last executing test programs: 19m13.288548457s ago: executing program 3 (id=966): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffda9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400008004d75006f00650000010c9078ac1414aae0000001071f86e0000001640101027f000001ac1414aa00000000e0000001ac1414bb006861b1774d337116ae9c9a8e4e"], 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) preadv(r4, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r6 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x10001) openat$audio(0xffffffffffffff9c, 0x0, 0x220002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 19m13.257356732s ago: executing program 3 (id=967): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) r3 = syz_open_dev$video(0x0, 0x81, 0xa082) r4 = dup(r3) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x20}, 0x20, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 19m11.925982256s ago: executing program 3 (id=968): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffda9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400008004d75006f00650000010c9078ac1414aae0000001071f86e0000001640101027f000001ac1414aa00000000e0000001ac1414bb006861b1774d337116ae9c9a8e4e56a64920d2aeaa49a4f4e5e1b2d675d2db3160f511c896b08c66674e6f208992f74eefa862bb05d29c7302c6a49041a258ffc97317ec61bdefbfb4238b9d1ad268975c44c710dcd283a7a710834ff778382273"], 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) preadv(r4, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r6 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x10001) openat$audio(0xffffffffffffff9c, 0x0, 0x220002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 19m11.770147526s ago: executing program 3 (id=969): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240400c4}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2001, 0x0) read(r3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{&(0x7f0000000240)=@in={0x2, 0x0, @multicast2}, 0x80, 0x0, 0x0, &(0x7f00000022c0)=""/170, 0xaa}, 0xffff8720}, {{&(0x7f0000002380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/229, 0xe5}, {&(0x7f0000003500)=""/7, 0x7}, {&(0x7f0000003540)=""/161, 0xa1}, {&(0x7f0000003600)=""/64, 0x40}, {0x0}, {&(0x7f00000036c0)=""/241, 0xf1}], 0x7, &(0x7f0000003800)=""/64, 0x40}, 0xffffff90}, {{0x0, 0x0, &(0x7f00000039c0)=[{0x0}, {&(0x7f0000003900)=""/158, 0x9e}], 0x2, &(0x7f0000003a00)=""/133, 0x85}, 0xcd6}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x1a5c}], 0x4, 0x12060, &(0x7f0000004f80)={0x0, 0x989680}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x7}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfffe, 0x5, @mcast2, 0x9}, 0x1c) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r1, {0xffff, 0x8}, {0xfff1, 0xa}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}]}, {0x0, [0x2e, 0x0, 0x5f, 0x2e]}}, 0x0, 0x42, 0x0, 0x1, 0x7ea}, 0x28) 19m10.399960457s ago: executing program 3 (id=971): syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00002ba000/0x1000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_GETDRIVER(r7, 0x41045508, 0x0) 19m8.659838408s ago: executing program 3 (id=976): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x2, 0x0, 0xabee, 0x0, 0x0, 0x20, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f0000000100)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007bc0), 0x0, 0x20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0185649, &(0x7f0000000700)={0x4, 0x5, 0x3, 0xffffffffffffffff, 0x980912, &(0x7f00000006c0)={0xf0f043, 0x80000000, '\x00', @value64=0x8000000000ee}}) lremovexattr(0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='vivid.0', 0x7) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(r6, &(0x7f0000000140)=r2, 0x12) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00a502000000e1d10900b41bf8df8f2f00000000140012800b000100627269646765000004000280"], 0x34}}, 0x20000000) 18m53.537128296s ago: executing program 32 (id=976): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x2, 0x0, 0xabee, 0x0, 0x0, 0x20, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f0000000100)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007bc0), 0x0, 0x20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0185649, &(0x7f0000000700)={0x4, 0x5, 0x3, 0xffffffffffffffff, 0x980912, &(0x7f00000006c0)={0xf0f043, 0x80000000, '\x00', @value64=0x8000000000ee}}) lremovexattr(0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='vivid.0', 0x7) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(r6, &(0x7f0000000140)=r2, 0x12) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00a502000000e1d10900b41bf8df8f2f00000000140012800b000100627269646765000004000280"], 0x34}}, 0x20000000) 18m22.834811965s ago: executing program 2 (id=1068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$join(0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f4}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() getpriority(0x0, r2) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x118f}, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r3) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f00000012c0)=0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) mremap(&(0x7f0000691000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000908000/0x1000)=nil) io_setup(0x2007, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000140), 0x1, 0x4000) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ba9000/0x2000)=nil, 0x2000, 0x4d0a}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x300, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18m18.304456826s ago: executing program 2 (id=1076): r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000080)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x75, 0x109301) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0xfffffffffffffcf5, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgctl$IPC_RMID(0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x66032, 0xffffffffffffffff, 0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=r4], 0x0) 18m15.764305957s ago: executing program 2 (id=1080): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffda9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4002) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000240)=""/191) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100400008004d75006f00650000010c9078ac1414aae0000001071f86e0000001640101027f000001ac1414aa00000000e0000001ac1414bb006861b1774d337116ae9c9a8e4e"], 0x0) openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) preadv(r4, &(0x7f00000039c0)=[{&(0x7f0000000140)=""/142, 0x8e}], 0x1, 0x4, 0x3) r6 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x10001) openat$audio(0xffffffffffffff9c, 0x0, 0x220002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 18m15.720597156s ago: executing program 2 (id=1081): syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4386dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2f95000090780000"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') chdir(&(0x7f0000000280)='./file0\x00') r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x4, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x20000000000000, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) syz_usbip_server_init(0x3) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000380)}}], 0x2, 0x0) 18m13.77122803s ago: executing program 2 (id=1083): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x200, @remote}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x8000, 0x42, 0x235}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) recvmmsg(r2, &(0x7f0000006c80)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f0000000340)=""/32, 0x20}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/192, 0xc0}], 0x5, &(0x7f0000000880)=""/241, 0xf1}, 0x8}, {{0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000980)=""/182, 0xb6}, {&(0x7f0000000a40)=""/35, 0x23}, {&(0x7f0000000a80)}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/75, 0x4b}, {&(0x7f0000002840)=""/70, 0x46}, {&(0x7f00000028c0)=""/192, 0xc0}, {&(0x7f00000053c0)=""/4096, 0x1000}], 0x8, &(0x7f0000006400)=""/77, 0x4d}, 0x5}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f0000006480)=""/254, 0xfe}, {&(0x7f0000006580)=""/161, 0xa1}, {&(0x7f0000006640)=""/250, 0xfa}, {&(0x7f0000006740)=""/59, 0x3b}, {&(0x7f0000006780)=""/20, 0x14}, {&(0x7f00000067c0)=""/29, 0x1d}, {&(0x7f0000006800)=""/39, 0x27}, {&(0x7f0000006840)=""/115, 0x73}], 0x8, &(0x7f0000006900)=""/88, 0x58}, 0xa}, {{0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000006980)=""/21, 0x15}, {&(0x7f00000069c0)=""/27, 0x1b}, {&(0x7f0000006a00)=""/16, 0x10}, {&(0x7f0000006a40)}, {&(0x7f0000006a80)=""/76, 0x4c}, {&(0x7f0000006b00)=""/237, 0xed}, {&(0x7f0000006c00)=""/27, 0x1b}], 0x7}, 0x9}], 0x4, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4000001) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r5, &(0x7f0000003380)={0x2020}, 0x2020) 18m12.099596505s ago: executing program 2 (id=1087): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x50) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000a29453206dccf484fc4c794388339b689091801ce5e5d08a1804d7f24744f48f09ce8db2e8be65997097fd07fff93971c516006c4c12a80385094d225469139097d728b4dddc4fa13c7b158cd61811e7b2268b220a0981f7d8600815f405ba18513290fb4388c4fcccaa48cd93b412cffc7e3c5d785fe75d7dfc16c1cfe3ee9dc59dd7607f583dbc3719290e4aed3a898013205b9551983d8ca37e6522f6e661cd1b5314", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r1, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000780)=""/30) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) 17m57.198300924s ago: executing program 33 (id=1087): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000100)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x50) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000a29453206dccf484fc4c794388339b689091801ce5e5d08a1804d7f24744f48f09ce8db2e8be65997097fd07fff93971c516006c4c12a80385094d225469139097d728b4dddc4fa13c7b158cd61811e7b2268b220a0981f7d8600815f405ba18513290fb4388c4fcccaa48cd93b412cffc7e3c5d785fe75d7dfc16c1cfe3ee9dc59dd7607f583dbc3719290e4aed3a898013205b9551983d8ca37e6522f6e661cd1b5314", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r1, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000780)=""/30) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r8, 