last executing test programs: 34m28.022070877s ago: executing program 32 (id=505): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) io_setup(0x3, &(0x7f0000000040)) socket$phonet(0x23, 0x2, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="9f0910bc996c301c8107070400", 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0), 0x20, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x4, 0x0, 0xffffffffffffffff, 0xf9ffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = fcntl$dupfd(r3, 0x0, r4) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x11, 0x10, 0x0, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000340), 0x9, 0x40000) eventfd2(0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000040)={0x4}) r7 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x100000000000f7) socket$nl_sock_diag(0x10, 0x3, 0x4) 33m38.01657485s ago: executing program 33 (id=586): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 32m33.690709308s ago: executing program 34 (id=697): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x6) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xa684, 0x1, 0x2}, 0x18, 0x1) landlock_restrict_self(r4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"}) 27m44.383910586s ago: executing program 35 (id=1253): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x688c4) 23m25.557547835s ago: executing program 36 (id=1759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000800003b810000850000c306a09f6130efa0005000000095", @ANYRES8, @ANYRESHEX=0x0, @ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 23m22.733570622s ago: executing program 37 (id=1771): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) 23m16.826021347s ago: executing program 38 (id=1783): socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r4) fcntl$setstatus(r3, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r5 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x5000) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000001280), 0x0, 0x0, 0x0, '\x00', 0x1ffffffffffffd64, 0x20}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x55) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r7, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) 22m6.676133374s ago: executing program 39 (id=1892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, 0x0, 0x20000044) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) shutdown(r3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 21m58.655647696s ago: executing program 40 (id=1906): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1f, @rand_addr=0x64010102}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @private}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = epoll_create1(0x80000) syz_genetlink_get_family_id$ipvs(0x0, r1) epoll_wait(r2, 0x0, 0x0, 0x200) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_setup(0x1fc3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) shutdown(r0, 0x1) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 21m57.044812991s ago: executing program 41 (id=1879): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x5b76f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 21m26.208657925s ago: executing program 9 (id=1955): r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x2a00, 0x5, 0x58, 0xa, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "3cb224ee", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(0x0, 0x0, 0xa0880) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x6, 0x3, 0x6, 0xfffffffa, 0x3, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x4, 0x0, 0x0, 0xfd, 0x1, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 21m26.0829386s ago: executing program 9 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r7, &(0x7f0000000400)={[], 0x23}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r10}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r10, &(0x7f0000000880)}, 0x20) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/15) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x9, 0x11, 0x2}) 21m24.172337068s ago: executing program 9 (id=1960): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x2, 0x0) futex(&(0x7f0000001240)=0x3, 0x5, 0xffff7ffc, 0x0, &(0x7f0000001200)=0x3, 0x85000000) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0xff) r6 = dup2(r5, r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x58, 0x0, 0x1, 0x70bd24, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "508ac195ffda62d1c0c8734951cc4a1d977458ffe8"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[], 0x0) 21m22.431233625s ago: executing program 9 (id=1963): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) close_range(r0, 0xffffffffffffffff, 0x0) 21m22.194208168s ago: executing program 9 (id=1964): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0xfefd, 0xd15, 0x3925, 0x8, 0x9, "8bdffb70f0ffffff"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x101) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 21m20.424642236s ago: executing program 9 (id=1965): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = open(0x0, 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 21m19.880374174s ago: executing program 42 (id=1965): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = open(0x0, 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 21m17.430203742s ago: executing program 2 (id=1909): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000b80), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 21m12.333049419s ago: executing program 2 (id=1982): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 21m11.359326143s ago: executing program 2 (id=1983): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 21m10.117551728s ago: executing program 2 (id=1984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x2c, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}}, 0x0) 21m9.823671543s ago: executing program 2 (id=1986): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount$9p_virtio(0x0, 0x0, 0x0, 0x40800, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x59, 0xf1, 0x10, 0x582, 0xe6, 0x4e06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xe2, 0xb2}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0xe}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 21m6.640633511s ago: executing program 2 (id=1991): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @remote}, &(0x7f0000000300)=0xc) 20m50.518226906s ago: executing program 43 (id=1991): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@multicast1, @remote}, &(0x7f0000000300)=0xc) 19m52.793651156s ago: executing program 6 (id=2135): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 19m50.576292361s ago: executing program 6 (id=2137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x13}, 0xffffff7f}, 0x1c) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0xe, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40080) 19m47.885749141s ago: executing program 6 (id=2140): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 19m46.802321522s ago: executing program 6 (id=2143): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m42.644754845s ago: executing program 6 (id=2148): socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x6, 0x7, 0x6, 0x5, 0x3}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000007000000000001"], 0x50) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x800) 19m42.095611428s ago: executing program 6 (id=2152): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='f2fs_destroy_extent_tree\x00', r0}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ac0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) unshare(0x64000600) 19m26.992700812s ago: executing program 44 (id=2152): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='f2fs_destroy_extent_tree\x00', r0}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000ac0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000980)=0x1) unshare(0x64000600) 4m22.142436262s ago: executing program 7 (id=6174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa431d3b2b903424e0287195edebb8ac61ba7cb532e038d77ba3bb0ada15eab688406bbabb2780661240323bbdd1372920cbd9ac57efac73f30359e59f78474ae7f59f195c829657bdd22a", 0x4b, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000700)="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", 0xcfc, 0x800, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 4m20.746361358s ago: executing program 7 (id=6188): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000740)="6fd92f5c3fbecb0c72abdb6e3b92", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4m20.428453687s ago: executing program 7 (id=6193): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) pipe2$9p(&(0x7f00000001c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 4m20.254813496s ago: executing program 7 (id=6196): mkdir(&(0x7f00000013c0)='./file0\x00', 0x36) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) 4m20.211813178s ago: executing program 1 (id=6197): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x54, 0x30, 0x25, 0x0, 0x0, {}, [{0x40, 0x1, [@m_pedit={0x3c, 0x1, 0x0, 0x0, {{0xa}, {0x10, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003", @ANYRES32], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m20.077772462s ago: executing program 7 (id=6198): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) sendto$inet6(r0, &(0x7f0000000480)="aa431d3b2b903424e0287195edebb8ac61ba7cb532e038d77ba3bb0ada15eab688406bbabb2780661240323bbdd1372920cbd9ac57efac73f30359e59f78474ae7f59f195c829657bdd22a", 0x4b, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) sendto$inet6(r0, &(0x7f0000000700)="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", 0xcfc, 0x800, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 4m19.965201289s ago: executing program 1 (id=6201): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="62031400d755af176510120800afbcf72fe12b7f96e5521c8cf217", 0x1b}, {&(0x7f00000013c0)="fd82e7d0646ab754f67cf9d30b3b7fb2c9eb9dc6dc3e2a72eff400928347227cbe7eec20f01229d2fbfba272677c31ff2e4c1bf6e177d259f5a2f2a0c769e12797251e54b75393c953d9a5585d352a8b36772c20dce82b242a10d456f3fa752fe060417ed38e86dd41a174ea508d7ad72a7c3ee380840637ec5b9bca2e170b3d12be08d2c7c33381f21ff6eebfb6f1d20a1c0d3f616591ec00f893954c015e104c1f80fa0994bf259222fec0c9f1b99d8522f62000dd64313cccf41031dafd3abc462bbce5080f12a89ab4b391a741c5a0c495737302514da19bb60017fd74c82694547a3f6775d92cce25f447bdce7f94fd60987c08e3f7c8c8d417b49e7758c6bdc81d594e83012c9799c7ade20ee79d0afccb24fd3a0fa00eb17a96d67e31cebb48e1e5a4d26bc3c9fcdbf246c71f316fc7ebf508b4dd3222e0c0dde45a18b6b70fc3648d1123a358d5d7ccebc1cce0e6f9f4395cd75add251dae49027ed4be662055f073634ba0022a712d5e929fa121da03a40bc20bf152db09c031efca916650c6a7b0b3e29523a1aa6b21366af10d6738b254a6d1c32686deef2e7c007cec693064bb429e5f2c9313403e4b5e300e10d545059647bfb94f183ebe471ff4ab8d83502e438e6ded6c5f0c73716ff95f28e86f47acc1f8eb547c77b6e38d9f72efdc7f80b718fa55450d2f0ef2ad1fa28cec7446ec258ae9bdf5b33a639d8a6d4f98e1b9742da68a9128a3eb84a30b40de5047239f1bfbaf91bfcd1a32a66b9c901ff511c6a401daf0acc7219529622fbc26a181b8996c927d04926d89ee56bdf01caf5c0fe4b64c0e6381103c150233b20837409384d4f0c954b121adbf4ec8b75d5ff0b0ced6d7f929e9c8b548c05b2dfd931ae5533fa195adb94fdb511e8e41cb15cedebe0693c44285f2301d17ac5d323d7a09a98487c369144c48ce9010611f8b451ef9ab697ee41319bab277a80c461990df6daf3482870db56d2bbf728de463cbe3d7e934a4a0a6b896729b328f0e0857652fea08b79b7618b1842e0232f0aca2c89fe0efda13326988eda9acb15041116cb7118dea910f8e1e3ecda09d9681336c7f4889aa86e66cd7e9c0818d507546eab1fa9b9ac303a12541ea37fcc459563548b5af6222670fdfd26b01100322465e6740b7da08aa3be9bcbdb7a9fb8e175ae4679186c5c161ed1decb7566c249354d8ac8a63c302f86903d2ca500c56bb42c01b6db87636bf094bc94b94dc5b99ff51dc88518f0068fa8303093c12a26586a91d3c7c88f4816e0cc1e57936d4c9ab10e0e753a126e00ae6d52670c1bf4f9dad01595e9055d51929b589049b7b639ffc1fc918c7e792ee781997fdfdb97cdb8070d9a6afe5a0540e4d9a7632f026d7d429c43e64d1958327d8ecf936bebb39fb538cb323bdac82a391953ae44553748cc567cdc942af6904d913dd150c83afcce3a4a12acf5aec4f4ddd75e29c177a2b3998a2e8442d8ccc944d04de7eb9d5579f66faa63774101fa1131f6c0b05182e330a2bd9d94a9c7f455add8f83d95e59bc85c50a169ce9095f4aa31d417a3ce5ce24863aff25fe778a3b50372599c1fb623eb307ae879c7443b11a9830f6d63d6fad2d8591696575e75a6b89ee213e012bcd3518b196925cb2bf30de935afef33c9b400ff67d6fc5cab1012993e3ae625def4bd5b163f60c19882fa70253d3719dcaad0fb2039568f16ce6638b2c3176d319f202909ddaaed3469590179fd01b2105875fffc1f2729c8e658c00cee4de67ee07c35702b39ad3351e37b0c864be8216f6c76f067b12b3f3b5c629634d1ff6444ce1e2fd61e0ade659f6a5ecf15e00662bafdf3d86acc2dac2d8ae7fef645fdd3848a1dba027fe235b0d35e4e9bf5f570171bfe9f83e22d303cc0ed4a5f91d0d1e5e436138462bf6ab1ea0f09070e7a617d59835dbb6a9fce02450adf9846f78ab6da6d70ebef9188cc57d104abb96fd02b6a8d4c986ac3f7573ef653f8cedd1d09495713bd076f85e8ecf4d887fb905d6df549b524f135bbbbef5ee3f6585c3600270e39a5c7c201e26bce7bc5aedc0b34dce1a66c9d76a9486624513efde5540e4cfbb4e5eb3864941fd8b7e0efe24a9f36a8a21deb7105837f69e49ee579e8e7be16ecdb35716c53956acdfc5c5bb8f2ea461e888c144f7de864d756618e1a64b9d882f309bb78e3129c95f6de90e0b3474d0757b78aae31373816c6138a7161150344bd446390db2fe865419289d420add24027814f85919c86fdf3c4c127abe1e418c8ad45db7481f83606a60ebd7610dac661259090bb7a250bd741489d1e62f858528941edf7d3ccbd9321c1161f09b33a3a30bfef70b7f5267ea2191a4392bb9f46a99cbab81790794729618aba9df31f0812b5388e1672ea745057f10ec7c3da4b19ab779fc3831d40d8a0bfd60276e5b2597cc5844bf7de31f99a0c862d56a8fa97af203c57c3983829c0bdbd24d353136b81f0f38623c8da9dc333d5a89fce7d39de7eeec92f591858998ad84f9513398645940581d040f3cb4109141919a6e0210f0ecf9315abe1330c6f1584e32f0219c821b1a5e5b3f3386dc109cd14e7f49c10d3bfbb2449c8e66bf0715d242a6e862acc50e80e265bc072f61990c90bfd6ae322f0ae22d2d625342dae9c499543f7d8923e1ab6ca257aeadccb95e6f8c13f8b3ffb1a393afbeda4038b024b632470356f78efc2c2f3910555902cb3b5aa2c6660b2cef6812c6412302632223f8163d9d98ba551e00b180b477ee0a18771c77d67228d2f89e8eeb1c54a92257f44eae7bdcc9aa32b643863579a437362c543e2492d5540a39791c9b5671369ef13be9f066f22abbc670546ca070438905a72e17addf85ebbb46afb21391f5dc4cfa2f58a5e3dbd15b1648ea9a1d6794adb0b98380fc40da5ffcfd675e5f5cf764456da5764f3e45499d6871aac0149d91a4a7e6c419a6dc693e572fcf7b26f22c37591a453299fc32f42df43be884a0f5feff28e61bbb5fa82a77975d06faf519811aa511b65757944543f98d7771f4c9eff70bbb4daa0bd98b66bae1418ad3ea05bedcc6723210f4e765f15288e46f8a79811108f515504558d7525f3727ceb36e9a2080d49bcfa45ed9bbe221a4afaecc73f5e5b73db689619c5716849b712ad125838e15798f6db318bc03842fa780886d8ef818948365d255e72614d7dad93852352f1128bbf45b0bc0d4812a2b088a079572dffabf2e5d8900167fa1330a31fbb6f9150d2d30c0c6bf9e8fce9a8ee7b2a855de15afdfe522454bc28cc3b9457d11c7407a23f9f89cc5c934c9eca1df37706af388c2c7e6a94443f8f546d34ac3b71e275533854572958a59780dc6ca1e4706d7272b81bc8cda793439b7395a583f800320ca9c5c3b08d8efa169f82971079f4210166ac40b3552dcaa62166672132619a8ea3e60687656b38f091dab13fad779b6ce9e5ba76c0725ca8b58ed25461f89d87a0c4c8738ec6cc8e7a462a1ca2a6202c931f8a0b3a4a7baf8ee2b5697d69124e00e380f691174f327852384243431a8294e48f4506d273a61ef84de641df545c4bd7627aeeaf14f327da09f5d621e7a3b82357f0d23f7a5234146289f4fc7fefb70af1201ef2198194f82076edfcb0dacbb1cdc1a69c0e7c2e83c628e720011cbf3651b9bea82f8b917f8690fe71b4ab49d1593f33600d2ba288acf9d6395af4f321c534ab48681fbee01617196a412107a34f785267f35c508f623c42be2a88242caa727f8e1c8e668f2ddd83cc1dd7fc699c49a6734e605ae65cfe856de885ab4d335b6f567793b06be4d362cccf51128969037f27ca5bc4076c6582c7076e9c3cb50e2548bc6c08a58150b62dae980a584e4e53fe662e168bf08b28082ba960f75f22e2b169c84e8e53712e4809dfe6c74f2f1aa9b48de2d43ff4b9766419d10b33947d95297c5da7095e75a32468a1c94c887e611bf03a117c01f32fded1f995cf1612fc8a653f0b53b0d578d7e875d0d0728858a92c2ea75059683595b7b60d4d9df9e9868684b56cb5ba70784779e484d41afc15dd2f16a2d982110d63f0fa8d66874612bdb45301f427d5e54deacbc1c69c956ba8c2ce9b85a86a4d143d140f49615f51ac3acba9e78a3419188676410f2e984a4822be504a418b7e5d677635f8ece312188e4e6d539dbdfa04f415d1778aeebae4c85ca756b5d81ff7b579a2c1a916b8a6c875fbecc2f539cf7a650a6c9168e43ff1ae298960f82a486dde18dbcd4e04f5a0bd9c6a7f59099255a1baa450bd578b3ea5af95d2c8c6bdc5ed4eb49a43aa56589403dd7c54e35e0f9b820406ca4ddefb200b7b47133ad52d7a4cdb4f4aff8646542e1eb8234c71f173a0f9509e9c1957f474c119f7b6d8cc06c77189c79b117e66f9a39c72b82a9c354244606d9fa57ed2abae850eccb41edc5f73833fff3da7290c88fb79b4b59758eb6fa601a846d216dd06f0a7b59c48dbebd0b8b62700a0e3457982594508d5fae5b5e57fcb803000f491178b50c85ed8300fa75e23dbb7a95f5ebc0636b82ec0a56958ea1eb4912b48339ce8b2ed26c94a7ccff30e69c4ee63b0c106f927ab04f20529ac6309262aa24eaafd8d5dec14d779eabdf75abf2f8bbd457ec016b1fa27bf5f1bbe5febfdac21d867deb4df88fd1a0ad84107f7137912529229e9372ee0cddc64af7e5dc4f9869473b38f9ac4a9a74cc33646848c70b198f5bb352d7bb890c9b569060246df5616e3ccad69409693baca56daa7bb65931923c7ad901b35d21b4e558df5be5bb32a009c9935dfc9bfe989e9ed5c88211151b9677e8d5b64ddd49f30295f232b0fa8da5bbe4b566f0e5c2066e74225d7a27fc8803b6d295e743951d245b7f13cadaf1810fb161388ef9f6bf650359cb6bf118fc2cabcd3bc5b0bcd2b42f26a82d17fb96a37b2bc273cbf7ba7c307932f601972269db8f89fe7122babc13860740c2b0e1b364bba5e63548b48add4d0123c72b41603d42d24060234f62a190f79cd38c3dc379ce7f304a261243cae495149dfc26cd2cab1008808b5bd1954ae7a3eea7299df62e9f089d4950b67e459b1cc7bde433de495214b0030f337f4ae05e1a9c33e1913364785eecebb09c3aeb15ebf2076124f13f4e741025595805741385bdfd18d8aeecfc025c594be11f99bc8180d6eac34b7d3d08a2768d50d57f378348c8e94e8ca36b418c425767d8d31e322e55c4d21fc5fcf9cf849cedbb6f6f1aa36915c42349ad84bc47350bcb1a4d9206732ad305867f95d2f117522d13b4bcdee43e1970c473f8afb0ad26c0ee38e5b346f01909e1bdd3e57b279d9e49a1007df0e7f69a4c9489d393c4cb48de9f6657016f121216033d3200b78aed96129c7c38c64ec043ccb543610bdc3686e25c37f8bfb0842415bfeb125c567e68cee2282bf93ac153dc08b072f7207c85f4b35e39a44e454ef1a36379e318296986cba092c2f52cc0f1", 0xf29}], 0x2}, 0x4084) 4m19.758232993s ago: executing program 1 (id=6204): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 4m19.619770225s ago: executing program 7 (id=6206): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m19.515826144s ago: executing program 1 (id=6208): mkdir(&(0x7f00000013c0)='./file0\x00', 0x36) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x389380a, 0x0) 4m18.917618215s ago: executing program 45 (id=6206): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000004c0)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x262659b}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m18.910308112s ago: executing program 1 (id=6211): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0005"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x54, 0x30, 0x25, 0x0, 0x0, {}, [{0x40, 0x1, [@m_pedit={0x3c, 0x1, 0x0, 0x0, {{0xa}, {0x10, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x54}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYBLOB="0100000000000000000044000000080003", @ANYRES32], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m18.817968206s ago: executing program 1 (id=6213): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x62, 0x9, 0x71, 0x20, 0xcf3, 0x9271, 0x4b59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x29, 0x20, 0x69, [{{0x9, 0x4, 0x2f, 0x4, 0x1, 0xb0, 0xb4, 0xd, 0xbf, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x0, 0x2}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 4m18.177498492s ago: executing program 46 (id=6213): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)={{0x12, 0x1, 0x250, 0x62, 0x9, 0x71, 0x20, 0xcf3, 0x9271, 0x4b59, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x29, 0x20, 0x69, [{{0x9, 0x4, 0x2f, 0x4, 0x1, 0xb0, 0xb4, 0xd, 0xbf, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x0, 0x2}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 11.903729574s ago: executing program 5 (id=7277): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.476533169s ago: executing program 5 (id=7279): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) openat$binderfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000680)) 11.306440736s ago: executing program 8 (id=7282): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "a97c8057af8f8801", "b260d8ce6f00f2a9ce55a548b42ce4815d54c5952710bfdcfb9cab032a4e6f91", '\x00', "d9c7baff9781be89"}, 0x38) 11.072475058s ago: executing program 8 (id=7283): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000090203010902120001000000000904000000ff"], 0x0) unshare(0x28000600) r1 = open(&(0x7f0000000180)='./file1\x00', 0x80242, 0x0) lseek(r1, 0x8, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file1\x00', 0x42000, 0x18) r3 = syz_open_dev$I2C(&(0x7f0000000200), 0x100, 0x8200) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000600)={&(0x7f0000000280)=[{0x404, 0x2000, 0x76, &(0x7f0000000300)="984d564908d7142adf654d7345f957cf75cb7afdd01635f2598f450e0c3fcc97fb4904ce5463f2aab60ca1be35c2fb11d3dc848105d1ae747fd13e9fce10ed8f33af9d6ab062c3126ec9ff434325ee08bbb9a8a0994f19841463ab8cd1553a7efc6d3a6b7273703d58b005588360f804210d908216a9"}, {0xfff, 0x4e10, 0x0, &(0x7f0000000540)}], 0x2}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000000c0)={0x0, 0xa, 0x61, "ad8e3d997e912cbe3b98df959a79db6c9fa11928ed68261c8acdefe4d7bbd99aea78f16d8755735fd900b77842392762c074ea1e3bd3f8d06492ff9b37478de25133c68e34cf5ffcbd0e086c6f8d8bbede9910cead6f4260dc7623249765ef569a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x16, '\x00', @b}) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x80284504, &(0x7f0000000000)=""/56) openat$procfs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x66, &(0x7f0000000040)=""/102) 9.572876937s ago: executing program 5 (id=7286): socket$inet(0x2, 0x3, 0x2) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) syz_emit_ethernet(0x230, &(0x7f0000000000)={@random="9a70b05e7d2c", @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1fa, 0x0, 0x0, @private2, @local, {[], "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"}}}}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c24020800010300", @ANYRES8, @ANYRES16=r0], 0x0) 9.366735341s ago: executing program 8 (id=7288): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000780)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x2, "ca5f"}, 0x0}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) inotify_init() setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x1, 0x401, 0xb3d9, 0xfffffffe}, 0x10) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000040)={0x80000000}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad44b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3a10bd003aba0c70263374ca4f416f5d18981914c267c251065eb0744c", 0x1d}, {&(0x7f0000000280)="76280142607284a333b093686e7bbaae48463fd2a9918d65510292e733141add2bdec8d6ae31a588713741cd39cd16fd5e2136303b4cb2bd89583cd9480dcfffbb81660b9a18ef693dfdf16a43b6d3b3666a96b6e16fc461337ee8af742ef30025990d03c4d7e8577b84c2a56238fd6b6b26696e3ee26408a138d798a882fbe8cfe9eefebd01db2ae7c1b8", 0x8b}, {&(0x7f0000000040)="b4fd46d14b8ee98ca8777db9249ad8af49877db1ca407252225d1a0710ee93c2714d2907190739d9513db73b05425b9ddf4e9dfeb507eaf070e439", 0x3b}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb"], 0x60}], 0x1, 0x8001) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0) 8.691143771s ago: executing program 3 (id=7293): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000600)={@private2, 0x0, 0x0, 0xff, 0x1}, 0x20) close(r0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r3 = syz_io_uring_setup(0x6c7f, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r6}}) syz_io_uring_submit(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4138ae84, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 8.204614992s ago: executing program 5 (id=7294): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000cc0)=0x10001, 0x4) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x2, &(0x7f00000001c0)) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f010000000000000000000905810340000000000905820200000000000905030240"], 0x0) 7.876838033s ago: executing program 3 (id=7295): write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x300000b, 0x11, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.706630803s ago: executing program 3 (id=7296): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000007cc0)={0x14, 0x6a, 0x15, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, 0x0, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911076000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4261, &(0x7f0000000180)={0x0, 0xc7c9, 0x400, 0x2, 0x212, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000300)=0x9, 0x0, 0x4) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500a5c500", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000340)=0x2, 0x4) 6.740818287s ago: executing program 0 (id=7298): syz_open_dev$media(0x0, 0x0, 0x101d01) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x790, 0xa, 0x40, 0xc976, 0x6], 0xb14d876abace8d5c, 0x20200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.431384036s ago: executing program 5 (id=7299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 6.262702684s ago: executing program 8 (id=7300): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r2, 0xc0045103, 0x0) 6.173504169s ago: executing program 0 (id=7301): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffc}, 0x1c) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1}, 0x40000112) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 6.096361581s ago: executing program 5 (id=7302): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='pim6reg\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0x6, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x8c}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setitimer(0x1, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x51, 0x208000) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000200)={r6, 0x4, {0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x2, 0xd, 0x8, "d19c4c1de355cbe2feca73e624184151b68f782802f78f76943dd8c9c31e22b04259de8571c3450bb8d1573272731492b2113d3300c62f3cc53400891356cd32", "3203e14976296727149149f42f131dcb7c2013c3be590021000bd45932e8e4a10cebeb3f164b27238efe24af86ee3fc9a00e22f2dc4f874810e144568338f480", "be7938cb7a28995aad60aa9a0c51d2974a80d15127a72503a772447664470897", [0xc, 0x3]}}) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b02, 0x0) 5.596794869s ago: executing program 0 (id=7303): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x1010, r3, 0xbcdb5000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_submit(r2, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x3511, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000440)={0x20, 0x0, 0x3, "4d6fbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.436651642s ago: executing program 8 (id=7305): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010101, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x62ea0000}}}}}, 0x0) 4.200669988s ago: executing program 8 (id=7306): r0 = syz_usb_connect$printer(0x2, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@broadcast, @broadcast, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0xab, 'H', "cc3ae4", 0x1a}}}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$int_in(r3, 0x5421, 0x0) write$char_usb(r3, &(0x7f0000001680)="f315", 0x2) 3.782232788s ago: executing program 3 (id=7307): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000003010104000000000000000002000006b524706550537edf63d16bf65233cb6520"], 0x14}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 3.648622426s ago: executing program 3 (id=7308): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000056544820e105080411250102030109021b00010000000009040000012ec25d000905d891"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271b, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 2.485597633s ago: executing program 0 (id=7314): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x802) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x5, 0xe4}]}, 0x8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 2.230658204s ago: executing program 3 (id=7316): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f00000002c0)="b9425b") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRES8=0x0, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES8=r1, @ANYBLOB="f163ccd520a527b3c380e4fd0cbb87d2c82653dde1d571c37d9885d0fe707b8d266da797019a9b5e823c1acb2093d10b65796655d82633589a4e71a0a22720a80818cbde47452f8d7ab7e963371bd4204f360cd2c8df1d417618f3edf10b1ae668c820ea39c30c9aaf15a30b78a73bc03ecc8b1cf9f1dba85d793fb37cba8fe4a6a2d3e497ad933f86817e71"], 0x0) 1.132870957s ago: executing program 0 (id=7317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) 1.049275439s ago: executing program 0 (id=7318): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 532.816971ms ago: executing program 4 (id=7321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(r0, 0x9) 447.617585ms ago: executing program 4 (id=7322): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="a7870089210653e48c1f1f"], 0x14}}, 0x0) 295.026952ms ago: executing program 4 (id=7323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0) 164.892102ms ago: executing program 4 (id=7324): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {0x0}], 0x2, 0x1, 0x0) 103.94837ms ago: executing program 4 (id=7325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080001004000"], 0x6c}}, 0x0) 0s ago: executing program 4 (id=7326): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010104000000000000000300ffff05400153a2fa432e2aaf0d381413749eb20000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040024) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f00000003c0), 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) kernel console output (not intermixed with test programs): 0b3, bcdDevice=2d.ea [ 2228.923344][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2228.923369][ T30] audit: type=1800 audit(2000000993.880:4244): pid=27952 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.6518" name="file1" dev="mqueue" ino=103390 res=0 errno=0 [ 2228.941949][T27370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.005428][T27370] usb 5-1: Product: syz [ 2229.009722][T27370] usb 5-1: Manufacturer: syz [ 2229.024755][T27370] usb 5-1: SerialNumber: syz [ 2229.035608][T15237] usb 9-1: Using ep0 maxpacket: 32 [ 2229.074666][T27370] usb 5-1: config 0 descriptor?? [ 2229.077755][T15237] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 2229.095244][T15237] usb 9-1: config 0 has no interface number 0 [ 2229.130982][T15237] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2229.142813][T15237] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.155903][T15237] usb 9-1: Product: syz [ 2229.160152][T15237] usb 9-1: Manufacturer: syz [ 2229.166873][T15237] usb 9-1: SerialNumber: syz [ 2229.260124][T27961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6520'. [ 2229.269991][T27961] openvswitch: netlink: Flow key attr not present in new flow. [ 2229.326504][T15237] usb 9-1: config 0 descriptor?? [ 2229.348831][T15237] smsc95xx v2.0.0 [ 2229.368883][ T30] audit: type=1326 audit(2000000994.170:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2229.501062][ T30] audit: type=1326 audit(2000000994.170:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2229.524970][ C1] vkms_vblank_simulate: vblank timer overrun [ 2230.315651][T15237] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2230.377813][T15237] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2230.503195][ T30] audit: type=1326 audit(2000000994.170:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2230.524915][ C1] vkms_vblank_simulate: vblank timer overrun [ 2230.532488][ T30] audit: type=1326 audit(2000000994.170:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2230.554194][ C1] vkms_vblank_simulate: vblank timer overrun [ 2230.570273][ T30] audit: type=1326 audit(2000000994.170:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2230.592024][ C1] vkms_vblank_simulate: vblank timer overrun [ 2230.672073][ T30] audit: type=1326 audit(2000000994.170:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2230.754537][ T30] audit: type=1326 audit(2000000994.170:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2230.829337][T15237] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2230.860739][T15237] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 2230.865200][T25558] usb 5-1: USB disconnect, device number 41 [ 2231.068321][ T30] audit: type=1326 audit(2000000994.170:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2231.085422][T15237] usb 9-1: USB disconnect, device number 3 [ 2231.165754][T27979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2231.817706][ T30] audit: type=1326 audit(2000000994.180:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27958 comm="syz.3.6521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f413db8e929 code=0x7ffc0000 [ 2231.993685][T27984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6528'. [ 2232.033657][T27984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6528'. [ 2232.205322][T11479] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 2232.378552][T11479] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2232.399178][T11479] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2232.439987][T11479] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2232.463687][T11479] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.492618][T11479] usb 6-1: Product: syz [ 2232.515505][T11479] usb 6-1: Manufacturer: syz [ 2232.520212][T11479] usb 6-1: SerialNumber: syz [ 2233.287970][T28005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6534'. [ 2233.297476][T28005] openvswitch: netlink: Flow key attr not present in new flow. [ 2233.867784][T11479] usb 6-1: 0:2 : does not exist [ 2233.885589][T11479] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2233.925350][T11479] usb 6-1: USB disconnect, device number 43 [ 2233.995490][T15237] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2234.008497][T27831] udevd[27831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2234.174487][T15237] usb 4-1: Using ep0 maxpacket: 8 [ 2234.193345][T15237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.220292][T15237] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2234.265597][T15237] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2234.286927][ T30] kauditd_printk_skb: 538 callbacks suppressed [ 2234.286953][ T30] audit: type=1326 audit(2000000999.250:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2234.317288][T15237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.345996][T27362] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2234.357726][T15237] usb 4-1: Product: syz [ 2234.361975][T15237] usb 4-1: Manufacturer: syz [ 2234.380157][T15237] usb 4-1: SerialNumber: syz [ 2234.426115][T15237] usb 4-1: config 0 descriptor?? [ 2234.432175][ T30] audit: type=1326 audit(2000000999.300:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2234.470514][ T30] audit: type=1326 audit(2000000999.300:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2234.506558][ T30] audit: type=1326 audit(2000000999.300:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2234.545520][T27362] usb 5-1: Using ep0 maxpacket: 32 [ 2234.574280][T27362] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2234.582890][T27362] usb 5-1: config 0 has no interface number 0 [ 2234.623451][ T30] audit: type=1326 audit(2000000999.300:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2234.673140][T27362] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2234.694378][T27362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.705268][T27362] usb 5-1: Product: syz [ 2234.709782][ T30] audit: type=1326 audit(2000000999.300:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2234.755374][T27362] usb 5-1: Manufacturer: syz [ 2234.760214][T27362] usb 5-1: SerialNumber: syz [ 2234.786706][T27362] usb 5-1: config 0 descriptor?? [ 2234.812241][ T30] audit: type=1326 audit(2000000999.300:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2234.859157][T27362] smsc95xx v2.0.0 [ 2234.920550][ T30] audit: type=1326 audit(2000000999.300:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2234.950128][ T30] audit: type=1326 audit(2000000999.300:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2234.992107][ T30] audit: type=1326 audit(2000000999.300:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28019 comm="syz.0.6543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2235.247172][T27362] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 2235.258402][T27362] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2236.167239][T27362] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2236.180294][T27362] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 2236.218453][T27362] usb 5-1: USB disconnect, device number 42 [ 2236.329116][T28046] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6549'. [ 2236.338570][T28046] openvswitch: netlink: Flow key attr not present in new flow. [ 2237.142309][T11479] usb 4-1: USB disconnect, device number 40 [ 2237.833357][T28074] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6558'. [ 2237.850426][T28074] openvswitch: netlink: Flow key attr not present in new flow. [ 2239.945196][T28085] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6560'. [ 2240.238836][T28089] erspan0: left promiscuous mode [ 2240.258395][T28089] erspan0: left allmulticast mode [ 2240.370133][T28089] bridge0: port 2(bridge_slave_1) entered disabled state [ 2240.377711][T28089] bridge0: port 1(bridge_slave_0) entered disabled state [ 2240.491116][T28096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6564'. [ 2240.505374][T28096] openvswitch: netlink: Flow key attr not present in new flow. [ 2240.755190][T15237] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 2241.605666][T28089] vcan0: left promiscuous mode [ 2241.610562][T28089] vcan0: left allmulticast mode [ 2241.655144][T15237] usb 9-1: Using ep0 maxpacket: 8 [ 2241.719631][T15237] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.754537][T15237] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2241.772120][T15237] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2241.781822][T15237] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2241.794093][T15237] usb 9-1: Product: syz [ 2241.812376][T15237] usb 9-1: Manufacturer: syz [ 2241.822540][T15237] usb 9-1: SerialNumber: syz [ 2241.862106][T15237] usb 9-1: config 0 descriptor?? [ 2242.387153][T28089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2242.433287][T28089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2242.567627][T28101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6566'. [ 2242.612478][T28101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6566'. [ 2242.695417][T28102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6565'. [ 2242.838288][T28089] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.889271][T28089] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.915806][T28089] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2242.936821][T28089] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2243.398321][T27362] usb 9-1: USB disconnect, device number 4 [ 2244.854861][T28152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6578'. [ 2244.864496][T28152] openvswitch: netlink: Flow key attr not present in new flow. [ 2245.770178][T28155] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6582'. [ 2246.486126][T27362] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2246.655567][T27362] usb 4-1: Using ep0 maxpacket: 32 [ 2246.664813][T27362] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 2246.677985][T27362] usb 4-1: config 0 has no interface number 0 [ 2246.692951][T27362] usb 4-1: config 0 interface 12 has no altsetting 0 [ 2246.732852][T27362] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2246.765810][T27362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2246.839505][T27362] usb 4-1: Product: syz [ 2246.875634][T27362] usb 4-1: Manufacturer: syz [ 2246.900305][T27362] usb 4-1: SerialNumber: syz [ 