] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 564.597702][T15890] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 564.597717][T15890] RSP: 0018:ffffc9000cc176c8 EFLAGS: 00010246 [ 564.597734][T15890] RAX: 0000000000000000 RBX: ffff8880579d0f00 RCX: 0000000080000280 [ 564.597746][T15890] RDX: ffff8880582ac8e0 RSI: ffffffff8c809320 RDI: ffffffff903e2f90 [ 564.597758][T15890] RBP: 1ffff1100fbc83bc R08: 00000000000000c0 R09: 0000000000000000 [ 564.597770][T15890] R10: ffffc9000cc177c0 R11: fffff52001982f04 R12: ffff8880572ca100 [ 564.597782][T15890] R13: ffff88807de41de0 R14: 0000000080000280 R15: ffff8880582ac8e0 [ 564.597808][T15890] ? usb_submit_urb+0x10a4/0x18b0 [ 564.597830][T15890] ? __init_swait_queue_head+0xa9/0x150 [ 564.597857][T15890] usb_start_wait_urb+0x13f/0x5b0 [ 564.597881][T15890] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 564.597918][T15890] usb_control_msg+0x234/0x3e0 [ 564.597942][T15890] dtv5100_i2c_msg+0x231/0x2f0 [ 564.597975][T15890] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 564.598008][T15890] __i2c_transfer+0x79a/0x1f70 [ 564.598028][T15890] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.598052][T15890] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 564.598074][T15890] ? i2c_transfer+0xc8/0x2d0 [ 564.598093][T15890] i2c_transfer+0x1cc/0x2d0 [ 564.598111][T15890] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 564.598131][T15890] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 564.598152][T15890] ? _copy_from_user+0x94/0xb0 [ 564.598179][T15890] i2cdev_write+0x113/0x1e0 [ 564.598199][T15890] vfs_writev+0x4bd/0x990 [ 564.598219][T15890] ? __pfx_i2cdev_write+0x10/0x10 [ 564.598239][T15890] ? __pfx_vfs_writev+0x10/0x10 [ 564.598271][T15890] ? __fget_files+0x2a/0x420 [ 564.598295][T15890] ? __fget_files+0x3a0/0x420 [ 564.598312][T15890] ? __fget_files+0x2a/0x420 [ 564.598339][T15890] do_writev+0x154/0x2e0 [ 564.598360][T15890] ? __pfx_do_writev+0x10/0x10 [ 564.598387][T15890] __do_fast_syscall_32+0x229/0x6e0 [ 564.598404][T15890] ? do_fast_syscall_32+0x33/0x70 [ 564.598418][T15890] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.598439][T15890] ? asm_int80_emulation+0x1a/0x20 [ 564.598454][T15890] ? do_int80_emulation+0x286/0x530 [ 564.598469][T15890] ? trace_irq_disable+0x3b/0x140 [ 564.598495][T15890] do_fast_syscall_32+0x33/0x70 [ 564.598511][T15890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 564.598529][T15890] RIP: 0023:0xf704f01c [ 564.598544][T15890] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 564.598557][T15890] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 564.598573][T15890] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080 [ 564.598584][T15890] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 564.598595][T15890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.598610][T15890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.598621][T15890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.598646][T15890] [ 564.603047][T15890] Kernel Offset: disabled