0x0}]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) sendmsg$nl_route(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) 15.855370073s ago: executing program 1 (id=4263): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) eventfd2(0x5, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x100, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r6, 0x3ff}}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r8, 0x180000000) 14.108419102s ago: executing program 1 (id=4268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x2, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b", 0xcc) r6 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYRES16=r6, @ANYRES32=r4, @ANYRESDEC, @ANYRES8=r5, @ANYRES64=r3, @ANYRES64=r3], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000009060108000000d200000000070000000900020073797a310000000193f128abf1000700000004000780000000f096d2b0961d688e51db1b38"], 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 11.866439147s ago: executing program 0 (id=4271): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'ipvlan0\x00', {0x2}, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000000)='fd', 0x0, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x7, 0x23}, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={0x0, @in={{0x2, 0x4e22, @loopback}}, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x8, 0x4}, 0x9c) pread64(r0, 0x0, 0xad13a4d8125fe5f5, 0x400) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r7, 0x0, 0x0) 11.689970209s ago: executing program 0 (id=4272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x2, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5a", 0xcd) r6 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYRES16=r6, @ANYRES32=r4, @ANYRESDEC, @ANYRES8=r5, @ANYRES64=r3, @ANYRES64=r3], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000009060108000000d200000000070000000900020073797a310000000193f128abf1000700000004000780000000f096d2b0961d688e51db1b38"], 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 11.663980535s ago: executing program 5 (id=4274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r4, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @time={0x3, 0x3}, {0xff}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c2bbd70000000000002000000", @ANYRES32=r5, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x200080c5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000380), 0x3, 0x400000) ioctl$I2C_PEC(r8, 0x708, 0x4) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 11.102691128s ago: executing program 1 (id=4276): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r7) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, r8, r7) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r9, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x3, 0x1}]}]}, {0x0, [0x30, 0x61, 0x61, 0x5f, 0x61, 0x2e, 0x30, 0x5f]}}, 0x0, 0x3a, 0x0, 0x7, 0x6}, 0x28) 9.105349142s ago: executing program 0 (id=4278): r0 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x3865, 0x100, 0x3, 0x1d}, 0x0, 0x0, &(0x7f0000000000)) r3 = memfd_create(0x0, 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001", @ANYRES32=r4], 0x75) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "a81ef5037a313d882834a7e8543a38267bdcc88850c8d70b5b795116fd55e6a21c2eec400941ac9bb951f967a050f260b917f60c9304e1cba8fb5cd69d56a69f", 0x2a}, 0x48, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000c100"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000700), 0xb, r7}, 0x38) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, r5, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0xd34ad000) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x990, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x4, 0x60, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xb9, 0x5, 0x3, {0xa, 0x25, 0x25, 0x200, 0x1, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x2, 0xd4, {0xa, 0x25, 0x25, 0x7, 0x1, 0x5}}}}}}}}]}}, 0x0) ioctl$EVIOCRMFF(r8, 0x83c0550b, &(0x7f0000000140)=0xe) syz_io_uring_setup(0x34b8, 0x0, 0x0, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) 8.589304184s ago: executing program 4 (id=4279): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r8, 0x0, 0x100000000000000}, 0x38) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 8.177947791s ago: executing program 1 (id=4280): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000200)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r6, 0x0, 0x0}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r7}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r7, 0x0, 0x100000000000000}, 0x38) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 7.965248446s ago: executing program 5 (id=4281): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) sched_getparam(r2, &(0x7f0000000340)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0xb00}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, 0x8) r5 = dup2(r3, r0) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 7.652809376s ago: executing program 0 (id=4282): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x1411, 0x1, 0x70bd29, 0x20003, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a320000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000008580)=[{0x4, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x2, 0x0, 0x0}, {0x3, 0x0, 0x0}, {0x5, 0x1, 0x0}, {0x2, 0x0, 0x0}, {0x4, 0x0, 0x0}, {0x8, 0x0, 0x0}, {0x9, 0x1, 0x0}], 0x9) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840) 6.85357294s ago: executing program 4 (id=4283): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r2 = accept4(0xffffffffffffffff, &(0x7f0000000380)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x80800) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000480)={0x4bc, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7fffffff}, 0x2, 0x31, 0x1, 0x1, 0x6, 'syz0\x00', "3f3dc8de89a0fdd75584f7853c2ccba43675a00469b4e9ce561e2a5f6ee7842b", "ffbe46cc321af43e4f5809f086de62956e094a46b9b2c217b30674e842755360", [{0x167c, 0x0, {0x2, 0x6}}, {0xfffd, 0x100, {0x3, 0x8001}}, {0x8000, 0xe6d5, {0x3, 0x9}}, {0x32a1, 0x1, {0x1, 0x7}}, {0x7, 0x1000, {0x3, 0xfffffff9}}, {0x4, 0x81, {0x3, 0x5}}, {0x7ff, 0xf, {0x2, 0x8}}, {0x401, 0xe229, {0x0, 0x483}}, {0x1, 0x9, {0x2, 0x2}}, {0x401, 0xfffb, {0x3, 0x8}}, {0x1000, 0x24}, {0x8, 0x7, {0x2, 0x3}}, {0xb, 0x0, {0x2, 0x8000}}, {0x6, 0x7, {0x3, 0xa91}}, {0x28, 0x2, {0x0, 0x78d}}, {0x4, 0xa, {0x0, 0xa5}}, {0x5, 0x9, {0x0, 0xb7}}, {0x3, 0x1ff, {0x1, 0x401}}, {0x3, 0x2, {0x1, 0x5}}, {0xce27, 0x8}, {0x4, 0x9, {0x2, 0xfffffffc}}, {0x5c00, 0x2, {0x0, 0x4}}, {0x1000, 0x76f, {0x1, 0x81}}, {0x9, 0x401, {0x0, 0x5}}, {0x3, 0xa, {0x1, 0x2}}, {0xfff9, 0xfe78, {0x3, 0x1dde}}, {0x2b8, 0x4, {0x1, 0xcf}}, {0x8, 0x2, {0x1, 0x411}}, {0x6, 0xc, {0x2, 0x9}}, {0x3, 0x5, {0x0, 0x10000}}, {0x6, 0x6, {0x3, 0xb83}}, {0x6, 0x9, {0x2, 0x9}}, {0xef8e, 0xfffb, {0x1, 0xffff}}, {0x6, 0xd519, {0x3}}, {0x1, 0x8, {0x1, 0x4}}, {0x2, 0x6, {0x0, 0x80}}, {0x5, 0x1, {0x1, 0x969}}, {0x7, 0x9, {0x3, 0x4}}, {0xf, 0xe0b, {0x0, 0x8b}}, {0x5, 0xaa3c, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x3, 0x9, 0x4, 0x8, 0x27, 'syz0\x00', "2cbd8ff7ee1f79bc8e4e947da3c620ffca3cd9c6c84193d0327c360a6fc86a45", "ecb24079b306a40d31f6c009bd7b2576fbfd36c5a259952ac1e5f28f414cef29", [{0x4, 0x2, {0x0, 0x2}}, {0x7ff, 0x5, {0x0, 0x66}}, {0x8, 0x9, {0x1, 0x6}}, {0x2, 0x8001, {0x1, 0x1}}, {0x53, 0x9, {0x3, 0x7f}}, {0x238, 0x8, {0x3, 0x5}}, {0x8, 0x9, {0x0, 0x5}}, {0xffff, 0x7fff, {0x0, 0x2}}, {0x50c, 0xfcd, {0x2, 0xffffff33}}, {0x1, 0x4, {0x3, 0x7}}, {0xf01, 0x0, {0x0, 0x9}}, {0x1, 0x1, {0x3, 0x9}}, {0x2, 0x81, {0x3}}, {0x9, 0x6e, {0x2, 0x6}}, {0x80, 0x1, {0x2, 0x7}}, {0xf, 0x1, {0x2, 0x6}}, {0x4, 0x4, {0x2, 0x5}}, {0xfff9, 0x9, {0x3, 0x1}}, {0x5d21, 0x1e88, {0x2, 0x3}}, {0xbc15, 0x6, {0x3, 0xfffffffc}}, {0x3d04, 0x8, {0x3, 0x8000}}, {0x14, 0x40, {0x0, 0x48}}, {0xed8, 0xc, {0x0, 0x8}}, {0xfffb, 0x7}, {0x6, 0x3ff, {0x1, 0x6}}, {0x3, 0x7, {0x3, 0xfffffffc}}, {0x1, 0x0, {0x3, 0x62b728b2}}, {0x2, 0x4, {0x3, 0x71fe}}, {0x8, 0x7, {0x1, 0xe814}}, {0x8, 0x4, {0x1, 0x8e}}, {0x6, 0x2, {0x1, 0x7fff}}, {0x0, 0x200, {0x1, 0xffff0000}}, {0xfffa, 0x0, {0x3, 0x858}}, {0x9, 0x8001, {0x1, 0x7}}, {0x0, 0x3, {0x1, 0x7}}, {0x9, 0xcfb, {0x3, 0x3341ce0a}}, {0x6, 0x73, {0x0, 0xf}}, {0x79, 0x482, {0x3, 0xe1c}}, {0x4, 0x5, {0x0, 0x3}}, {0x24, 0x5, {0x3, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x880}, 0x20004085) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf2b}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9b141d1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)) syz_emit_ethernet(0x4a, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) chroot(&(0x7f00000000c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2acd0da, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 6.773009035s ago: executing program 0 (id=4284): socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) r5 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x1, 0xa) fchdir(r10) r11 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r11, 0x2007ffb) r12 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r12, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x181500, 0x0) 6.384090993s ago: executing program 5 (id=4285): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x1007, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16, @ANYRES8=0x0, @ANYRESOCT=r3, @ANYBLOB]) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) 5.090356892s ago: executing program 4 (id=4286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x2, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5a", 0xcd) r6 