2246.936552][T27362] usb 4-1: config 0 descriptor?? [ 2247.004007][T27362] f81534 4-1:0.12: required endpoints missing [ 2247.421307][T27361] usb 4-1: USB disconnect, device number 41 [ 2247.465711][T28197] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2248.959798][T28209] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6599'. [ 2250.915126][T27354] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2251.085277][T27354] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2251.116390][T27354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2251.160000][T27354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2251.205044][T27354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2251.238561][T27354] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2251.267862][T27354] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2251.286598][T27354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2251.302695][T27354] usb 4-1: Product: syz [ 2251.309850][T27354] usb 4-1: Manufacturer: syz [ 2251.314480][T27354] usb 4-1: SerialNumber: syz [ 2251.346979][T27354] usb 4-1: config 0 descriptor?? [ 2251.745590][T27354] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2251.752564][T27354] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2251.810323][T27354] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 2251.818639][T27354] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2252.677354][T27354] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2252.729361][T27354] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 2253.725934][T27354] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2253.955485][T27354] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 2253.992422][T27354] usb 4-1: USB disconnect, device number 42 [ 2254.695480][T27354] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 2254.888774][T27354] usb 9-1: Using ep0 maxpacket: 32 [ 2255.047635][T27354] usb 9-1: config index 0 descriptor too short (expected 10245, got 18) [ 2255.176648][T27354] usb 9-1: config 208 has too many interfaces: 57, using maximum allowed: 32 [ 2255.420756][T27354] usb 9-1: config 208 has 1 interface, different from the descriptor's value: 57 [ 2255.433381][T27354] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 2255.442827][T27354] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.478804][T27354] gspca_main: sq930x-2.14.0 probing 041e:403c [ 2255.871047][T28287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.255283][T27354] gspca_sq930x: reg_r 001f failed -110 [ 2256.286681][T27354] sq930x 9-1:208.0: probe with driver sq930x failed with error -110 [ 2256.446286][T28287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2256.738940][T27360] usb 9-1: USB disconnect, device number 5 [ 2256.867967][T28319] tipc: Started in network mode [ 2256.883434][T28319] tipc: Node identity 7f000001, cluster identity 4711 [ 2256.891805][T28319] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2256.914180][T28319] tipc: Enabled bearer , priority 10 [ 2257.025767][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.165118][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.275537][T28097] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 2257.305345][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.446937][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.535074][T27361] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2257.554133][T28097] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2257.567055][T28097] usb 4-1: config 0 has no interface number 0 [ 2257.586082][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.593234][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.600898][T28097] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2257.612105][T28097] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2257.623215][T28097] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2257.633397][T28097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.647779][T28097] usb 4-1: config 0 descriptor?? [ 2257.656545][T28315] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2257.725039][T27361] usb 5-1: Using ep0 maxpacket: 8 [ 2257.725377][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.737290][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.749450][T27361] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2257.765137][T27361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.773329][T27361] usb 5-1: Product: syz [ 2257.780043][T27361] usb 5-1: Manufacturer: syz [ 2257.788637][T27361] usb 5-1: SerialNumber: syz [ 2257.811103][T27361] usb 5-1: config 0 descriptor?? [ 2257.828596][T27361] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2257.865175][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2257.876768][T28097] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2257.879030][T27361] usb 5-1: setting power ON [ 2257.944578][T27361] dvb-usb: bulk message failed: -22 (2/0) [ 2257.976003][T27361] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2258.005769][ T24] tipc: Node number set to 2130706433 [ 2258.032807][T28325] dvb-usb: bulk message failed: -22 (3/0) [ 2258.048435][T27361] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2258.125286][T28325] dvb-usb: bulk message failed: -22 (3/0) [ 2258.172616][T27361] usb 5-1: media controller created [ 2258.302903][T27361] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2258.333656][T27361] usb 5-1: selecting invalid altsetting 6 [ 2258.341989][T27361] usb 5-1: digital interface selection failed (-22) [ 2258.348987][T27361] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2258.359744][T27361] usb 5-1: setting power OFF [ 2258.366852][T27361] dvb-usb: bulk message failed: -22 (2/0) [ 2258.382904][T27361] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2258.658730][T27361] (NULL device *): no alternate interface [ 2259.894850][T27361] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2259.989552][T27361] usb 5-1: USB disconnect, device number 43 [ 2260.429827][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 2260.454072][T27361] usb 4-1: USB disconnect, device number 43 [ 2261.445209][ T30] kauditd_printk_skb: 129 callbacks suppressed [ 2261.445233][ T30] audit: type=1326 audit(2000001026.400:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2261.565069][ T30] audit: type=1326 audit(2000001026.450:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2261.652438][ T30] audit: type=1326 audit(2000001026.450:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2261.759865][ T30] audit: type=1326 audit(2000001026.450:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2261.848190][ T30] audit: type=1326 audit(2000001026.450:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2261.941312][ T30] audit: type=1326 audit(2000001026.450:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2262.037137][ T30] audit: type=1326 audit(2000001026.450:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2262.065330][ C1] net_ratelimit: 11 callbacks suppressed [ 2262.065454][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2262.078319][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2262.146213][ T30] audit: type=1326 audit(2000001026.450:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2262.218597][ T30] audit: type=1326 audit(2000001026.450:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3aa8f8e929 code=0x7ffc0000 [ 2262.324417][T28365] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.6658'. [ 2262.335237][ T30] audit: type=1326 audit(2000001026.450:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28354 comm="syz.0.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3aa8f2ab19 code=0x7ffc0000 [ 2263.087150][T28382] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2263.105571][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2263.105766][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2264.067717][T27362] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2264.145224][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2264.152378][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2264.225190][T27362] usb 5-1: Using ep0 maxpacket: 8 [ 2264.279425][T27362] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2264.295216][T27362] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2264.338869][T27362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2264.350893][T27362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2264.362964][T27362] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2264.550900][T27362] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2264.568132][T27362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.800899][T27362] usb 5-1: GET_CAPABILITIES returned 0 [ 2264.809217][T27362] usbtmc 5-1:16.0: can't read capabilities [ 2265.007939][T12142] usb 5-1: USB disconnect, device number 44 [ 2265.185199][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2265.192859][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2266.225308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2266.232515][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2267.265136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2267.272341][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2268.305112][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2268.312419][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2268.320254][T27354] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2268.328006][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2268.485257][T27354] usb 4-1: Using ep0 maxpacket: 8 [ 2268.525463][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 2268.541865][T27354] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2268.628554][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 2268.646412][T27354] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2268.678188][ T24] usb 5-1: config 0 has no interface number 0 [ 2268.684380][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 2268.716440][T27354] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2268.835262][T27354] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2268.916702][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2268.932529][T27354] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2268.986597][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.022181][T27354] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2269.034632][ T24] usb 5-1: Product: syz [ 2269.039831][T27366] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2269.057933][ T24] usb 5-1: Manufacturer: syz [ 2269.079368][T27354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.087708][ T24] usb 5-1: SerialNumber: syz [ 2269.115057][ T24] usb 5-1: config 0 descriptor?? [ 2269.124830][ T24] smsc75xx v1.0.0 [ 2269.149366][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2269.190106][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 2269.207398][T27366] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2269.345050][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2269.352109][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.105173][T27366] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2270.128631][T27366] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2270.210794][T27354] usb 4-1: GET_CAPABILITIES returned 0 [ 2270.230960][T27354] usbtmc 4-1:16.0: can't read capabilities [ 2270.295808][T27362] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2270.365203][T27354] usb 4-1: USB disconnect, device number 44 [ 2270.385163][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.392301][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2270.424493][T27366] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2270.447554][T27366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.468189][T27366] usb 9-1: config 0 descriptor?? [ 2270.496307][T28449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.535668][T27362] usb 6-1: Using ep0 maxpacket: 32 [ 2270.546711][T28449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2270.594767][T27362] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 2270.618635][T27362] usb 6-1: config 0 has no interface number 0 [ 2270.646819][T27362] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2270.657007][T27362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.665147][T27362] usb 6-1: Product: syz [ 2270.671081][T27362] usb 6-1: Manufacturer: syz [ 2270.675910][T27362] usb 6-1: SerialNumber: syz [ 2270.687071][T27362] usb 6-1: config 0 descriptor?? [ 2271.004134][T28468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6691'. [ 2271.107937][T28468] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6691'. [ 2271.314121][T27362] radio-si470x 6-1:0.35: this is not a si470x device. [ 2271.346141][T27362] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 2271.425153][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2271.432359][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2271.971389][T28468] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2271.984909][ C0] hrtimer: interrupt took 80938 ns [ 2272.020040][T28468] bridge0: entered promiscuous mode [ 2272.115444][T28457] could not allocate digest TFM handle hmac(sha256-avx2) [ 2272.141594][T28468] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 2272.154113][T28468] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 2272.329460][T27362] usb 6-1: USB disconnect, device number 44 [ 2272.465173][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2272.472348][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2272.941861][ T24] usb 5-1: USB disconnect, device number 45 [ 2273.106591][T27366] usbhid 9-1:0.0: can't add hid device: -71 [ 2273.112738][T27366] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2273.124989][T27366] usb 9-1: USB disconnect, device number 6 [ 2273.412758][T28498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2273.505069][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2273.512146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2274.545097][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2274.552345][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2275.585140][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2275.592361][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.248449][T27360] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2276.417386][T27360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.453284][T27360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2276.579473][T27360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2276.611740][T27360] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2276.625105][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.632274][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2276.747000][T27360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.839304][T27360] usb 5-1: config 0 descriptor?? [ 2277.635234][T22667] Bluetooth: hci3: command 0x0406 tx timeout [ 2277.641392][T22667] Bluetooth: hci0: command 0x0406 tx timeout [ 2277.665081][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2277.672174][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2278.705085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2278.712328][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2279.360776][T27360] usbhid 5-1:0.0: can't add hid device: -71 [ 2279.366990][T27360] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2279.384021][T27360] usb 5-1: USB disconnect, device number 46 [ 2279.755163][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2279.762376][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.255077][T27287] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2280.415213][T27287] usb 4-1: Using ep0 maxpacket: 32 [ 2280.422692][T28575] bridge_slave_0: left allmulticast mode [ 2280.437265][T27287] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 2280.461766][T27287] usb 4-1: config 0 has no interface number 0 [ 2280.479617][T27287] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2280.491352][T28575] bridge_slave_0: left promiscuous mode [ 2280.534078][T27287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.572603][T28575] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.595051][T27287] usb 4-1: Product: syz [ 2280.599268][T27287] usb 4-1: Manufacturer: syz [ 2280.603867][T27287] usb 4-1: SerialNumber: syz [ 2280.656796][T28575] bridge_slave_1: left allmulticast mode [ 2280.683227][T28575] bridge_slave_1: left promiscuous mode [ 2280.698875][T27287] usb 4-1: config 0 descriptor?? [ 2280.723799][T28575] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.762581][T27287] smsc95xx v2.0.0 [ 2280.785743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.792973][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2280.850182][T28575] bond0: (slave bond_slave_0): Releasing backup interface [ 2280.918642][T28575] bond0: (slave bond_slave_1): Releasing backup interface [ 2280.966532][T28575] team0: Port device team_slave_0 removed [ 2281.005116][T28575] team0: Port device team_slave_1 removed [ 2281.014113][T28575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2281.033285][T28575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2281.186631][T27287] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 2281.265469][T27287] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2281.425126][T13877] Bluetooth: hci3: command 0x0406 tx timeout [ 2281.793048][T27287] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 2281.825149][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2281.832245][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2281.859846][T27287] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 2281.980381][T27287] usb 4-1: USB disconnect, device number 45 [ 2282.317945][T28584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6732'. [ 2282.709637][T13877] Bluetooth: hci5: command 0x0406 tx timeout [ 2282.775625][T28571] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2282.865168][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2282.872327][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.365784][T28571] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2283.488284][T28571] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2283.529384][T28571] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2283.556984][T28571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2283.590646][T28571] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2283.629698][T28571] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2283.681642][T28571] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2283.706702][T28571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2283.712787][T28571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2283.771486][T28571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2283.905383][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2283.912580][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.085346][T27371] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2284.265473][T27371] usb 4-1: Using ep0 maxpacket: 16 [ 2284.337054][T27371] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2284.355232][T27371] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2284.378207][T27371] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2284.459293][T27371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.515765][T27371] usb 4-1: Product: syz [ 2284.520147][T27371] usb 4-1: Manufacturer: syz [ 2284.559789][T27371] usb 4-1: SerialNumber: syz [ 2284.680669][T28607] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.688411][T28607] bridge0: port 1(bridge_slave_0) entered disabled state [ 2284.734311][T28616] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6743'. [ 2284.794108][T27371] usb 4-1: 0:2 : does not exist [ 2284.807831][T27371] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2284.913200][T27371] usb 4-1: USB disconnect, device number 46 [ 