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYRES16=r6, @ANYRES32=r4, @ANYRESDEC, @ANYRES8=r5, @ANYRES64=r3, @ANYRES64=r3], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000009060108000000d200000000070000000900020073797a310000000193f128abf1000700000004000780000000f096d2b0961d688e51db1b38"], 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 4.957721185s ago: executing program 1 (id=4287): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006405000000907800000000e000000211009078e0000001000000020000000400000000dfb2918e359b232258398530807d624c0b2ba76d202dd0a458daa420eb195b349fa06b"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x10480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7dc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x20) write(r6, &(0x7f0000000380)='100000', 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x62040200) 4.09065586s ago: executing program 5 (id=4288): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) getsockopt$sock_timeval(r7, 0x1, 0x43, 0x0, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r8 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 3.483208614s ago: executing program 4 (id=4289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@gettaction={0xa0, 0x32, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd1}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x49e9}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x61bf}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0x1f, 0x6, 0xca11, 0xffff}}, @TCA_GRED_LIMIT={0x8, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090210000904430002"], 0x0) syz_usb_ep_read(r5, 0x5, 0xb4, &(0x7f0000000200)=""/180) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r7, &(0x7f0000001200)="80006466d3805699", 0x8, 0x400c0d4, &(0x7f00000004c0)={0xa, 0x4e22, 0x5b01dc48, @mcast2, 0xb22}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r8, 0x0, 0xe, 0x0, &(0x7f0000000d00)="e87b7385eb488997050a35a3e13f", 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYRES64=r2, @ANYRESOCT=r1, @ANYBLOB="d2ee98cf52e925250f02ad9008d54dae2b027267d28a4ae3099ad064efcd5736c67a529df266501425d87c835e53eb0b78822516c3e43b7cf090e1b2ab272be8fe64704a3e45b9705e37b9dc676d81a376f558dc4b441d43b616a5e2aac97197917975f4f7348cf9743f15f9bd4fd6b80a955561b098ddbce3ea19189068585f27679d8a324f7d6339dd618c5afeea93f5a691b655f78e7ab5a49486400c58bd5b6d46ed79233184230566144542d0a6fcc272741d56b433c931d9987917ef520651659aa93ecf1132f0b6411ae6e93b6d538ec5011600dde3", @ANYRESHEX=r7], 0x5c}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) personality(0xfe47fef9f5ff7379) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r12 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c001a00", @ANYRES16=r11, @ANYBLOB="170928bd7000000000000100ffff0500070000000000080009000100000008000a0000000000060002000000000008001700", @ANYRES32=r12, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r11, 0x400, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) 1.347425893s ago: executing program 4 (id=4290): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r8, 0x0, 0x100000000000000}, 0x38) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 606.179762ms ago: executing program 5 (id=4291): r0 = socket(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018808000100", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1412, 0x1, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44040000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r5, 0x1) writev(r5, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000002e00090067bd7000fddbdf25040000001400df00ff01000000000008f534f3b0d45c0000000000000001100082800c00c9000700"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010026"], &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0x1}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r8, 0x29, 0x10, 0x0, &(0x7f0000000600)) close(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000ae8ff030900010073797a310000000008000540000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000000000140000001100010000000000000000000100000a00000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) close(0x3) socket$inet_sctp(0x2, 0x1, 0x84) 511.453973ms ago: executing program 0 (id=4292): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000808500000082000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r8, 0x0, 0x100000000000000}, 0x38) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 449.811731ms ago: executing program 1 (id=4293): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0xc0a45320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r3 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt(0xffffffffffffffff, 0x2, 0x5, &(0x7f0000000580)="eb5130ad59c9be7ec4a1cba93b7a4ea4e2a440163e9440f67b913ad994d871fc2c9bbffc5e0400fa147b09b091646ceca62282836d3bbdcf6c6696bf7e76dd60903efb44fbe686f8f51792eff2f2134b7cb9168d9089123098d8f53fbb102ea52668dd36039a0aa52402a223d11a04912ad5c90f9c02067b4ebe94dba5966a5062e63f0fbe5ce8e906a204e1522bba23bed5a16c34864417d27a49df76c4316766b90e19e0b32ed7e6f27ca89ccc24b1befef00678522f270e045c8dd9675b1e6c2e04254b7ac4fd4a15b96b5a", 0xcd) r6 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYRES16=r6, @ANYRES32=r4, @ANYRESDEC, @ANYRES8=r5, @ANYRES64=r3, @ANYRES64=r3], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c00000009060108000000d200000000070000000900020073797a310000000193f128abf1000700000004000780000000f096d2b0961d688e51db1b38"], 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 28.542316ms ago: executing program 4 (id=4294): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x3, 0x2003) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1d) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100), 0x0) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) open(0x0, 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = dup2(r7, r7) write$vhost_msg_v2(r8, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/106, 0x6a, 0x0, 0x2, 0x2}}, 0x48) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 0s ago: executing program 5 (id=4302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='usbip-vudc\x00', 0xa) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/u\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000780)='pcspkr\x00', 0x6) syz_open_dev$video(&(0x7f0000000800), 0x10, 0x0) r2 = syz_open_dev$video(&(0x7f0000000800), 0x11, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000840)={0x0, 0x56595559}) kernel console output (not intermixed with test programs): 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1287.915185][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1287.923507][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1287.931342][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1287.935987][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1287.939954][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1287.943870][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1287.948423][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1287.961112][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1287.970294][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1287.974380][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1287.978001][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1287.984933][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1287.989310][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1287.992951][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1288.003245][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1288.003912][T21573] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1288.007944][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1288.014430][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1288.018880][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1288.023199][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1288.027169][T18832] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1288.030867][T18832] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1288.035374][T18832] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1288.040563][T18832] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1288.044114][T18832] usb 10-1: Product: syz [ 1288.045942][T18832] usb 10-1: Manufacturer: syz [ 1288.047933][T18832] usb 10-1: SerialNumber: syz [ 1288.052333][T18832] usb 10-1: config 0 descriptor?? [ 1288.054206][T21573] binder: 21571:21573 ioctl c0306201 80000040 returned -14 [ 1288.061431][T18832] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 1288.072631][T21573] ublk2: read batch cmd buffer failed [ 1288.075391][T21573] ublk2: read batch cmd buffer failed [ 1288.246094][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3568'. [ 1288.686233][T21565] veth0_vlan: left allmulticast mode [ 1288.877122][ T40] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1288.921009][ T9854] usb 10-1: USB disconnect, device number 32 [ 1288.928515][ T9854] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 1289.041069][ T40] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1289.047490][ T40] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1289.061539][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.066408][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.071379][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.075682][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.079573][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.084029][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.088501][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.092543][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.097268][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.104130][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.108513][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.113063][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.118030][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.121787][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.126356][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.130890][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.134587][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.139467][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.143879][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.148058][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.152605][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.156668][ T40] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1289.160754][ T40] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1289.165407][ T40] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1289.172935][ T40] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1289.175805][ T40] usb 6-1: Product: syz [ 1289.177388][ T40] usb 6-1: Manufacturer: syz [ 1289.178912][ T40] usb 6-1: SerialNumber: syz [ 1289.182045][ T40] usb 6-1: config 0 descriptor?? [ 1289.193521][ T40] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1289.453167][T21579] tipc: Resetting bearer [ 1289.544757][T21579] veth0_vlan: left allmulticast mode [ 1289.629585][ T40] lo speed is unknown, defaulting to 1000 [ 1289.632443][ T40] syz2: Port: 1 Link DOWN [ 1289.699045][T21589] pim6reg: entered allmulticast mode [ 1289.772474][T21586] team0: entered allmulticast mode [ 1289.774937][T21586] team_slave_0: entered allmulticast mode [ 1289.778003][T21586] team_slave_1: entered allmulticast mode [ 1289.780644][T21586] dummy0: entered allmulticast mode [ 1289.836715][T21586] team0: left allmulticast mode [ 1289.839330][T21586] team_slave_0: left allmulticast mode [ 1289.841858][T21586] team_slave_1: left allmulticast mode [ 1289.844328][T21586] dummy0: left allmulticast mode [ 1289.848444][T21586] pim6reg: left allmulticast mode [ 1289.975057][T18832] usb 6-1: USB disconnect, device number 70 [ 1289.992288][T18832] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1290.012643][T21580] Process accounting resumed [ 1290.316146][T21601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1291.970242][T21620] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3576'. [ 1292.179008][T21591] Process accounting resumed [ 1292.653658][T21632] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3579'. [ 1293.611583][T21641] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3582'. [ 1293.837229][T21647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3586'. [ 1293.890764][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3585'. [ 1293.967636][T18832] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1294.124533][T18832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1294.130073][T18832] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1294.135221][T18832] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1294.139273][T18832] usb 9-1: can't read configurations, error -71 [ 1294.794952][T21659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1295.333233][ T5747] Bluetooth: hci5: unexpected event for opcode 0x0428 [ 1295.400925][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1295.404879][T21668] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1295.408881][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1295.412685][T21668] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1295.417126][T21668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1295.675550][T21673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1297.103145][T21687] openvswitch: netlink: Message has 512 unknown bytes. [ 1297.252070][T21691] veth0_vlan: left promiscuous mode [ 1297.253817][T21691] veth0_vlan: entered promiscuous mode [ 1297.256092][T21691] veth0_vlan: entered allmulticast mode [ 1297.437017][T17120] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1297.593360][T17120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1297.598062][T17120] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1297.602454][T17120] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1297.604939][T17120] usb 6-1: can't read configurations, error -71 [ 1298.662035][T21718] binder: 21717:21718 ioctl c00c6211 0 returned -14 [ 1298.677070][T17120] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1298.720545][T21719] loop2: detected capacity change from 0 to 2640 [ 1298.772660][T21719] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1298.776145][T21719] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1298.779109][T21719] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1298.782755][T21719] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1298.786204][T21719] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1298.789224][T21719] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1298.792067][T21719] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1298.795346][T21719] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1298.798614][T21719] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1298.802220][T21719] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1299.830089][T17120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1300.142447][T17120] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1300.184141][T17120] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1300.187136][T17120] usb 6-1: can't read configurations, error -71 [ 1300.189564][T17120] usb usb6-port1: attempt power cycle [ 1300.628160][T21734] __nla_validate_parse: 4 callbacks suppressed [ 1300.628212][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1300.634226][T21734] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1300.638150][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1300.641489][T21734] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1300.645145][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3614'. [ 1301.394569][T21741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3610'. [ 1301.428907][ T9854] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1301.544445][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1301.584886][ T9854] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1301.598007][ T9854] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1301.602127][ T9854] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1301.608773][ T9854] usb 6-1: can't read configurations, error -71 [ 1302.000327][T21764] binder: 21763:21764 ioctl c0306201 0 returned -14 [ 1302.009326][T21764] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3613'. [ 1302.020839][T21764] Console: switching to colour dummy device 80x25 [ 1302.028351][T21762] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1302.057585][T21762] overlayfs: failed to set xattr on upper [ 1302.064935][T21762] overlayfs: ...falling back to redirect_dir=nofollow. [ 1302.069232][T21762] overlayfs: ...falling back to index=off. [ 1302.083204][T21762] overlayfs: conflicting lowerdir path [ 1302.095150][T21766] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1302.130470][T21766] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1302.135815][T21766] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1302.151005][T21766] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1302.167514][T21766] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1302.186475][T21766] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 18645 usecs [ 1302.207560][T21766] pci 0000:00:01.0: Adding to iommu group 1 [ 1302.224160][T21766] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1302.226205][T21766] pci 0000:00:01.0: vgaarb: bridge control possible [ 1302.228183][T21766] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1302.252543][T21766] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1302.259332][T21766] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1302.263306][T21766] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1302.279085][T21766] [drm] Found bochs VGA, ID 0xb0c5. [ 1302.283544][T21766] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1302.298893][T21766] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1302.393683][T21766] Console: switching to colour frame buffer device 160x50 [ 1302.396591][T21766] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1302.656472][T21775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3616'. [ 1302.814786][T21777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.820244][T21777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1303.461300][ T9854] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1303.731725][ T9854] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1303.776745][ T9854] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1303.801260][ T9854] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1303.804468][ T9854] usb 10-1: can't read configurations, error -71 [ 1304.590104][T21801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3621'. [ 1306.387253][T21830] __nla_validate_parse: 6 callbacks suppressed [ 1306.387274][T21830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3629'. [ 1306.891834][T21834] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 1306.949266][T21834] binder: 21832:21834 ioctl c0306201 80000040 returned -14 [ 1306.975404][T21834] ublk3: read batch cmd buffer failed [ 1306.979398][T21834] ublk3: read batch cmd buffer failed [ 1307.193586][T21842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1307.720135][ T50] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1307.831745][T21856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1307.900605][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1308.292424][T21864] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1308.509878][ T50] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1308.895183][ T50] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1308.919946][ T50] usb 6-1: can't read configurations, error -71 [ 1309.020640][T21867] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1309.916404][T21883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3641'. [ 1310.355952][T21895] hpfs: hpfs_map_sector(): read error [ 1310.513260][ T40] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1310.541138][T21899] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1310.544365][T21899] CPU: 