2284.945136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.952443][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2284.977253][T28607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2284.991881][T28607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2285.109036][T27831] udevd[27831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2285.187081][T28607] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.236073][T28607] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.270649][T28607] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.308385][T28607] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.418198][T28608] pim6reg: entered allmulticast mode [ 2285.426919][T13877] Bluetooth: hci5: command 0x0406 tx timeout [ 2285.433191][T28613] pim6reg: left allmulticast mode [ 2285.505205][T13877] Bluetooth: hci1: command 0x0406 tx timeout [ 2285.585154][T13877] Bluetooth: hci2: command 0x0406 tx timeout [ 2285.665709][T13877] Bluetooth: hci0: command 0x0406 tx timeout [ 2285.682536][T28623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6744'. [ 2285.745829][T13877] Bluetooth: hci3: command 0x0406 tx timeout [ 2285.985184][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2285.992397][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2286.008915][T28632] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6749'. [ 2286.028870][T28634] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2286.098579][T28640] bridge_slave_0: left allmulticast mode [ 2286.125778][T28640] bridge_slave_0: left promiscuous mode [ 2286.131782][T28640] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.174706][T28640] bridge_slave_1: left allmulticast mode [ 2286.199131][T28640] bridge_slave_1: left promiscuous mode [ 2286.210509][T28640] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.284647][T28640] bond0: (slave bond_slave_0): Releasing backup interface [ 2286.341045][T28640] bond0: (slave bond_slave_1): Releasing backup interface [ 2286.368586][T28640] team0: Port device team_slave_0 removed [ 2286.380931][T28640] team0: Port device team_slave_1 removed [ 2286.416215][T28640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2286.436513][T28640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2287.035307][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2287.585073][T13877] Bluetooth: hci1: command 0x0406 tx timeout [ 2287.665608][T13877] Bluetooth: hci2: command 0x0406 tx timeout [ 2287.745175][T13877] Bluetooth: hci0: command 0x0406 tx timeout [ 2287.825991][T13877] Bluetooth: hci3: command 0x0406 tx timeout [ 2288.065119][ C1] net_ratelimit: 1 callbacks suppressed [ 2288.065150][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2288.078015][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2288.145058][T13877] Bluetooth: hci5: command 0x0406 tx timeout [ 2288.146655][T28633] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2288.960910][T28633] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2288.970462][T28633] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2288.976763][T28633] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2288.983038][T28633] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2289.105127][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2289.112437][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2289.324525][T28614] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2290.124578][T28097] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2290.145127][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2290.152277][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2290.385061][T28512] Bluetooth: hci1: command 0x0406 tx timeout [ 2291.034987][T13877] Bluetooth: hci3: command 0x0406 tx timeout [ 2291.035044][T28512] Bluetooth: hci0: command 0x0406 tx timeout [ 2291.041090][T13877] Bluetooth: hci2: command 0x0406 tx timeout [ 2291.188269][T28698] bridge_slave_0: left allmulticast mode [ 2291.194119][T28698] bridge_slave_0: left promiscuous mode [ 2291.200557][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.200798][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2291.216016][T28698] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.231363][T28698] bridge_slave_1: left allmulticast mode [ 2291.251400][T28698] bridge_slave_1: left promiscuous mode [ 2291.355696][T28698] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.393920][T28698] bond0: (slave bond_slave_0): Releasing backup interface [ 2291.416175][T28698] bond0: (slave bond_slave_1): Releasing backup interface [ 2291.431058][T28698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2291.443842][T28698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2292.225141][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2292.232315][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.265151][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.272374][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2293.279089][T13877] Bluetooth: hci5: command 0x0406 tx timeout [ 2293.291332][T28694] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 2294.158999][T28694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2294.169023][T28694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2294.176407][T28694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2294.197682][T28694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2294.305460][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2294.312701][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2294.697204][T27359] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2294.875752][T27359] usb 9-1: Using ep0 maxpacket: 32 [ 2295.345386][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2295.352501][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2295.399333][T13877] Bluetooth: hci1: command 0x0406 tx timeout [ 2295.541160][T27359] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 2295.553609][T27359] usb 9-1: config 0 has no interface number 0 [ 2295.560153][T27359] usb 9-1: config 0 interface 12 has no altsetting 0 [ 2295.613731][T27359] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2295.696732][T27359] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2295.756476][T27359] usb 9-1: Product: syz [ 2295.760765][T27359] usb 9-1: Manufacturer: syz [ 2295.795007][T27359] usb 9-1: SerialNumber: syz [ 2295.811562][T27359] usb 9-1: config 0 descriptor?? [ 2295.819455][T27359] f81534 9-1:0.12: required endpoints missing [ 2296.239300][T22667] Bluetooth: hci3: command 0x0406 tx timeout [ 2296.246089][T22667] Bluetooth: hci2: command 0x0406 tx timeout [ 2296.252265][T13877] Bluetooth: hci0: command 0x0406 tx timeout [ 2296.385097][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2296.392349][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2296.774991][T28614] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2296.838523][T27354] usb 9-1: USB disconnect, device number 7 [ 2297.011644][T28614] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2297.026342][T28614] usb 5-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 2297.034527][T28614] usb 5-1: Product: syz [ 2297.038934][T28614] usb 5-1: Manufacturer: syz [ 2297.044676][T28614] usb 5-1: SerialNumber: syz [ 2297.066005][T28614] usb 5-1: config 0 descriptor?? [ 2297.331835][T28614] usb-storage 5-1:0.0: USB Mass Storage device detected [ 2297.425136][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2297.432252][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2298.160367][T28097] usb 5-1: USB disconnect, device number 47 [ 2298.465145][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2298.472270][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.505129][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.512360][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2299.595283][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2299.603753][ T30] kauditd_printk_skb: 353 callbacks suppressed [ 2299.603775][ T30] audit: type=1326 audit(2000001064.560:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2299.631936][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.708333][ T30] audit: type=1326 audit(2000001064.600:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2299.730026][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.765829][ T30] audit: type=1326 audit(2000001064.600:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2299.845765][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 2299.856935][ T24] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2299.865877][ T24] usb 5-1: config 0 has no interface number 0 [ 2299.893384][ T24] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2299.913580][ T30] audit: type=1326 audit(2000001064.600:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2299.939196][ T30] audit: type=1326 audit(2000001064.600:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2299.961830][ C1] vkms_vblank_simulate: vblank timer overrun [ 2299.968372][ T24] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2299.978143][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.986501][ T24] usb 5-1: Product: syz [ 2299.991458][ T24] usb 5-1: Manufacturer: syz [ 2299.996503][ T24] usb 5-1: SerialNumber: syz [ 2300.003709][ T30] audit: type=1326 audit(2000001064.600:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2300.030915][ T24] usb 5-1: config 0 descriptor?? [ 2300.041092][ T24] f81534 5-1:0.12: required endpoints missing [ 2300.048798][ T30] audit: type=1326 audit(2000001064.600:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2300.100062][ T30] audit: type=1326 audit(2000001064.600:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2300.141299][ T30] audit: type=1326 audit(2000001064.600:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2300.162954][ C1] vkms_vblank_simulate: vblank timer overrun [ 2300.241471][ T30] audit: type=1326 audit(2000001064.600:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28790 comm="syz.8.6803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafd898e929 code=0x7ffc0000 [ 2300.263303][ C1] vkms_vblank_simulate: vblank timer overrun [ 2300.346178][ T24] usb 5-1: USB disconnect, device number 48 [ 2300.545352][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2300.552613][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2301.585124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2301.592273][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2302.625088][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2302.632468][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2303.665160][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2303.672543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2304.359828][T28857] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.6826'. [ 2304.505055][T28614] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2304.668543][T28614] usb 5-1: Using ep0 maxpacket: 32 [ 2304.683656][T28614] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 2304.705082][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2304.710918][T28614] usb 5-1: config 0 has no interface number 0 [ 2304.712296][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2304.721391][T28614] usb 5-1: config 0 interface 12 has no altsetting 0 [ 2304.744351][T28614] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2304.754034][T28614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.763729][T28614] usb 5-1: Product: syz [ 2304.768348][T28614] usb 5-1: Manufacturer: syz [ 2304.866102][T28614] usb 5-1: SerialNumber: syz [ 2304.893332][T28614] usb 5-1: config 0 descriptor?? [ 2304.915280][T28614] f81534 5-1:0.12: required endpoints missing [ 2305.436108][T27371] usb 5-1: USB disconnect, device number 49 [ 2305.745096][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2305.752443][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2306.785082][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2306.792281][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2307.255596][T28884] netlink: 'syz.5.6835': attribute type 6 has an invalid length. [ 2307.705172][T28614] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2307.825186][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2307.832332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2308.085294][T28614] usb 5-1: Using ep0 maxpacket: 32 [ 2308.098989][T28614] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2308.111346][T28614] usb 5-1: config 0 has no interface number 0 [ 2308.139488][T28614] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2308.154173][T28614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2308.164111][T28614] usb 5-1: Product: syz [ 2308.179593][T28614] usb 5-1: Manufacturer: syz [ 2308.184633][T28614] usb 5-1: SerialNumber: syz [ 2308.200413][T28614] usb 5-1: config 0 descriptor?? [ 2308.217816][T28614] smsc95xx v2.0.0 [ 2308.541046][T27362] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2308.715421][T27362] usb 4-1: Using ep0 maxpacket: 16 [ 2308.725956][T27362] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2308.757743][T27362] usb 4-1: config 0 has no interface number 0 [ 2308.782087][T27362] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2308.834180][T27362] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2308.864625][T27362] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2308.865152][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2308.881014][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2308.910390][T27362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2308.951967][T27362] usb 4-1: config 0 descriptor?? [ 2309.036189][T28614] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 2309.104092][T28614] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2309.145538][T28614] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2309.172747][T28614] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 2309.263642][T28614] usb 5-1: USB disconnect, device number 50 [ 2309.453422][T27362] usbhid 4-1:0.1: can't add hid device: -71 [ 2309.462459][T27362] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 2309.490174][T27362] usb 4-1: USB disconnect, device number 48 [ 2309.905114][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2309.912346][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2309.965741][T28918] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2309.996873][T28918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2310.003218][T28918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2310.009773][T28918] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2310.016039][T28918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2310.333111][T28927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6851'. [ 2310.687262][T28933] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.6854'. [ 2310.741448][T28927] hsr_slave_0 (unregistering): left promiscuous mode [ 2310.945212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2310.952336][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2311.285187][T28097] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 2311.408642][T27371] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2311.633778][T28097] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2311.645814][T28097] usb 4-1: not running at top speed; connect to a high speed hub [ 2311.685944][T28097] usb 4-1: config 6 has an invalid interface number: 47 but max is 0 [ 2311.694239][T28097] usb 4-1: config 6 has no interface number 0 [ 2311.700643][T28097] usb 4-1: config 6 interface 47 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 2311.743066][T28097] usb 4-1: config 6 interface 47 has no altsetting 0 [ 2311.756152][T27371] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2311.765748][T27371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.773921][T27371] usb 6-1: Product: syz [ 2311.778706][T27371] usb 6-1: Manufacturer: syz [ 2311.783452][T27371] usb 6-1: SerialNumber: syz [ 2311.797683][T28097] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=42.e9 [ 2311.807117][T28097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2311.815655][T28097] usb 4-1: Product: syz [ 2311.821956][T28097] usb 4-1: Manufacturer: syz [ 2311.827556][T28097] usb 4-1: SerialNumber: syz [ 2311.834131][T27371] usb 6-1: config 0 descriptor?? [ 2311.905685][T28512] Bluetooth: hci5: command 0x0406 tx timeout [ 2311.985123][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2311.992236][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2312.066654][T28512] Bluetooth: hci3: command 0x0406 tx timeout [ 2312.072791][T13877] Bluetooth: hci0: command 0x0406 tx timeout [ 2312.079176][T22667] Bluetooth: hci2: command 0x0406 tx timeout [ 2312.085404][T13877] Bluetooth: hci1: command 0x0406 tx timeout [ 2312.105024][T27354] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2312.253084][T27371] hso 6-1:0.0: Failed to find BULK IN ep [ 2312.263581][T28097] usb 4-1: USB disconnect, device number 49 [ 2312.288245][T27371] usb-storage 6-1:0.0: USB Mass Storage device detected [ 2312.320497][T27354] usb 9-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=61.d8 [ 2312.357750][T27354] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.378013][T27354] usb 9-1: Product: syz [ 2312.382297][T27354] usb 9-1: Manufacturer: syz [ 2312.389445][T27354] usb 9-1: SerialNumber: syz [ 2312.399789][T27354] usb 9-1: config 0 descriptor?? [ 2312.409224][T27354] usb 9-1: selecting invalid altsetting 1 [ 2312.418192][T27354] flexcop_usb: set interface failed. [ 2312.423660][T27354] b2c2_flexcop_usb 9-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 2312.464674][T27371] usb 6-1: USB disconnect, device number 46 [ 2312.631909][T28953] netlink: 'syz.8.6861': attribute type 1 has an invalid length. [ 2312.723617][T28962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2312.751879][T28962] bond1: (slave bond2): making interface the new active one [ 2312.815064][T27362] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2312.839691][T28962] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2313.025200][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2313.032340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2313.122320][T27362] usb 5-1: Using ep0 maxpacket: 16 [ 2314.065139][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2314.072335][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2314.260417][T28097] usb 9-1: USB disconnect, device number 8 [ 2314.461784][T27362] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2314.525031][T27362] usb 5-1: config 0 has no interface number 0 [ 2314.531259][T27362] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2314.599702][T27362] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2314.623318][T27362] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2314.632778][T27362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2314.666593][T27362] usb 5-1: config 0 descriptor?? [ 2314.725775][T28980] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6869'. [ 2314.746356][T28982] binder: BINDER_SET_CONTEXT_MGR already set [ 2314.753568][T28982] binder: 28981:28982 ioctl 4018620d 200000000040 returned -16 [ 2314.762529][T28982] binder: 28981:28982 ioctl c0306201 200000000240 returned -11 [ 2315.102871][T27362] usbhid 5-1:0.1: can't add hid device: -71 [ 2315.105141][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2315.116045][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2315.155274][T27362] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 2315.224808][T27362] usb 5-1: USB disconnect, device number 51 [ 2316.145557][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2316.152841][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2317.185432][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2317.192705][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2317.696837][T29057] fuse: Unknown parameter '0xffffffffffffffff' [ 2318.183886][T28614] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2318.225340][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2318.232591][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2318.508065][T28614] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2318.649601][T28614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2318.860546][T28614] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2318.925257][T28614] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2319.009727][T28614] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2319.050381][T28614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.103066][T28614] usb 4-1: config 0 descriptor?? [ 2319.132284][T28614] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 2319.147275][T28614] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 2319.265361][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2319.272577][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2319.754952][T28614] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2320.019769][T28614] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2320.032153][T28614] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 2320.121753][T28614] usb 9-1: Product: syz [ 2320.131683][T29101] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6916'. [ 2320.143792][T28614] usb 9-1: Manufacturer: syz [ 2320.170290][T28614] usb 9-1: SerialNumber: syz [ 2320.196409][T28614] usb 9-1: config 0 descriptor?? [ 2320.305339][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2320.312611][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2320.374122][T29103] overlayfs: missing 'lowerdir' [ 2320.431610][T28614] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2320.772984][T28097] usb 4-1: USB disconnect, device number 50 [ 2321.246045][T29124] team_slave_0: entered promiscuous mode [ 2321.252825][T29124] team_slave_1: entered promiscuous mode [ 2321.258671][T29124] geneve1: entered promiscuous mode [ 2321.309197][T29124] vlan0: entered promiscuous mode [ 2321.345469][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2321.352763][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2321.360114][T27362] usb 9-1: USB disconnect, device number 9 [ 2321.369149][T29124] team0: entered promiscuous mode [ 2321.642612][T29131] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6929'. [ 2321.716093][T27354] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 2321.878077][T27354] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.889524][T27354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2321.912488][T27354] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2321.967022][T27362] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2322.097433][T27354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.180320][T27354] usb 6-1: Product: syz [ 2322.187762][T27354] usb 6-1: Manufacturer: syz [ 2322.195636][T27354] usb 6-1: SerialNumber: syz [ 2322.205311][T27362] usb 9-1: Using ep0 maxpacket: 8 [ 2322.291921][T27362] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2322.337050][T27362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.352086][T27362] usb 9-1: Product: syz [ 2322.385581][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2322.392854][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2322.403009][T27362] usb 9-1: Manufacturer: syz [ 2322.484117][T27362] usb 9-1: SerialNumber: syz [ 2322.489351][T27354] usb 6-1: 0:2 : does not exist [ 2322.506497][T27362] usb 9-1: config 0 descriptor?? [ 2322.511782][T27354] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2322.606421][T27354] usb 6-1: USB disconnect, device number 47 [ 2322.732054][T28908] udevd[28908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2322.749167][T27362] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2323.368734][T27362] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2323.425098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2323.432259][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2324.156282][T27362] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2324.325382][T27362] usb 4-1: Using ep0 maxpacket: 32 [ 2324.337485][T27362] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2324.377664][T27362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2324.420596][T27362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2324.455919][T27362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2324.465632][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2324.474238][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2324.494935][T27362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2324.538531][T27362] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2324.558718][T27362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.583100][T27362] usb 4-1: Product: syz [ 2324.594769][T27362] usb 4-1: Manufacturer: syz [ 2324.609936][T27362] usb 4-1: SerialNumber: syz [ 2324.638837][T27362] usb 4-1: config 0 descriptor?? [ 2324.798463][T28614] usb 9-1: USB disconnect, device number 10 [ 2324.952355][T29175] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6942'. [ 2325.354592][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.366066][T27362] input input44: Device does not respond to id packet P [ 2325.405181][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.411375][T27362] input input44: Device does not respond to id packet B [ 2325.435374][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.455646][T27362] input input44: Device does not respond to id packet N [ 2325.483143][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.505122][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2325.512341][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2325.515614][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.552501][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.565714][T27362] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 2325.625598][T27362] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input44 [ 2325.678891][T27362] usb 4-1: USB disconnect, device number 51 [ 2325.791843][T29183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2325.882862][T29185] binder: 29184:29185 ioctl c0306201 200000000240 returned -11 [ 2326.545098][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2326.552344][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2327.475498][T28614] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2327.585132][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2327.592352][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2327.646075][T28614] usb 6-1: Using ep0 maxpacket: 8 [ 2327.677597][T28614] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2327.743234][T28614] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.793059][T28614] usb 6-1: Product: syz [ 2327.829297][T28614] usb 6-1: Manufacturer: syz [ 2327.882909][T28614] usb 6-1: SerialNumber: syz [ 2328.008677][T28614] usb 6-1: config 0 descriptor?? [ 2328.252615][T28614] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2328.278366][T29212] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6954'. [ 2328.625105][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2328.632354][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2328.859235][T28614] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2329.392053][T29225] binder: BINDER_SET_CONTEXT_MGR already set [ 2329.414411][T29225] binder: 29224:29225 ioctl 4018620d 200000000040 returned -16 [ 2329.431900][T29225] binder: 29224:29225 ioctl c0306201 200000000240 returned -11 [ 2329.665103][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2329.672284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2329.947983][T29235] program syz.8.6961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2330.224632][T27362] usb 6-1: USB disconnect, device number 48 [ 2330.265074][T28097] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2330.420020][T28097] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2330.440014][T28097] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 2330.473810][T28097] usb 4-1: Product: syz [ 2330.492784][T28097] usb 4-1: Manufacturer: syz [ 2330.508460][T28097] usb 4-1: SerialNumber: syz [ 2330.550281][T28097] usb 4-1: config 0 descriptor?? [ 2330.705067][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2330.712353][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2330.747807][T27362] usb 6-1: new low-speed USB device number 49 using dummy_hcd [ 2330.803749][T28097] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2330.947158][T27362] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2330.955783][T27362] usb 6-1: config 0 has no interface number 0 [ 2330.962084][T27362] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2330.997070][T27362] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2331.043289][T27362] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2331.127330][T27362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.188310][T27362] usb 6-1: config 0 descriptor?? [ 2331.203643][T29241] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2331.243814][T27362] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2331.501005][T27362] usb 6-1: USB disconnect, device number 49 [ 2331.670456][T28097] usb 4-1: USB disconnect, device number 52 [ 2331.745131][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2331.752347][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2331.809062][T29260] binder: BINDER_SET_CONTEXT_MGR already set [ 2331.815581][T29260] binder: 29259:29260 ioctl 4018620d 200000000040 returned -16 [ 2331.824208][T29260] binder: 29259:29260 ioctl c0306201 200000000240 returned -11 [ 2332.632763][T29270] pim6reg: entered allmulticast mode [ 2332.642233][T29270] pim6reg: left allmulticast mode [ 2332.785160][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2332.792434][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2333.231040][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2333.283582][T29281] netlink: 'syz.3.6977': attribute type 5 has an invalid length. [ 2333.430051][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 2333.500502][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2333.525345][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.574045][ T24] usb 6-1: Product: syz [ 2333.584199][ T24] usb 6-1: Manufacturer: syz [ 2333.609870][ T24] usb 6-1: SerialNumber: syz [ 2333.637150][ T24] usb 6-1: config 0 descriptor?? [ 2333.825221][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2333.832406][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2333.851264][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2333.978197][T29293] netlink: 'syz.3.6980': attribute type 6 has an invalid length. [ 2334.113278][T29295] binder: BINDER_SET_CONTEXT_MGR already set [ 2334.125223][T29295] binder: 29294:29295 ioctl 4018620d 200000000040 returned -16 [ 2334.139114][T29295] binder: 29294:29295 ioctl c0306201 200000000240 returned -11 [ 2334.473751][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2334.865191][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2334.872379][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2335.665135][T27371] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2335.814963][T27371] usb 9-1: Using ep0 maxpacket: 16 [ 2335.825685][T27371] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.905093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2335.912191][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2335.937627][T27371] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2336.053522][T27354] usb 6-1: USB disconnect, device number 50 [ 2336.065304][T27371] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2336.085267][T27371] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.093551][T27371] usb 9-1: Product: syz [ 2336.098948][T27371] usb 9-1: Manufacturer: syz [ 2336.108803][T27371] usb 9-1: SerialNumber: syz [ 2336.356074][T27371] usb 9-1: 0:2 : does not exist [ 2336.425669][T27371] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 2336.478285][T27371] usb 9-1: USB disconnect, device number 11 [ 2336.744018][T28908] udevd[28908]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2336.945145][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2336.952238][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2337.441511][T29338] binder: 29336:29338 ioctl c0306201 200000000240 returned -11 [ 2337.985127][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2337.992362][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2338.476880][T29357] netlink: 'syz.8.6998': attribute type 6 has an invalid length. [ 2338.585502][T29360] pim6reg1: entered promiscuous mode [ 2338.591172][T29360] pim6reg1: entered allmulticast mode [ 2338.724147][T29362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7002'. [ 2339.025270][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2339.032425][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2339.193373][T29369] binder: 29367:29369 ioctl c0306201 200000000240 returned -11 [ 2339.669325][T29380] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7008'. [ 2340.065093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2340.072304][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2340.779381][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'. [ 2340.865619][T28097] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2341.015631][T28097] usb 5-1: Using ep0 maxpacket: 16 [ 2341.090740][T28097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2341.103345][T28097] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2341.112743][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2341.112953][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2341.176983][T28097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.234411][T28097] usb 5-1: config 0 descriptor?? [ 2341.550574][T29404] netlink: 88 bytes leftover after parsing attributes in process `syz.8.7017'. [ 2341.575261][T29404] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7017'. [ 2341.671629][T28097] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 2341.701792][T28097] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 2341.722014][T28097] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 2341.738314][T28097] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 2341.747432][T28097] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 2341.758756][T28097] mcp2221 0003:04D8:00DD.0038: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 2341.885224][T27371] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2342.121757][T28097] usb 5-1: USB disconnect, device number 52 [ 2342.140152][T27371] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2342.149573][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2342.149770][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2342.200673][T27371] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 2342.255658][T27371] usb 4-1: Product: syz [ 2342.290043][T27371] usb 4-1: Manufacturer: syz [ 2342.315017][T27371] usb 4-1: SerialNumber: syz [ 2342.368842][T27371] usb 4-1: config 0 descriptor?? [ 2342.676914][T27371] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2343.185089][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2343.192308][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2343.322482][T29427] lo speed is unknown, defaulting to 1000 [ 2343.447121][ T5813] usb 4-1: USB disconnect, device number 53 [ 2344.225081][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2344.232216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2345.265107][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2345.272401][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2345.791252][T29427] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 2346.305124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2346.312423][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2347.345088][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2347.352208][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2348.385085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2348.392323][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2349.425168][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2349.432961][T28097] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 2349.618867][T28097] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2349.651933][T28097] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2349.684026][T28097] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2349.708201][T28097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.728575][T28097] usb 5-1: Product: syz [ 2349.733278][T28097] usb 5-1: Manufacturer: syz [ 2349.744356][T28097] usb 5-1: SerialNumber: syz [ 2350.103745][T28097] usb 5-1: 0:2 : does not exist [ 2350.135234][T28097] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 2350.198668][T29498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7046'. [ 2350.255548][T28097] usb 5-1: USB disconnect, device number 53 [ 2350.306777][T29498] batadv0: entered promiscuous mode [ 2350.338867][T29498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2350.370491][T28908] udevd[28908]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2350.394106][T29498] batadv0: left promiscuous mode [ 2350.465180][ C1] net_ratelimit: 1 callbacks suppressed [ 2350.465212][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2350.478071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2350.525146][T23342] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2350.816435][T23342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2350.840231][T23342] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2350.879368][T23342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2351.177910][T23342] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2351.213599][T23342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.251550][T23342] usb 4-1: config 0 descriptor?? [ 2351.309493][T23342] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 2351.370804][T23342] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 2351.505089][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2351.512325][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2352.545108][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2352.552394][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2353.089407][T29533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7058'. [ 2353.248081][T28614] usb 4-1: USB disconnect, device number 54 [ 2353.585080][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2353.592333][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2353.776014][T29543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2354.625093][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2354.632284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2354.885006][T23342] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2355.046550][T23342] usb 5-1: device descriptor read/64, error -71 [ 2355.285051][T23342] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2355.485857][T23342] usb 5-1: device descriptor read/64, error -71 [ 2355.667241][T23342] usb usb5-port1: attempt power cycle [ 2355.675057][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2355.682214][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2356.515086][T23342] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2356.577622][T23342] usb 5-1: device descriptor read/8, error -71 [ 2356.705116][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2356.712366][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2356.825131][T23342] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2356.846092][T23342] usb 5-1: device descriptor read/8, error -71 [ 2356.965047][T28614] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2356.989015][T28097] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2357.006233][T23342] usb usb5-port1: unable to enumerate USB device [ 