3 UID: 0 PID: 21899 Comm: syz.0.3644 Tainted: G L syzkaller #0 PREEMPT(full) [ 1310.544398][T21899] Tainted: [L]=SOFTLOCKUP [ 1310.544403][T21899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1310.544411][T21899] Call Trace: [ 1310.544427][T21899] [ 1310.544433][T21899] dump_stack_lvl+0x100/0x190 [ 1310.544521][T21899] sysfs_warn_dup.cold+0x1c/0x28 [ 1310.544557][T21899] sysfs_create_dir_ns+0x24b/0x2b0 [ 1310.544637][T21899] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1310.544655][T21899] ? find_held_lock+0x2b/0x80 [ 1310.544692][T21899] ? kobject_add_internal+0x25f/0x930 [ 1310.544712][T21899] ? kobject_add_internal+0x25f/0x930 [ 1310.544732][T21899] ? class_dir_child_ns_type+0xd/0x60 [ 1310.544785][T21899] kobject_add_internal+0x2c8/0x930 [ 1310.544813][T21899] kobject_add+0x16a/0x1e0 [ 1310.544841][T21899] ? __pfx_kobject_add+0x10/0x10 [ 1310.544868][T21899] ? get_device_parent+0x1b3/0x4c0 [ 1310.544897][T21899] ? kobject_put+0xb9/0x640 [ 1310.544929][T21899] device_add+0x294/0x1970 [ 1310.544948][T21899] ? lockdep_init_map_type+0x5c/0x250 [ 1310.544963][T21899] ? __pfx_device_add+0x10/0x10 [ 1310.544972][T21899] ? lockdep_init_map_type+0x5c/0x250 [ 1310.544983][T21899] ? __init_waitqueue_head+0xca/0x150 [ 1310.544999][T21899] tty_register_device_attr+0x388/0x7f0 [ 1310.545042][T21899] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1310.545063][T21899] ? tty_port_init+0x156/0x1c0 [ 1310.545083][T21899] gsm_activate_mux+0x155/0x2a0 [ 1310.545102][T21899] gsmld_ioctl+0xbbc/0x15c0 [ 1310.545118][T21899] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1310.545141][T21899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1310.545164][T21899] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1310.545174][T21899] tty_compat_ioctl+0x396/0x420 [ 1310.545192][T21899] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1310.545208][T21899] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1310.545233][T21899] __do_fast_syscall_32+0xe7/0x970 [ 1310.545250][T21899] do_fast_syscall_32+0x32/0x70 [ 1310.545265][T21899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1310.545285][T21899] RIP: 0023:0xf705efec [ 1310.545308][T21899] Code: Unable to access opcode bytes at 0xf705efc2. [ 1310.545431][T21899] RSP: 002b:00000000f540b50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1310.545443][T21899] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 1310.545451][T21899] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1310.545458][T21899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1310.545465][T21899] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1310.545472][T21899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1310.545487][T21899] [ 1310.545625][T21899] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1310.734902][ T40] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1310.738262][ T40] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1310.742984][ T40] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1310.746353][ T40] usb 10-1: can't read configurations, error -71 [ 1311.992242][T21910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3648'. [ 1312.896227][T21928] netlink: 'syz.4.3652': attribute type 21 has an invalid length. [ 1312.899859][T21928] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1312.903823][T21928] netlink: 'syz.4.3652': attribute type 5 has an invalid length. [ 1312.907585][T21928] netlink: 'syz.4.3652': attribute type 6 has an invalid length. [ 1312.910914][T21928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1313.025400][T21921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.029712][T21921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.012132][T21959] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3661'. [ 1315.585177][T21961] binder: 21960:21961 ioctl c0306201 0 returned -14 [ 1315.605094][T21961] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1315.638447][T21961] Console: switching to colour dummy device 80x25 [ 1315.731706][T21962] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1315.807091][T21962] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1315.814694][T21962] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1315.822426][T21962] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1315.830570][T21962] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1315.851912][T21962] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 21009 usecs [ 1315.884043][T21962] pci 0000:00:01.0: Adding to iommu group 1 [ 1315.913574][T21962] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1315.916589][T21962] pci 0000:00:01.0: vgaarb: bridge control possible [ 1315.919392][T21962] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1315.950965][T21962] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1315.956582][T21962] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1315.961816][T21962] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1315.973653][T21962] [drm] Found bochs VGA, ID 0xb0c5. [ 1315.975836][T21962] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1315.990358][T21962] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1316.062833][T21962] Console: switching to colour frame buffer device 160x50 [ 1316.067003][T21962] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1316.416023][T21974] socket: no more sockets [ 1316.417044][T17120] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1316.418629][T21974] Failed to initialize the IGMP6 autojoin socket (err -23) [ 1316.576275][T17120] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1316.579230][T17120] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1316.583987][T17120] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1316.587280][T17120] usb 10-1: can't read configurations, error -71 [ 1317.066992][ T9854] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1317.217963][ T9854] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1317.225714][ T9854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.238456][ T9854] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1317.248752][ T9854] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1317.264333][ T9854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.271753][ T9854] usb 6-1: Product: syz [ 1317.274049][ T9854] usb 6-1: Manufacturer: syz [ 1317.275970][ T9854] usb 6-1: SerialNumber: syz [ 1317.292686][ T9854] cdc_mbim 6-1:1.0: skipping garbage [ 1317.294974][ T9854] cdc_mbim 6-1:1.0: skipping garbage [ 1317.297643][ T9854] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 1317.300773][ T9854] cdc_mbim 6-1:1.0: bind() failure [ 1317.419482][T21989] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3669'. [ 1317.493417][ T9854] usb 6-1: USB disconnect, device number 78 [ 1318.567188][T18832] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1318.749673][T18832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1318.758541][T18832] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1318.774963][T18832] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1318.784068][T18832] usb 6-1: can't read configurations, error -71 [ 1319.307499][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1319.310533][T22007] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1319.313659][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1319.317021][T22007] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1319.320994][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1319.579399][T22005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.585489][T22005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.017054][ T9854] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1320.065217][T22016] hpfs: hpfs_map_sector(): read error [ 1320.185586][T22019] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1320.189127][T22019] CPU: 2 UID: 0 PID: 22019 Comm: syz.4.3678 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.189149][T22019] Tainted: [L]=SOFTLOCKUP [ 1320.189154][T22019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1320.189164][T22019] Call Trace: [ 1320.189223][T22019] [ 1320.189228][T22019] dump_stack_lvl+0x100/0x190 [ 1320.189335][T22019] sysfs_warn_dup.cold+0x1c/0x28 [ 1320.189391][T22019] sysfs_create_dir_ns+0x24b/0x2b0 [ 1320.189462][T22019] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1320.189483][T22019] ? find_held_lock+0x2b/0x80 [ 1320.189517][T22019] ? kobject_add_internal+0x25f/0x930 [ 1320.189537][T22019] ? kobject_add_internal+0x25f/0x930 [ 1320.189558][T22019] ? class_dir_child_ns_type+0xd/0x60 [ 1320.189633][T22019] kobject_add_internal+0x2c8/0x930 [ 1320.189668][T22019] kobject_add+0x16a/0x1e0 [ 1320.189693][T22019] ? __pfx_kobject_add+0x10/0x10 [ 1320.189722][T22019] ? get_device_parent+0x1b3/0x4c0 [ 1320.189752][T22019] ? kobject_put+0xb9/0x640 [ 1320.189785][T22019] device_add+0x294/0x1970 [ 1320.189806][T22019] ? lockdep_init_map_type+0x5c/0x250 [ 1320.189827][T22019] ? __pfx_device_add+0x10/0x10 [ 1320.189844][T22019] ? lockdep_init_map_type+0x5c/0x250 [ 1320.189864][T22019] ? __init_waitqueue_head+0xca/0x150 [ 1320.189893][T22019] tty_register_device_attr+0x388/0x7f0 [ 1320.189955][T22019] ? lockdep_init_map_type+0x5c/0x250 [ 1320.189979][T22019] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1320.190013][T22019] ? tty_port_init+0x156/0x1c0 [ 1320.190043][T22019] gsm_activate_mux+0x155/0x2a0 [ 1320.190081][T22019] gsmld_ioctl+0xbbc/0x15c0 [ 1320.190107][T22019] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1320.190141][T22019] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1320.190172][T22019] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1320.190187][T22019] tty_compat_ioctl+0x396/0x420 [ 1320.190211][T22019] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 1320.190233][T22019] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1320.190272][T22019] __do_fast_syscall_32+0xe7/0x970 [ 1320.190298][T22019] do_fast_syscall_32+0x32/0x70 [ 1320.190321][T22019] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1320.190343][T22019] RIP: 0023:0xf702efec [ 1320.190367][T22019] Code: Unable to access opcode bytes at 0xf702efc2. [ 1320.190426][T22019] RSP: 002b:00000000f53db50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1320.190444][T22019] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000404c4701 [ 1320.190460][T22019] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1320.190471][T22019] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.190480][T22019] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1320.190490][T22019] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.190513][T22019] [ 1320.190984][T22019] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1320.195369][ T9854] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1320.351627][ T9854] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1320.356191][ T9854] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1320.359150][ T9854] usb 10-1: can't read configurations, error -71 [ 1320.441280][T22021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.450068][T22021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.671218][T22040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.844745][T22040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.408064][T22053] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3686'. [ 1322.817150][ T9854] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1322.988083][ T9854] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1322.994507][ T9854] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1323.007312][ T9854] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1323.011558][ T9854] usb 9-1: can't read configurations, error -71 [ 1323.108120][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1323.389546][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1323.409902][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1323.425981][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1323.434090][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1323.440622][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3689'. [ 1323.557134][T17120] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1323.832952][T17120] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1323.911166][T17120] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1323.943842][T17120] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1323.951780][T17120] usb 6-1: can't read configurations, error -71 [ 1324.397057][ T9854] usb 9-1: new low-speed USB device number 51 using dummy_hcd [ 1324.496779][T22093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3691'. [ 1324.589719][ T9854] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1324.595741][ T9854] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.599208][ T9854] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1324.603072][ T9854] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.606577][ T9854] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1324.610354][ T9854] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.613585][ T9854] usb 9-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 1324.619301][ T9854] usb 9-1: string descriptor 0 read error: -22 [ 1324.621311][ T9854] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.858154][T22085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3690'. [ 1324.901443][T22100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.907226][T22100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.199770][ T40] usb 9-1: USB disconnect, device number 51 [ 1325.209675][ T50] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 1325.369435][ T50] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1325.374914][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.379266][ T50] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1325.383143][ T50] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.391901][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.395737][ T50] usb 10-1: Product: syz [ 1325.398103][ T50] usb 10-1: Manufacturer: syz [ 1325.400154][ T50] usb 10-1: SerialNumber: syz [ 1325.409988][ T50] cdc_mbim 10-1:1.0: skipping garbage [ 1325.412558][ T50] cdc_mbim 10-1:1.0: skipping garbage [ 1325.415126][ T50] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1325.418722][ T50] cdc_mbim 10-1:1.0: bind() failure [ 1325.562199][T22110] jffs2: notice: (22110) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1325.826629][ T50] usb 10-1: USB disconnect, device number 41 [ 1330.271693][T22137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3698'. [ 1330.357650][T22138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1330.707061][ T29] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1330.915487][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1330.922526][ T29] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1330.927700][ T29] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1330.930577][ T29] usb 10-1: can't read configurations, error -71 [ 1331.221397][T22147] 9p: Bad value for 'rfdno' [ 1331.239304][T22147] Console: switching to colour dummy device 80x25 [ 1331.377172][T17120] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1331.408896][T22149] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1331.528435][T17120] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1331.536864][T17120] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1331.554805][T22149] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1331.556441][T17120] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.563148][T22149] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1331.563337][T17120] usb 6-1: Product: syz [ 1331.570029][T17120] usb 6-1: Manufacturer: syz [ 1331.574428][T17120] usb 6-1: SerialNumber: syz [ 1331.577339][T22149] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1331.702706][T22155] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3704'. [ 1331.827668][T22149] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1331.842937][T22149] pci 0000:00:01.0: Adding to iommu group 1 [ 1331.852799][T22149] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1331.855721][T22149] pci 0000:00:01.0: vgaarb: bridge control possible [ 1331.858491][T22149] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1331.886054][T22149] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1331.890024][T22149] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1331.895923][T22149] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1331.912583][T22149] [drm] Found bochs VGA, ID 0xb0c5. [ 1331.914882][T22149] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1331.935973][T22149] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1331.997457][T17120] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 83 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 1332.076017][T22149] Console: switching to colour frame buffer device 160x50 [ 1332.083472][T22149] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1332.153582][T22163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.158820][T22163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.447564][T22144] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1332.461723][T17120] usb 6-1: USB disconnect, device number 83 [ 1332.467570][T17120] usblp0: removed [ 1333.137122][ T29] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1333.223685][T22179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3711'. [ 1333.769245][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3712'. [ 1333.918387][T22187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3713'. [ 1334.011021][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1334.014046][ T29] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1334.017850][ T29] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1334.020422][ T29] usb 6-1: can't read configurations, error -71 [ 1334.436514][T22209] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1334.439827][T22209] overlayfs: failed to set xattr on upper [ 1334.442161][T22209] overlayfs: ...falling back to redirect_dir=nofollow. [ 1334.444949][T22209] overlayfs: ...falling back to index=off. [ 1334.447615][T22209] overlayfs: conflicting lowerdir path [ 1335.710972][T22214] netlink: 'syz.0.3716': attribute type 2 has an invalid length. [ 1337.857136][ T40] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1338.085425][ T40] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1338.092098][ T40] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1338.097472][ T40] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1338.100507][ T40] usb 9-1: can't read configurations, error -71 [ 1338.132773][T22252] Failed to initialize the IGMP6 control socket (err -105) [ 1338.334618][T22261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3729'. [ 1339.377113][ T40] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1339.578145][T22299] jffs2: notice: (22299) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1339.593226][ T40] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1339.615470][ T40] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1339.672406][ T40] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1339.679530][ T40] usb 9-1: can't read configurations, error -71 [ 1340.247239][ T5747] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1340.446750][T22313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3737'. [ 1340.607059][T18016] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 1340.827577][T18016] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1340.831645][T18016] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.834906][T18016] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1340.838034][T18016] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1340.844193][T18016] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.846864][T18016] usb 10-1: Product: syz [ 1340.848277][T18016] usb 