2357.135169][T28614] usb 9-1: Using ep0 maxpacket: 8 [ 2357.157295][T28614] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 2357.184228][T28614] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2357.244996][T28097] usb 4-1: Using ep0 maxpacket: 32 [ 2357.254804][T28097] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 2357.265190][T28097] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2357.281210][T28097] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2357.284665][T28614] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2357.300588][T28614] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2357.303482][T28097] usb 4-1: config 1 has no interface number 0 [ 2357.320062][T28614] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2357.333844][T28097] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2357.333879][T28097] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2357.385056][T28614] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2357.394200][T28614] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.395278][T28097] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2357.414258][T28097] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.448699][T28097] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 2357.649721][T29592] lo speed is unknown, defaulting to 1000 [ 2357.746130][T28614] usb 9-1: usb_control_msg returned -32 [ 2357.755170][T28614] usbtmc 9-1:16.0: can't read capabilities [ 2357.755287][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2357.768311][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2358.249482][T28097] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 2358.785146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2358.792312][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2358.966699][T29606] usbtmc 9-1:16.0: usb_clear_halt returned -32 [ 2359.257095][T28097] usb 9-1: USB disconnect, device number 12 [ 2359.276329][T27354] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 2359.652317][T27362] usb 4-1: USB disconnect, device number 55 [ 2359.660377][T27362] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 2359.825135][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2359.832358][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2360.865064][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2360.872208][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2361.160123][T29618] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2361.229107][T29630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7088'. [ 2361.605372][T28614] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2361.646158][T28097] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 2361.734985][T27371] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 2361.745300][T28614] usb 5-1: device descriptor read/64, error -71 [ 2361.807058][T28097] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2361.817884][T28097] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2361.829978][T28097] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2361.839792][T28097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.848008][T28097] usb 4-1: Product: syz [ 2361.852465][T28097] usb 4-1: Manufacturer: syz [ 2361.857238][T28097] usb 4-1: SerialNumber: syz [ 2361.903547][T27371] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2361.914926][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2361.915124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2361.945546][T27371] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2361.957575][T27371] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2361.969016][T27371] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2361.977233][T27371] usb 9-1: SerialNumber: syz [ 2361.985251][T28614] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2362.020022][T27371] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 2362.031048][T27371] usb-storage 9-1:1.0: USB Mass Storage device detected [ 2362.059524][T27371] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2362.095725][T28097] usb 4-1: 0:2 : does not exist [ 2362.124413][T27371] scsi host1: usb-storage 9-1:1.0 [ 2362.135125][T28614] usb 5-1: device descriptor read/64, error -71 [ 2362.175089][T28097] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 2362.256804][T28614] usb usb5-port1: attempt power cycle [ 2362.275342][T28097] usb 4-1: USB disconnect, device number 56 [ 2362.404362][T28908] udevd[28908]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2362.625115][T28614] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2362.679271][T28614] usb 5-1: device descriptor read/8, error -71 [ 2362.945064][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2362.952360][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2362.955082][T28614] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2362.997178][T28614] usb 5-1: device descriptor read/8, error -71 [ 2363.148727][T28614] usb usb5-port1: unable to enumerate USB device [ 2363.985071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2363.992411][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2364.275013][ T5813] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2364.455760][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 2364.465804][ T5813] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2364.474600][ T5813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2364.546848][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2364.572153][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2364.603126][ T5813] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2364.655063][ T5813] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2364.664194][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.910356][ T5813] usb 6-1: GET_CAPABILITIES returned 0 [ 2364.930766][ T5813] usbtmc 6-1:16.0: can't read capabilities [ 2365.025159][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2365.032390][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2365.128011][ T5813] usb 6-1: USB disconnect, device number 51 [ 2365.330254][T28614] usb 9-1: USB disconnect, device number 13 [ 2365.855186][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2366.005013][ T24] usb 4-1: device descriptor read/64, error -71 [ 2366.075165][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2366.082379][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2366.255425][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2366.284985][T28614] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 2366.385443][ T24] usb 4-1: device descriptor read/64, error -71 [ 2366.452151][T28614] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2366.473997][T28614] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2366.505661][ T24] usb usb4-port1: attempt power cycle [ 2366.523983][T29728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2366.549383][T28614] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2366.559784][T28614] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2367.105171][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2367.112461][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2367.193849][ T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2367.334356][ T24] usb 4-1: device descriptor read/8, error -71 [ 2367.341101][T28614] usb 9-1: SerialNumber: syz [ 2367.475342][T28614] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 2367.493351][T28614] usb-storage 9-1:1.0: USB Mass Storage device detected [ 2367.536205][T28614] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2367.587989][ T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2367.595365][T28614] scsi host1: usb-storage 9-1:1.0 [ 2367.615774][ T24] usb 4-1: device descriptor read/8, error -71 [ 2367.738219][ T24] usb usb4-port1: unable to enumerate USB device [ 2367.865009][T27362] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2368.045019][T27362] usb 6-1: Using ep0 maxpacket: 16 [ 2368.052409][T27362] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2368.061994][T27362] usb 6-1: config 0 has no interface number 0 [ 2368.074910][T27362] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2368.087881][T27362] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2368.104584][T27362] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 2368.123337][T27362] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.145383][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2368.152646][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2368.157778][T27362] usb 6-1: config 0 descriptor?? [ 2368.782952][T27362] uclogic 0003:28BD:0071.0039: pen parameters not found [ 2368.807513][T27362] uclogic 0003:28BD:0071.0039: interface is invalid, ignoring [ 2368.854103][T27362] usb 6-1: USB disconnect, device number 52 [ 2369.185447][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2369.192692][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2369.292918][T29755] lo speed is unknown, defaulting to 1000 [ 2369.513623][T28511] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 2369.826103][T28614] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2369.977236][T29768] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2369.999947][T28614] usb 6-1: Using ep0 maxpacket: 8 [ 2370.007555][T28614] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2370.017290][T28614] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2370.042031][T28614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2370.062231][T28614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2370.134980][T28614] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2370.164985][T28614] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2370.174181][T28614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.235504][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2370.242826][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2370.494338][T28614] usb 6-1: usb_control_msg returned -32 [ 2370.506585][T28614] usbtmc 6-1:16.0: can't read capabilities [ 2370.555444][T27359] usb 9-1: USB disconnect, device number 14 [ 2371.105276][T27359] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2371.176724][T29784] netlink: 'syz.3.7143': attribute type 10 has an invalid length. [ 2371.202846][T29784] bond0: (slave wlan1): Opening slave failed [ 2371.265513][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2371.272779][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2371.296099][T27359] usb 9-1: config 0 has an invalid interface number: 254 but max is 0 [ 2371.304344][T27359] usb 9-1: config 0 has no interface number 0 [ 2371.323895][T27359] usb 9-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=b2.35 [ 2371.335609][T27359] usb 9-1: New USB device strings: Mfr=160, Product=247, SerialNumber=0 [ 2371.344027][T27359] usb 9-1: Product: syz [ 2371.352645][T27359] usb 9-1: Manufacturer: syz [ 2371.361459][T27359] usb 9-1: config 0 descriptor?? [ 2371.370800][T27359] ldusb 9-1:0.254: Interrupt in endpoint not found [ 2371.510094][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2371.572913][T27362] usb 9-1: USB disconnect, device number 15 [ 2371.677147][ T24] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2371.705605][ T24] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2371.717875][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2371.729973][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2371.742156][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2371.761292][ T24] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2371.770598][ T24] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2371.780986][ T24] usb 4-1: Product: syz [ 2371.788919][ T24] usb 4-1: Manufacturer: syz [ 2371.810711][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 2371.819441][ T24] cdc_wdm 4-1:1.0: skipping garbage [ 2371.834116][ T24] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 2371.840798][ T24] cdc_wdm 4-1:1.0: Unknown control protocol [ 2372.022464][ T24] usb 4-1: USB disconnect, device number 61 [ 2372.253753][T29795] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2372.305344][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2372.312514][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2372.525046][T27362] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 2372.690637][T27362] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2372.715097][T28614] usb 6-1: USB disconnect, device number 53 [ 2372.752422][T27362] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2372.815644][T27362] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 2372.824793][T27362] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2372.866499][T27362] usb 9-1: SerialNumber: syz [ 2372.897188][T27362] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 2372.935046][T27362] usb-storage 9-1:1.0: USB Mass Storage device detected [ 2372.981971][T27362] usb-storage 9-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 2373.002307][T27362] scsi host1: usb-storage 9-1:1.0 [ 2373.189682][T29812] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2373.345333][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2373.352555][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2374.385427][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2374.392611][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2375.085025][T28614] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2375.111490][T27362] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2375.190958][T29835] delete_channel: no stack [ 2375.274991][T28614] usb 4-1: Using ep0 maxpacket: 8 [ 2375.283372][T27362] usb 5-1: Using ep0 maxpacket: 8 [ 2375.325401][T27362] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2375.333717][T27362] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2375.352965][T27362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2375.363776][T27362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2375.374140][T28614] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2375.379121][T27354] usb 9-1: USB disconnect, device number 16 [ 2375.393762][T28614] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2375.415692][T27362] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2375.435329][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2375.442564][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2375.454328][T28614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.484932][T28614] usb 4-1: Product: syz [ 2375.489167][T28614] usb 4-1: Manufacturer: syz [ 2375.493819][T28614] usb 4-1: SerialNumber: syz [ 2375.522265][T27362] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2375.617673][T27362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2375.635019][T28614] usb 4-1: config 0 descriptor?? [ 2375.676761][T28614] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2376.001790][T27362] usb 5-1: usb_control_msg returned -32 [ 2376.030335][T27362] usbtmc 5-1:16.0: can't read capabilities [ 2376.465103][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2376.472282][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2377.504264][T29865] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2377.522105][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2377.522285][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2378.545083][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2378.552263][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2378.837135][T28614] gspca_zc3xx: reg_r err -71 [ 2378.842524][T28614] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2378.868442][T28614] usb 4-1: USB disconnect, device number 62 [ 2378.918635][ T24] usb 5-1: USB disconnect, device number 62 [ 2379.585092][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2379.592405][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2380.597445][T29911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2380.625129][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2380.632367][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2381.595977][T27362] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2381.665084][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2381.672232][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2381.775009][T27362] usb 5-1: Using ep0 maxpacket: 8 [ 2381.793963][T27362] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2381.803099][T27362] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2381.838603][T27362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2381.893145][T27362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2381.935142][T27362] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2381.998567][T27362] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2382.051907][T27362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2382.495975][T29933] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7191'. [ 2382.510950][T29933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7191'. [ 2382.527220][T27362] usb 5-1: usb_control_msg returned -32 [ 2382.539059][T27362] usbtmc 5-1:16.0: can't read capabilities [ 2382.705149][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2382.712255][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2382.835282][T29938] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7193'. [ 2383.745071][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2383.752310][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2384.703991][T29964] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2384.785085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2384.792310][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2385.564982][T28614] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2385.714970][T28614] usb 9-1: Using ep0 maxpacket: 32 [ 2385.724676][T28614] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 2385.736115][T28614] usb 9-1: config 0 has no interface number 0 [ 2385.754409][T28614] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2385.835084][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2385.842341][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2385.875107][T28614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.995644][T28614] usb 9-1: Product: syz [ 2386.001005][T28614] usb 9-1: Manufacturer: syz [ 2386.021995][T28614] usb 9-1: SerialNumber: syz [ 2386.060597][T28614] usb 9-1: config 0 descriptor?? [ 2386.280101][T28614] radio-si470x 9-1:0.35: this is not a si470x device. [ 2386.296287][T27362] usb 5-1: USB disconnect, device number 63 [ 2386.601031][T28614] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 2386.629983][T28614] usb 9-1: USB disconnect, device number 17 [ 2386.875043][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2386.882125][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2387.684179][T29998] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2387.905176][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2387.912404][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2388.855117][T28614] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2388.945055][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2388.952337][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2389.095096][T28614] usb 6-1: Using ep0 maxpacket: 8 [ 2389.111457][T28614] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2389.126432][T30023] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2389.152578][T28614] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2389.178822][T28614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2389.339798][T28614] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2389.362776][T28614] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2389.508544][T28614] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2389.525838][T28614] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2389.815568][T28614] usb 6-1: usb_control_msg returned -32 [ 2389.821264][T28614] usbtmc 6-1:16.0: can't read capabilities [ 2389.985060][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2389.992248][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2390.386204][T30034] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2390.410580][T28614] IPVS: starting estimator thread 0... [ 2390.955154][T30036] IPVS: using max 28 ests per chain, 67200 per kthread [ 2391.932803][T27354] usb 6-1: USB disconnect, device number 54 [ 2391.986685][T27362] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2392.065071][ C1] net_ratelimit: 2 callbacks suppressed [ 2392.065097][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2392.077969][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2392.116327][T28614] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2392.195511][T27362] usb 5-1: config 0 has an invalid interface number: 254 but max is 0 [ 2392.204066][T27362] usb 5-1: config 0 has no interface number 0 [ 2392.243117][T27362] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=b2.35 [ 2392.262908][T27362] usb 5-1: New USB device strings: Mfr=160, Product=247, SerialNumber=0 [ 2392.303700][T27362] usb 5-1: Product: syz [ 2392.309352][T27362] usb 5-1: Manufacturer: syz [ 2392.314769][T28614] usb 4-1: config 0 has an invalid interface number: 254 but max is 0 [ 2392.334091][T28614] usb 4-1: config 0 has no interface number 0 [ 2392.352733][T27362] usb 5-1: config 0 descriptor?? [ 2392.368163][T28614] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=b2.35 [ 2392.380112][T27362] ldusb 5-1:0.254: Interrupt in endpoint not found [ 2392.397785][T28614] usb 4-1: New USB device strings: Mfr=160, Product=247, SerialNumber=0 [ 2392.423703][T28614] usb 4-1: Product: syz [ 2392.443758][T28614] usb 4-1: Manufacturer: syz [ 2392.469754][T28614] usb 4-1: config 0 descriptor?? [ 2392.512577][T28614] ldusb 4-1:0.254: Interrupt in endpoint not found [ 2392.743784][T27362] usb 4-1: USB disconnect, device number 63 [ 2392.820773][T30069] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2393.105054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2393.112246][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2393.456501][T28614] usb 5-1: USB disconnect, device number 64 [ 2393.835246][T27354] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2394.005002][T27354] usb 9-1: Using ep0 maxpacket: 32 [ 2394.012230][T27354] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 2394.044413][T27354] usb 9-1: config 0 has no interface number 0 [ 2394.085817][T27354] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2394.115870][T27354] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.144266][T27354] usb 9-1: Product: syz [ 2394.148696][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2394.148834][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2394.171934][T27354] usb 9-1: Manufacturer: syz [ 2394.177098][T27354] usb 9-1: SerialNumber: syz [ 2394.187304][T27354] usb 9-1: config 0 descriptor?? [ 2394.405192][T27354] radio-si470x 9-1:0.35: this is not a si470x device. [ 2394.601332][T30085] bridge0: entered promiscuous mode [ 2394.946913][T27354] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 2394.981317][T27354] usb 9-1: USB disconnect, device number 18 [ 2395.185216][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2395.192498][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2395.375034][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2395.527054][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 2395.547303][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2395.564769][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2395.585924][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2395.604983][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2395.622532][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2395.660721][T30102] fuse: Unknown parameter '0xffffffffffffffff' [ 2395.667681][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2395.687681][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.914665][ T24] usb 4-1: usb_control_msg returned -32 [ 2395.930744][ T24] usbtmc 4-1:16.0: can't read capabilities [ 2396.225061][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2397.265056][ C1] net_ratelimit: 1 callbacks suppressed [ 2397.265085][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2397.277982][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2397.487041][T28614] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2397.780880][T28614] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2397.799521][T28614] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 2397.813305][T28614] usb 9-1: Product: syz [ 2397.821619][T28614] usb 9-1: Manufacturer: syz [ 2397.834109][T28614] usb 9-1: SerialNumber: syz [ 2397.865392][T28614] usb 9-1: config 0 descriptor?? [ 2398.121762][T28614] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2398.305072][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2398.312313][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2398.867813][ T5813] usb 9-1: USB disconnect, device number 19 [ 2399.345179][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2399.352529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2400.084779][T30178] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7280'. [ 2400.253339][T30181] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2400.385054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2400.392284][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2400.754972][ T5813] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2400.939975][ T5813] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2400.950555][ T5813] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 2400.960069][ T5813] usb 9-1: Product: syz [ 2400.977748][ T5813] usb 9-1: Manufacturer: syz [ 2400.989500][ T5813] usb 9-1: SerialNumber: syz [ 2401.022716][ T5813] usb 9-1: config 0 descriptor?? [ 2401.285528][ T5813] usb-storage 9-1:0.0: USB Mass Storage device detected [ 2401.425095][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2401.432250][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2402.084380][T27371] usb 9-1: USB disconnect, device number 20 [ 2402.165287][T23342] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2402.315620][T23342] usb 6-1: Using ep0 maxpacket: 16 [ 2402.325739][T23342] usb 6-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 2402.350335][T23342] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2402.373127][T23342] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2402.397846][T23342] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.415075][T23342] usb 6-1: Product: syz [ 2402.421876][T23342] usb 6-1: Manufacturer: syz [ 2402.437912][T23342] usb 6-1: SerialNumber: syz [ 2402.465332][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2402.472751][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2402.484984][T30126] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 2402.515241][T27371] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 2402.563964][T27354] usb 4-1: USB disconnect, device number 64 [ 2402.688845][T23342] usb 6-1: 0:2 : does not exist [ 2402.699980][T30212] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7292'. [ 2402.704283][T27371] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.736588][T27371] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2402.749306][T23342] usb 6-1: USB disconnect, device number 55 [ 2402.758121][T27371] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2402.786976][T27371] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2402.802307][T27371] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2402.824223][T28908] udevd[28908]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2402.826907][T27371] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2402.841709][T27359] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 2402.863652][T27371] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2402.872818][T27371] usb 9-1: Product: syz [ 2402.877310][T27371] usb 9-1: Manufacturer: syz [ 2402.882523][T27371] usb 9-1: SerialNumber: syz [ 2402.900274][T27371] usb 9-1: config 0 descriptor?? [ 2403.019237][T27359] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 2403.039216][T27359] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2403.060107][T27359] usb 5-1: config 0 has no interface number 0 [ 2403.066485][T27359] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 2403.092330][T27359] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 2403.108119][T27359] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.116740][T27371] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2403.116773][T27371] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2403.165456][T27359] usb 5-1: Product: syz [ 2403.169730][T27359] usb 5-1: Manufacturer: syz [ 2403.174370][T27359] usb 5-1: SerialNumber: syz [ 2403.190098][T27359] usb 5-1: config 0 descriptor?? [ 2403.205666][T30210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2403.213120][T30210] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2403.289971][T27359] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 2403.317634][T27371] radio-si470x 9-1:0.0: software version 0, hardware version 0 [ 2403.340766][T27371] radio-si470x 9-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2403.368973][T27371] radio-si470x 9-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2403.505462][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2403.509854][T27362] usb 5-1: USB disconnect, device number 65 [ 2403.512864][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2403.527969][T27371] radio-si470x 9-1:0.0: submitting int urb failed (-90) [ 2403.635048][T27359] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2403.796326][T27359] usb 6-1: Using ep0 maxpacket: 16 [ 2403.803642][T27359] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2403.814986][T27359] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2403.824767][T27359] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2403.835908][T27359] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 2403.913483][T27359] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2403.928118][T27359] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2403.963690][T30226] bridge_slave_0: left allmulticast mode [ 2403.969730][T30226] bridge_slave_0: left promiscuous mode [ 2403.976323][T30226] bridge0: port 1(bridge_slave_0) entered disabled state [ 2404.036260][T27359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2404.045098][T27359] usb 6-1: SerialNumber: syz [ 2404.056434][T30219] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2404.068544][T30226] bridge_slave_1: left allmulticast mode [ 2404.074464][T30226] bridge_slave_1: left promiscuous mode [ 2404.081467][T30226] bridge0: port 2(bridge_slave_1) entered disabled state [ 2404.131724][T27359] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 2404.169923][T27359] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 2404.184178][T30226] bond0: (slave bond_slave_0): Releasing backup interface [ 2404.254743][T30226] bond0: (slave bond_slave_1): Releasing backup interface [ 2404.287796][T30226] team_slave_0: left promiscuous mode [ 2404.341572][T27371] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 2404.354567][T30226] team0: Port device team_slave_0 removed [ 2404.361110][T27359] usb 6-1: USB disconnect, device number 56 [ 2404.369079][T30226] team_slave_1: left promiscuous mode [ 2404.377486][T27371] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22 [ 2404.429582][T30226] team0: Port device team_slave_1 removed [ 2404.441794][T27371] usb 9-1: USB disconnect, device number 21 [ 2404.471899][T30226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2404.482863][T30226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2404.529342][T30226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2404.537514][T30226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2404.545319][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2404.552413][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2404.593568][T30226] geneve1: left promiscuous mode [ 2404.831949][T30226] team0: Port device geneve1 removed [ 2405.012348][T30233] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2405.585153][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2405.592309][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2405.965449][ T5813] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2406.274956][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 2406.290830][ T5813] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2406.306459][ T5813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2406.392705][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2406.404919][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2406.415105][ T5813] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2406.429336][ T5813] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2406.438583][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2406.625054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2406.632273][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2406.672542][ T5813] usb 6-1: usb_control_msg returned -32 [ 2406.698702][ T5813] usbtmc 6-1:16.0: can't read capabilities [ 2407.125840][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 2407.125873][ T30] audit: type=1326 audit(2000001172.090:5326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30249 comm="syz.4.7304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f758d38e929 code=0x0 [ 2407.556208][T27362] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 2407.665177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2407.672511][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2407.717114][T27362] usb 9-1: config 1 interface 0 has no altsetting 0 [ 2407.728155][T27362] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2407.738981][T27362] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2407.747880][T27362] usb 9-1: Product: syz [ 2407.752192][T27362] usb 9-1: Manufacturer: syz [ 2407.762280][T27362] usb 9-1: SerialNumber: syz [ 2408.105412][T27354] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2408.265172][T27354] usb 4-1: Using ep0 maxpacket: 32 [ 2408.275318][T27354] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 2408.295732][T27354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2408.317560][T27354] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2408.334500][T27354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.342826][T27354] usb 4-1: Product: syz [ 2408.347610][T27354] usb 4-1: Manufacturer: syz [ 2408.352252][T27354] usb 4-1: SerialNumber: syz [ 2408.360997][T27354] usb 4-1: config 0 descriptor?? [ 2408.370672][T27354] usb 4-1: no audio or video endpoints found [ 2408.409752][T27362] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 2408.634268][T27362] usb 4-1: USB disconnect, device number 65 [ 2408.705053][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2408.712299][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2409.285109][T27354] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2409.447924][T27354] usb 5-1: config 0 has an invalid interface number: 254 but max is 0 [ 2409.483562][T27354] usb 5-1: config 0 has no interface number 0 [ 2409.491885][T27354] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=b2.35 [ 2409.501573][T27354] usb 5-1: New USB device strings: Mfr=160, Product=247, SerialNumber=0 [ 2409.513438][T27354] usb 5-1: Product: syz [ 2409.526125][T27354] usb 5-1: Manufacturer: syz [ 2409.570520][ T5813] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2409.659240][T27354] usb 5-1: config 0 descriptor?? [ 2409.682327][T27354] ldusb 5-1:0.254: Interrupt in endpoint not found [ 2409.745045][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2409.752200][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2409.807754][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2409.834453][ T5813] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2409.875268][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2409.887962][ T5813] usb 4-1: config 0 descriptor?? [ 2409.891712][T27354] usb 5-1: USB disconnect, device number 66 [ 2410.313272][ T5813] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor [ 2410.342754][ T5813] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.003A/input/input45 [ 2410.540886][ T5813] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 2410.657586][T30290] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 2410.693547][T30290] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 2410.785124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2410.792382][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2411.424186][T30308] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7325'. [ 2411.434411][T30308] nbd: couldn't find a device at index 64 [ 2411.483620][ C0] [ 2411.486042][ C0] ======================================================== [ 2411.493290][ C0] WARNING: possible irq lock inversion dependency detected [ 2411.500602][ C0] 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 Not tainted [ 2411.507781][ C0] -------------------------------------------------------- [ 2411.515019][ C0] syz-executor/22665 just changed the state of lock: [ 2411.521716][ C0] ffff88805a757230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x7a/0xc0 [ 2411.530822][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 2411.538856][ C0] (tasklist_lock){.+.+}-{3:3} [ 2411.538887][ C0] [ 2411.538887][ C0] [ 2411.538887][ C0] and interrupts could create inverse lock ordering between them. [ 2411.538887][ C0] [ 2411.558047][ C0] [ 2411.558047][ C0] other info that might help us debug this: [ 2411.566125][ C0] Chain exists of: [ 2411.566125][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2411.566125][ C0] [ 2411.579778][ C0] Possible interrupt unsafe locking scenario: [ 2411.579778][ C0] [ 2411.588125][ C0] CPU0 CPU1 [ 2411.593499][ C0] ---- ---- [ 2411.598964][ C0] lock(tasklist_lock); [ 2411.603237][ C0] local_irq_disable(); [ 2411.610072][ C0] lock(&dev->event_lock#2); [ 2411.617335][ C0] lock(&client->buffer_lock); [ 2411.624722][ C0] [ 2411.628210][ C0] lock(&dev->event_lock#2); [ 2411.633141][ C0] [ 2411.633141][ C0] *** DEADLOCK *** [ 2411.633141][ C0] [ 2411.641312][ C0] 8 locks held by syz-executor/22665: [ 2411.646725][ C0] #0: ffffffff8e1f8030 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 2411.655578][ C0] #1: ffff8880534516e0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1ac0 [ 2411.664753][ C0] #2: ffff8880606f6ae0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1ac0 [ 2411.674074][ C0] #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x2c0 [ 2411.683694][ C0] #4: ffff88804a13c6d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210 [ 2411.694359][ C0] #5: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x2c0 [ 2411.703965][ C0] #6: ffff888031b7aa98 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6bf/0x7000 [ 2411.714358][ C0] #7: ffffffff8e13ee60 (rcu_read_lock_sched){....