10-1: Manufacturer: syz [ 1340.849846][T18016] usb 10-1: SerialNumber: syz [ 1340.860614][T18016] cdc_mbim 10-1:1.0: skipping garbage [ 1340.862408][T18016] cdc_mbim 10-1:1.0: skipping garbage [ 1340.864192][T18016] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1340.866408][T18016] cdc_mbim 10-1:1.0: bind() failure [ 1341.456289][T18832] usb 10-1: USB disconnect, device number 44 [ 1342.544065][T22338] 9p: Bad value for 'version' [ 1342.769571][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'. [ 1343.989157][T18832] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1344.181980][T18832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1344.198116][T18832] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1344.225173][T18832] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1344.241192][T18832] usb 9-1: can't read configurations, error -71 [ 1344.664917][ T50] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1344.846248][ T50] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1344.861543][ T50] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1344.868263][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1344.873259][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1344.879411][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1344.885280][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.917941][ T50] usb 10-1: config 0 descriptor?? [ 1344.942786][T22378] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1346.416368][T22405] netlink: 'syz.1.3754': attribute type 10 has an invalid length. [ 1346.517698][ T50] usbhid 10-1:0.0: can't add hid device: -71 [ 1346.524111][ T50] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1346.572761][ T50] usb 10-1: USB disconnect, device number 45 [ 1346.622954][T22409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3755'. [ 1346.767711][T22405] veth0_to_bond: entered promiscuous mode [ 1348.305511][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1348.328769][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1348.336568][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1348.344091][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1348.349879][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1348.823445][T22440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1349.145748][T22452] bridge_slave_0: default FDB implementation only supports local addresses [ 1350.058127][T18016] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1350.282582][T22465] jffs2: notice: (22465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1351.032953][T18016] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1351.035439][T18016] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1351.039465][T18016] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1351.042179][T18016] usb 6-1: can't read configurations, error -71 [ 1351.447022][ T40] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1351.597786][ T40] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1351.602565][ T40] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1351.607842][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1351.612228][ T40] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1351.617086][ T40] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1351.622327][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.626585][ T40] usb 9-1: config 0 descriptor?? [ 1351.635646][T22471] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1351.717067][T10596] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1351.876017][T10596] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1351.883582][T10596] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1351.888393][T10596] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1351.891188][T10596] usb 10-1: can't read configurations, error -71 [ 1352.158124][T22482] siw: device registration error -23 [ 1352.274905][T22483] ib_srp: QP creation failed for dev syz0: -2 [ 1352.521087][ T40] usbhid 9-1:0.0: can't add hid device: -71 [ 1352.523984][ T40] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1352.529693][ T40] usb 9-1: USB disconnect, device number 58 [ 1353.491417][T22500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3776'. [ 1354.219839][T22519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1354.906636][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3783'. [ 1356.700456][T22549] binder: 22548:22549 ioctl c00c6211 0 returned -14 [ 1356.769215][T22556] loop2: detected capacity change from 0 to 2640 [ 1356.785318][T22556] buffer_io_error: 320 callbacks suppressed [ 1356.785359][T22556] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1356.790398][T22556] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1356.793061][T22556] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1356.795747][T22556] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1356.798820][T22556] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1356.801471][T22556] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1356.804309][T22556] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1356.807187][T22556] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1356.809855][T22556] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1356.812479][T22556] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1356.827297][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1356.844996][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1356.850513][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1356.856102][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1356.862263][T22558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3791'. [ 1357.133172][T22561] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1357.136059][T22561] overlayfs: failed to set xattr on upper [ 1357.138511][T22561] overlayfs: ...falling back to redirect_dir=nofollow. [ 1357.141302][T22561] overlayfs: ...falling back to index=off. [ 1357.143983][T22561] overlayfs: conflicting lowerdir path [ 1357.314498][T22555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.348628][T22555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.028484][T22568] jffs2: notice: (22568) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1358.081103][ T5747] Bluetooth: hci5: unexpected event for opcode 0x1002 [ 1358.102851][T22571] 9p: Bad value for 'version' [ 1359.958299][T22593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3799'. [ 1360.068234][T22595] socket: no more sockets [ 1360.070492][T22595] Failed to initialize the IGMP6 autojoin socket (err -23) [ 1360.418930][T22599] binder: 22598:22599 ioctl c00c6211 0 returned -14 [ 1360.478721][T22601] jffs2: notice: (22601) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1360.510187][T22602] loop2: detected capacity change from 0 to 2640 [ 1361.578131][T22612] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1361.581285][T22612] overlayfs: failed to set xattr on upper [ 1361.583787][T22612] overlayfs: ...falling back to redirect_dir=nofollow. [ 1361.586722][T22612] overlayfs: ...falling back to index=off. [ 1361.590122][T22612] overlayfs: conflicting lowerdir path [ 1361.707593][T22616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.714573][T22616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.857074][ T50] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1362.011365][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1362.014790][ T50] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1362.021742][ T50] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1362.025266][ T50] usb 9-1: can't read configurations, error -71 [ 1362.627219][ T29] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1362.777484][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1362.782235][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1362.786724][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1362.790868][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1362.794679][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1362.799133][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.804797][ T29] usb 6-1: config 0 descriptor?? [ 1362.810605][T22623] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1362.925750][T22630] 9p: Bad value for 'rfdno' [ 1362.956942][T22630] Console: switching to colour dummy device 80x25 [ 1363.201025][T22631] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1363.271955][T22631] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1363.279543][T22631] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1363.295429][T22631] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1363.303040][T22631] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1363.367549][T22631] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 63112 usecs [ 1363.513910][T22631] pci 0000:00:01.0: Adding to iommu group 1 [ 1363.539084][T22631] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1363.541268][T22631] pci 0000:00:01.0: vgaarb: bridge control possible [ 1363.543533][T22631] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1363.560124][T22631] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1363.563998][T22631] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1363.570432][T22631] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1363.570763][T22642] bridge_slave_0: default FDB implementation only supports local addresses [ 1363.609337][T22631] [drm] Found bochs VGA, ID 0xb0c5. [ 1363.611222][T22631] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1363.636122][T22631] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1363.757035][ T4299] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1363.990062][ T4299] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1363.992714][ T4299] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1364.000332][ T4299] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1364.003092][ T4299] usb 10-1: can't read configurations, error -71 [ 1364.146819][T22631] Console: switching to