}-{1:2}, at: pfn_valid+0xba/0x490 [ 2411.723864][ C0] [ 2411.723864][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 2411.733335][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 2411.738838][ C0] HARDIRQ-ON-R at: [ 2411.743255][ C0] lock_acquire+0x120/0x360 [ 2411.750132][ C0] _raw_read_lock+0x36/0x50 [ 2411.757062][ C0] __do_wait+0xde/0x740 [ 2411.763671][ C0] do_wait+0x1f8/0x520 [ 2411.770579][ C0] kernel_wait+0xab/0x170 [ 2411.777280][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 2411.785615][ C0] process_scheduled_works+0xade/0x17b0 [ 2411.793619][ C0] worker_thread+0x8a0/0xda0 [ 2411.800592][ C0] kthread+0x70e/0x8a0 [ 2411.807080][ C0] ret_from_fork+0x3fc/0x770 [ 2411.814094][ C0] ret_from_fork_asm+0x1a/0x30 [ 2411.821255][ C0] SOFTIRQ-ON-R at: [ 2411.825083][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2411.825588][ C0] lock_acquire+0x120/0x360 [ 2411.832603][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2411.839293][ C0] _raw_read_lock+0x36/0x50 [ 2411.839327][ C0] __do_wait+0xde/0x740 [ 2411.839352][ C0] do_wait+0x1f8/0x520 [ 2411.839375][ C0] kernel_wait+0xab/0x170 [ 2411.872702][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 2411.880974][ C0] process_scheduled_works+0xade/0x17b0 [ 2411.889047][ C0] worker_thread+0x8a0/0xda0 [ 2411.896001][ C0] kthread+0x70e/0x8a0 [ 2411.902427][ C0] ret_from_fork+0x3fc/0x770 [ 2411.909382][ C0] ret_from_fork_asm+0x1a/0x30 [ 2411.916507][ C0] INITIAL USE at: [ 2411.920760][ C0] lock_acquire+0x120/0x360 [ 2411.927545][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 2411.934767][ C0] copy_process+0x224f/0x3c00 [ 2411.941735][ C0] kernel_clone+0x224/0x7f0 [ 2411.948509][ C0] user_mode_thread+0xdd/0x140 [ 2411.955544][ C0] rest_init+0x23/0x300 [ 2411.961971][ C0] start_kernel+0x47d/0x500 [ 2411.968829][ C0] x86_64_start_reservations+0x24/0x30 [ 2411.976631][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2411.984022][ C0] common_startup_64+0x13e/0x147 [ 2411.991240][ C0] INITIAL READ USE at: [ 2411.995932][ C0] lock_acquire+0x120/0x360 [ 2412.003150][ C0] _raw_read_lock+0x36/0x50 [ 2412.010498][ C0] __do_wait+0xde/0x740 [ 2412.017409][ C0] do_wait+0x1f8/0x520 [ 2412.024210][ C0] kernel_wait+0xab/0x170 [ 2412.031252][ C0] call_usermodehelper_exec_work+0xbe/0x230 [ 2412.039862][ C0] process_scheduled_works+0xade/0x17b0 [ 2412.048122][ C0] worker_thread+0x8a0/0xda0 [ 2412.055427][ C0] kthread+0x70e/0x8a0 [ 2412.062206][ C0] ret_from_fork+0x3fc/0x770 [ 2412.069595][ C0] ret_from_fork_asm+0x1a/0x30 [ 2412.077066][ C0] } [ 2412.079921][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 2412.088160][ C0] ... acquired at: [ 2412.092350][ C0] lock_acquire+0x120/0x360 [ 2412.097044][ C0] _raw_read_lock+0x36/0x50 [ 2412.101736][ C0] send_sigurg+0x12b/0x420 [ 2412.106395][ C0] sk_send_sigurg+0x6c/0x2e0 [ 2412.111221][ C0] queue_oob+0x699/0x8a0 [ 2412.115722][ C0] unix_stream_sendmsg+0xaf9/0xc90 [ 2412.121020][ C0] __sock_sendmsg+0x219/0x270 [ 2412.125925][ C0] ____sys_sendmsg+0x505/0x830 [ 2412.130879][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 2412.135779][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 2412.140909][ C0] do_syscall_64+0xfa/0x3b0 [ 2412.145602][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.151682][ C0] [ 2412.154015][ C0] -> (&f_owner->lock){....}-{3:3} { [ 2412.159510][ C0] INITIAL USE at: [ 2412.163680][ C0] lock_acquire+0x120/0x360 [ 2412.170293][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 2412.177338][ C0] __f_setown+0x67/0x370 [ 2412.183754][ C0] do_fcntl+0x15ff/0x1910 [ 2412.190183][ C0] __se_sys_fcntl+0xc8/0x150 [ 2412.196886][ C0] do_syscall_64+0xfa/0x3b0 [ 2412.203493][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.211509][ C0] INITIAL READ USE at: [ 2412.216109][ C0] lock_acquire+0x120/0x360 [ 2412.223143][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2412.230971][ C0] send_sigurg+0x55/0x420 [ 2412.237828][ C0] sk_send_sigurg+0x6c/0x2e0 [ 2412.244964][ C0] queue_oob+0x699/0x8a0 [ 2412.251742][ C0] unix_stream_sendmsg+0xaf9/0xc90 [ 2412.259395][ C0] __sock_sendmsg+0x219/0x270 [ 2412.266619][ C0] ____sys_sendmsg+0x505/0x830 [ 2412.273914][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 2412.281122][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 2412.288587][ C0] do_syscall_64+0xfa/0x3b0 [ 2412.295643][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.304071][ C0] } [ 2412.306841][ C0] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2412.316027][ C0] ... acquired at: [ 2412.320095][ C0] lock_acquire+0x120/0x360 [ 2412.324809][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2412.330296][ C0] send_sigio+0x38/0x370 [ 2412.334735][ C0] kill_fasync+0x24d/0x4d0 [ 2412.339337][ C0] sock_wake_async+0x137/0x160 [ 2412.344282][ C0] sk_wake_async+0x184/0x280 [ 2412.349114][ C0] unix_release_sock+0x6d4/0xc60 [ 2412.354240][ C0] unix_release+0x92/0xd0 [ 2412.358755][ C0] sock_close+0xc0/0x240 [ 2412.363188][ C0] __fput+0x449/0xa70 [ 2412.367459][ C0] task_work_run+0x1d1/0x260 [ 2412.372325][ C0] get_signal+0x11c5/0x1310 [ 2412.377055][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 2412.382795][ C0] exit_to_user_mode_loop+0x75/0x110 [ 2412.388327][ C0] do_syscall_64+0x2bd/0x3b0 [ 2412.393102][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.399182][ C0] [ 2412.401511][ C0] -> (&new->fa_lock){....}-{3:3} { [ 2412.406837][ C0] INITIAL USE at: [ 2412.410923][ C0] lock_acquire+0x120/0x360 [ 2412.417359][ C0] _raw_write_lock_irq+0xa2/0xf0 [ 2412.424223][ C0] fasync_remove_entry+0xf1/0x1c0 [ 2412.431165][ C0] pipe_fasync+0xa9/0x1e0 [ 2412.437419][ C0] __fput+0x8a2/0xa70 [ 2412.443327][ C0] task_work_run+0x1d1/0x260 [ 2412.449841][ C0] exit_to_user_mode_loop+0xec/0x110 [ 2412.457051][ C0] do_syscall_64+0x2bd/0x3b0 [ 2412.463571][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.471392][ C0] INITIAL READ USE at: [ 2412.475907][ C0] lock_acquire+0x120/0x360 [ 2412.482773][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2412.490421][ C0] kill_fasync+0x199/0x4d0 [ 2412.497193][ C0] sock_wake_async+0x137/0x160 [ 2412.504307][ C0] sk_wake_async+0x184/0x280 [ 2412.511253][ C0] unix_release_sock+0x6d4/0xc60 [ 2412.518545][ C0] unix_release+0x92/0xd0 [ 2412.525237][ C0] sock_close+0xc0/0x240 [ 2412.531856][ C0] __fput+0x449/0xa70 [ 2412.538207][ C0] task_work_run+0x1d1/0x260 [ 2412.545158][ C0] get_signal+0x11c5/0x1310 [ 2412.552024][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 2412.559929][ C0] exit_to_user_mode_loop+0x75/0x110 [ 2412.567577][ C0] do_syscall_64+0x2bd/0x3b0 [ 2412.574518][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.582764][ C0] } [ 2412.585450][ C0] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2412.594320][ C0] ... acquired at: [ 2412.598371][ C0] lock_acquire+0x120/0x360 [ 2412.603067][ C0] _raw_read_lock_irqsave+0xaf/0x100 [ 2412.608545][ C0] kill_fasync+0x199/0x4d0 [ 2412.613149][ C0] evdev_pass_values+0x627/0xbd0 [ 2412.618322][ C0] evdev_events+0x1e6/0x340 [ 2412.623010][ C0] input_pass_values+0x288/0x890 [ 2412.628131][ C0] input_event_dispose+0x330/0x6b0 [ 2412.633434][ C0] input_inject_event+0x1fe/0x320 [ 2412.638651][ C0] evdev_write+0x2fc/0x480 [ 2412.643256][ C0] vfs_write+0x27e/0xa90 [ 2412.647719][ C0] ksys_write+0x145/0x250 [ 2412.652234][ C0] do_syscall_64+0xfa/0x3b0 [ 2412.656921][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.663020][ C0] [ 2412.665352][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 2412.671211][ C0] INITIAL USE at: [ 2412.675200][ C0] lock_acquire+0x120/0x360 [ 2412.681458][ C0] _raw_spin_lock+0x2e/0x40 [ 2412.687715][ C0] evdev_pass_values+0xb9/0xbd0 [ 2412.694319][ C0] evdev_events+0x1e6/0x340 [ 2412.700566][ C0] input_pass_values+0x288/0x890 [ 2412.707264][ C0] input_event_dispose+0x330/0x6b0 [ 2412.714152][ C0] input_inject_event+0x1fe/0x320 [ 2412.720954][ C0] evdev_write+0x2fc/0x480 [ 2412.727134][ C0] vfs_write+0x27e/0xa90 [ 2412.733142][ C0] ksys_write+0x145/0x250 [ 2412.739233][ C0] do_syscall_64+0xfa/0x3b0 [ 2412.745498][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.753145][ C0] } [ 2412.755752][ C0] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 2412.764114][ C0] ... acquired at: [ 2412.768013][ C0] lock_acquire+0x120/0x360 [ 2412.772708][ C0] _raw_spin_lock+0x2e/0x40 [ 2412.777411][ C0] evdev_pass_values+0xb9/0xbd0 [ 2412.782446][ C0] evdev_events+0x1e6/0x340 [ 2412.787136][ C0] input_pass_values+0x288/0x890 [ 2412.792344][ C0] input_event_dispose+0x330/0x6b0 [ 2412.797646][ C0] input_inject_event+0x1fe/0x320 [ 2412.802862][ C0] evdev_write+0x2fc/0x480 [ 2412.807471][ C0] vfs_write+0x27e/0xa90 [ 2412.811911][ C0] ksys_write+0x145/0x250 [ 2412.816442][ C0] do_syscall_64+0xfa/0x3b0 [ 2412.821127][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2412.827204][ C0] [ 2412.829532][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2412.835121][ C0] IN-SOFTIRQ-W at: [ 2412.839109][ C0] lock_acquire+0x120/0x360 [ 2412.845280][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2412.852141][ C0] input_event+0x7a/0xc0 [ 2412.858049][ C0] hidinput_hid_event+0x12d7/0x1c90 [ 2412.865103][ C0] hid_process_event+0x4be/0x620 [ 2412.865124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2412.871737][ C0] hid_report_raw_event+0xe91/0x16d0 [ 2412.878889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2412.885524][ C0] hid_input_report+0x43e/0x520 [ 2412.885565][ C0] hid_irq_in+0x47e/0x6d0 [ 2412.904943][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 2412.912104][ C0] dummy_timer+0x862/0x4550 [ 2412.918345][ C0] __hrtimer_run_queues+0x529/0xc60 [ 2412.925221][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 2412.932005][ C0] handle_softirqs+0x286/0x870 [ 2412.938442][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2412.944714][ C0] irq_exit_rcu+0x9/0x30 [ 2412.950632][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2412.957937][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2412.965588][ C0] pfn_valid+0x11f/0x490 [ 2412.971502][ C0] page_table_check_set+0x25/0x730 [ 2412.978284][ C0] copy_pmd_range+0x4262/0x7000 [ 2412.984810][ C0] copy_page_range+0xc46/0x1270 [ 2412.991350][ C0] dup_mmap+0xf57/0x1ac0 [ 2412.997259][ C0] copy_mm+0x13c/0x4b0 [ 2413.002996][ C0] copy_process+0x1706/0x3c00 [ 2413.009345][ C0] kernel_clone+0x224/0x7f0 [ 2413.015506][ C0] __x64_sys_clone+0x18b/0x1e0 [ 2413.021940][ C0] do_syscall_64+0xfa/0x3b0 [ 2413.028105][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2413.035678][ C0] INITIAL USE at: [ 2413.039594][ C0] lock_acquire+0x120/0x360 [ 2413.045686][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2413.052469][ C0] input_inject_event+0xab/0x320 [ 2413.058998][ C0] kbd_led_trigger_activate+0xbc/0x100 [ 2413.066171][ C0] led_trigger_set+0x52a/0x950 [ 2413.072556][ C0] led_trigger_set_default+0x260/0x2a0 [ 2413.079592][ C0] led_classdev_register_ext+0x73d/0x930 [ 2413.086795][ C0] input_leds_connect+0x517/0x790 [ 2413.093396][ C0] input_register_device+0xcee/0x10b0 [ 2413.100340][ C0] atkbd_connect+0x70e/0x9c0 [ 2413.106508][ C0] serio_driver_probe+0x7f/0xa0 [ 2413.112933][ C0] really_probe+0x26a/0x9a0 [ 2413.119122][ C0] __driver_probe_device+0x18c/0x2f0 [ 2413.125991][ C0] driver_probe_device+0x4f/0x430 [ 2413.132593][ C0] __driver_attach+0x452/0x700 [ 2413.138941][ C0] bus_for_each_dev+0x230/0x2b0 [ 2413.145442][ C0] serio_handle_event+0x1a2/0x860 [ 2413.152042][ C0] process_scheduled_works+0xade/0x17b0 [ 2413.159180][ C0] worker_thread+0x8a0/0xda0 [ 2413.165355][ C0] kthread+0x70e/0x8a0 [ 2413.171001][ C0] ret_from_fork+0x3fc/0x770 [ 2413.177174][ C0] ret_from_fork_asm+0x1a/0x30 [ 2413.183512][ C0] } [ 2413.186032][ C0] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2413.195091][ C0] ... acquired at: [ 2413.198899][ C0] mark_lock+0x11b/0x190 [ 2413.203355][ C0] __lock_acquire+0x680/0xd20 [ 2413.208222][ C0] lock_acquire+0x120/0x360 [ 2413.212914][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2413.218305][ C0] input_event+0x7a/0xc0 [ 2413.222734][ C0] hidinput_hid_event+0x12d7/0x1c90 [ 2413.228124][ C0] hid_process_event+0x4be/0x620 [ 2413.233244][ C0] hid_report_raw_event+0xe91/0x16d0 [ 2413.238750][ C0] hid_input_report+0x43e/0x520 [ 2413.243822][ C0] hid_irq_in+0x47e/0x6d0 [ 2413.248342][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 2413.253902][ C0] dummy_timer+0x862/0x4550 [ 2413.258598][ C0] __hrtimer_run_queues+0x529/0xc60 [ 2413.263999][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 2413.269300][ C0] handle_softirqs+0x286/0x870 [ 2413.274365][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2413.279149][ C0] irq_exit_rcu+0x9/0x30 [ 2413.283584][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2413.289410][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2413.295572][ C0] pfn_valid+0x11f/0x490 [ 2413.300010][ C0] page_table_check_set+0x25/0x730 [ 2413.305319][ C0] copy_pmd_range+0x4262/0x7000 [ 2413.310361][ C0] copy_page_range+0xc46/0x1270 [ 2413.315405][ C0] dup_mmap+0xf57/0x1ac0 [ 2413.319837][ C0] copy_mm+0x13c/0x4b0 [ 2413.324100][ C0] copy_process+0x1706/0x3c00 [ 2413.328988][ C0] kernel_clone+0x224/0x7f0 [ 2413.333674][ C0] __x64_sys_clone+0x18b/0x1e0 [ 2413.338621][ C0] do_syscall_64+0xfa/0x3b0 [ 2413.343309][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2413.349394][ C0] [ 2413.351727][ C0] [ 2413.351727][ C0] stack backtrace: [ 2413.357633][ C0] CPU: 0 UID: 0 PID: 22665 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 2413.357660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2413.357673][ C0] Call Trace: [ 2413.357708][ C0] [ 2413.357719][ C0] dump_stack_lvl+0x189/0x250 [ 2413.357755][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2413.357784][ C0] ? __pfx__printk+0x10/0x10 [ 2413.357808][ C0] print_irq_inversion_bug+0x1d2/0x1e0 [ 2413.357840][ C0] mark_lock_irq+0x35f/0x390 [ 2413.357872][ C0] mark_lock+0x11b/0x190 [ 2413.357898][ C0] __lock_acquire+0x680/0xd20 [ 2413.357926][ C0] ? input_event+0x7a/0xc0 [ 2413.357954][ C0] lock_acquire+0x120/0x360 [ 2413.357983][ C0] ? input_event+0x7a/0xc0 [ 2413.358012][ C0] ? __lock_acquire+0xab9/0xd20 [ 2413.358038][ C0] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2413.358066][ C0] ? input_event+0x7a/0xc0 [ 2413.358092][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 2413.358118][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2413.358139][ C0] input_event+0x7a/0xc0 [ 2413.358168][ C0] hidinput_hid_event+0x12d7/0x1c90 [ 2413.358191][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2413.358226][ C0] ? __pfx_hidinput_hid_event+0x10/0x10 [ 2413.358249][ C0] ? __wake_up_common_lock+0x190/0x1f0 [ 2413.358319][ C0] hid_process_event+0x4be/0x620 [ 2413.358344][ C0] hid_report_raw_event+0xe91/0x16d0 [ 2413.358384][ C0] hid_input_report+0x43e/0x520 [ 2413.358434][ C0] hid_irq_in+0x47e/0x6d0 [ 2413.358460][ C0] __usb_hcd_giveback_urb+0x417/0x690 [ 2413.358482][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 2413.358504][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 2413.358527][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 2413.358547][ C0] dummy_timer+0x862/0x4550 [ 2413.358593][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2413.358613][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2413.358631][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 2413.358650][ C0] __hrtimer_run_queues+0x529/0xc60 [ 2413.358687][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2413.358714][ C0] ? read_tsc+0x9/0x20 [ 2413.358737][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 2413.358768][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 2413.358797][ C0] handle_softirqs+0x286/0x870 [ 2413.358827][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 2413.358855][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2413.358883][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2413.358926][ C0] __irq_exit_rcu+0xca/0x1f0 [ 2413.358952][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2413.358987][ C0] irq_exit_rcu+0x9/0x30 [ 2413.359012][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2413.359041][ C0] [ 2413.359048][ C0] [ 2413.359056][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2413.359077][ C0] RIP: 0010:pfn_valid+0x11f/0x490 [ 2413.359105][ C0] Code: 74 7d e8 b4 7f 93 ff 4d 85 ff 75 11 e8 aa 7f 93 ff eb 3d e8 a3 7f 93 ff 4d 85 ff 74 ef 4d 89 fd 49 c1 ed 03 43 80 7c 25 00 00 <74> 08 4c 89 ff e8 37 cc f4 ff 49 8b 2f 48 89 ee 48 83 e6 02 31 ff [ 2413.359123][ C0] RSP: 0018:ffffc9000be47350 EFLAGS: 00000246 [ 2413.359141][ C0] RAX: ffffffff822cce3c RBX: ffffffff822ccdfa RCX: ffff88806da85a00 [ 2413.359156][ C0] RDX: 0000000000000000 RSI: ffffffff8be1af60 RDI: ffffffff8be1af20 [ 2413.359170][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822ccdfa [ 2413.359182][ C0] R10: dffffc0000000000 R11: fffff940001a3831 R12: dffffc0000000000 [ 2413.359196][ C0] R13: 1ffff11027fff588 R14: 0000000000034706 R15: ffff88813fffac40 [ 2413.359212][ C0] ? pfn_valid+0xba/0x490 [ 2413.359235][ C0] ? pfn_valid+0xba/0x490 [ 2413.359257][ C0] ? pfn_valid+0xfc/0x490 [ 2413.359285][ C0] page_table_check_set+0x25/0x730 [ 2413.359309][ C0] ? __page_table_check_ptes_set+0x290/0x2f0 [ 2413.359335][ C0] copy_pmd_range+0x4262/0x7000 [ 2413.359361][ C0] ? arch_stack_walk+0xfc/0x150 [ 2413.359425][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 2413.359458][ C0] copy_page_range+0xc46/0x1270 [ 2413.359486][ C0] ? __lock_acquire+0xab9/0xd20 [ 2413.359519][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 2413.359549][ C0] ? up_write+0x1c4/0x420 [ 2413.359565][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2413.359622][ C0] dup_mmap+0xf57/0x1ac0 [ 2413.359654][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2413.359686][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2413.359757][ C0] ? mm_init+0xca7/0xf00 [ 2413.359786][ C0] copy_mm+0x13c/0x4b0 [ 2413.359815][ C0] copy_process+0x1706/0x3c00 [ 2413.359850][ C0] ? copy_process+0x97f/0x3c00 [ 2413.359882][ C0] ? __pfx_copy_process+0x10/0x10 [ 2413.359911][ C0] ? __handle_mm_fault+0x1144/0x5620 [ 2413.359935][ C0] kernel_clone+0x224/0x7f0 [ 2413.359953][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2413.359985][ C0] __x64_sys_clone+0x18b/0x1e0 [ 2413.360004][ C0] ? count_memcg_event_mm+0x21/0x260 [ 2413.360024][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 2413.360050][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 2413.360104][ C0] ? do_syscall_64+0xbe/0x3b0 [ 2413.360121][ C0] do_syscall_64+0xfa/0x3b0 [ 2413.360149][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2413.360175][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2413.360193][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2413.360213][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2413.360231][ C0] RIP: 0033:0x7f758d385193 [ 2413.360248][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 2413.360264][ C0] RSP: 002b:00007fff3dbefc88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2413.360282][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f758d385193 [ 2413.360295][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2413.360306][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2413.360316][ C0] R10: 000055555d6147d0 R11: 0000000000000246 R12: 0000000000000000 [ 2413.360328][ C0] R13: 00000000000927c0 R14: 000000000024cb87 R15: 00007fff3dbefe20 [ 2413.360347][ C0] [ 2413.905044][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2413.918724][T30256] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 2413.921933][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2414.011300][ T5813] usb 6-1: USB disconnect, device number 57 [ 2414.027440][T27362] usb 9-1: USB disconnect, device number 22 [ 2414.035773][T27362] usblp1: removed [ 2414.353843][T27354] usb 4-1: USB disconnect, device number 66 [ 2414.945070][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2414.952175][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2415.985102][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2415.992193][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2417.025124][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2417.032208][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2418.075020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2418.082115][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2419.105034][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2419.112150][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2420.145058][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2420.152155][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2421.185049][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 2421.192265][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available