colour frame buffer device 160x50 [ 1364.150651][T22631] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1364.277775][ T29] usbhid 6-1:0.0: can't add hid device: -71 [ 1364.280489][ T29] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1364.285541][ T29] usb 6-1: USB disconnect, device number 88 [ 1364.485704][T22649] binder: 22648:22649 ioctl c00c6211 0 returned -14 [ 1364.564483][T22650] loop2: detected capacity change from 0 to 2640 [ 1364.584554][T22650] buffer_io_error: 650 callbacks suppressed [ 1364.584569][T22650] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1364.590345][T22650] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1364.593126][T22650] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1364.596375][T22650] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1364.600209][T22650] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1364.603629][T22650] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1364.607440][T22650] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1364.610918][T22650] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1364.614575][T22650] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1364.619166][T22650] Buffer I/O error on dev loop2, logical block 9, lost async page write [ 1364.752579][T22652] netlink: 'syz.4.3813': attribute type 10 has an invalid length. [ 1366.409210][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1366.687642][ T50] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1366.966185][ T50] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1367.013721][ T50] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1367.096182][T22676] netlink: 'syz.1.3819': attribute type 2 has an invalid length. [ 1367.133455][ T50] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1367.154955][ T50] usb 9-1: can't read configurations, error -71 [ 1368.056111][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'. [ 1368.626409][T18832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1369.907578][T22730] netlink: 'syz.1.3829': attribute type 10 has an invalid length. [ 1370.935104][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3833'. [ 1371.049265][T22743] netlink: 'syz.5.3832': attribute type 2 has an invalid length. [ 1373.527470][ T5747] Bluetooth: hci5: command 0x0405 tx timeout [ 1379.091004][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 1379.091024][ T42] audit: type=1804 audit(1786964469.327:66689): pid=22775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3834" name="bus" dev="ramfs" ino=102580 res=1 errno=0 [ 1379.106685][ T42] audit: type=1804 audit(1786964469.347:66690): pid=22780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3834" name="bus" dev="ramfs" ino=102580 res=1 errno=0 [ 1379.249835][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1380.392223][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1382.276856][T22842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3843'. [ 1382.678865][T22846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.682515][T22846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1383.736038][T22861] socket: no more sockets [ 1383.738057][T22861] Failed to initialize the IGMP6 autojoin socket (err -23) [ 1390.919233][T22880] binder: 22873:22880 ioctl c0306201 0 returned -14 [ 1391.224064][T22883] macvlan0: entered allmulticast mode [ 1391.226078][T22883] batadv_slave_1: entered allmulticast mode [ 1391.242298][T22883] batman_adv: batadv0: Adding interface: macvlan0 [ 1391.244545][T22883] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1391.252638][T22883] batman_adv: batadv0: Interface activated: macvlan0 [ 1391.577150][ T42] audit: type=1804 audit(1786964481.397:66691): pid=22884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3850" name="/newroot/707/bus/bus" dev="overlay" ino=3906 res=1 errno=0 [ 1392.211296][T22897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1392.938789][T22909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.944049][T22909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.507558][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1394.883264][ T42] audit: type=1804 audit(1786964485.117:66692): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3859" name="bus" dev="ramfs" ino=101887 res=1 errno=0 [ 1394.905158][ T42] audit: type=1804 audit(1786964485.117:66693): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3859" name="bus" dev="ramfs" ino=101887 res=1 errno=0 [ 1395.111586][T22973] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1395.567327][T22979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3863'. [ 1396.618426][T22987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1396.976451][T22984] netlink: 'syz.4.3864': attribute type 2 has an invalid length. [ 1411.294853][T23015] tipc: Enabling of bearer rejected, already enabled [ 1411.695214][T23020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3868'. [ 1412.330838][T23035] can0: slcan on ttyS3. [ 1412.377463][T23036] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1412.379617][T23036] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1412.385724][T23036] vhci_hcd vhci_hcd.0: Device attached [ 1412.557800][T23034] can0 (unregistered): slcan off ttyS3. [ 1412.657469][ T29] usb 40-1: SetAddress Request (18) to port 0 [ 1412.660190][ T29] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1412.729123][T23052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1413.569058][T18832] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1413.714631][T23039] vhci_hcd: connection reset by peer [ 1413.719379][ T5810] vhci_hcd vhci_hcd.1: stop threads [ 1413.722130][ T5810] vhci_hcd vhci_hcd.1: release socket [ 1413.740715][ T5810] vhci_hcd vhci_hcd.1: disconnect device [ 1414.103142][T23071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3877'. [ 1414.720871][T23086] netlink: 'syz.1.3878': attribute type 2 has an invalid length. [ 1417.078565][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3883'. [ 1417.687320][ T29] usb 40-1: device descriptor read/8, error -110 [ 1418.080121][ T29] usb usb40-port1: attempt power cycle [ 1418.657634][ T29] usb usb40-port1: unable to enumerate USB device [ 1420.667197][T23145] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1420.784401][ T6259] Bluetooth: hci1: Frame reassembly failed (-84) [ 1421.499732][T23150] Cannot find set identified by id 2 to match [ 1421.578834][ T4299] libceph: connect (1)[c::]:6789 error -22 [ 1421.584755][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1421.857473][ T4299] libceph: connect (1)[c::]:6789 error -22 [ 1421.861982][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1422.297540][ T50] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1422.377147][ T4299] libceph: connect (1)[c::]:6789 error -22 [ 1422.379185][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1422.422147][T23154] ceph: No mds server is up or the cluster is laggy [ 1422.648211][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1423.432421][T23204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3892'. [ 1423.526832][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3893'. [ 1423.882738][T23225] netlink: 'syz.4.3895': attribute type 10 has an invalid length. [ 1424.949503][T23242] binder: 23237:23242 ioctl c0306201 0 returned -14 [ 1425.092598][T23254] macvlan2: entered allmulticast mode [ 1425.094946][T23254] batadv_slave_1: entered allmulticast mode [ 1426.627930][T23262] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1428.759260][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3909'. [ 1428.779273][T23297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3908'. [ 1429.213921][T23310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1429.216444][T23310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1429.226283][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3912'. [ 1429.228838][T23310] vhci_hcd vhci_hcd.0: Device attached [ 1429.597071][T17120] usb 38-1: SetAddress Request (26) to port 0 [ 1429.600666][T17120] usb 38-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1430.149141][T23312] vhci_hcd: connection reset by peer [ 1430.154178][ T5811] vhci_hcd vhci_hcd.0: stop threads [ 1430.156152][ T5811] vhci_hcd vhci_hcd.0: release socket [ 1430.158425][ T5811] vhci_hcd vhci_hcd.0: disconnect device [ 1432.142323][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1432.157105][ T50] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 1432.327396][ T50] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1432.331942][ T50] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.335386][ T50] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1432.339483][ T50] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1432.345860][ T50] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.348921][ T50] usb 10-1: Product: syz [ 1432.350967][ T50] usb 10-1: Manufacturer: syz [ 1432.353051][ T50] usb 10-1: SerialNumber: syz [ 1432.363245][ T50] cdc_mbim 10-1:1.0: skipping garbage [ 1432.365605][ T50] cdc_mbim 10-1:1.0: skipping garbage [ 1432.367734][ T50] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1432.370315][ T50] cdc_mbim 10-1:1.0: bind() failure [ 1432.415463][T23364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3922'. [ 1432.579851][ T50] usb 10-1: USB disconnect, device number 50 [ 1432.967066][ T6290] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1433.154187][ T6290] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1433.166993][ T6290] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1433.170681][ T6290] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1433.173128][ T6290] usb 6-1: can't read configurations, error -71 [ 1433.533795][T23379] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1433.536742][T23379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1433.541297][T23379] vhci_hcd vhci_hcd.0: Device attached [ 1433.826997][ T29] usb 48-1: SetAddress Request (14) to port 0 [ 1433.829321][ T29] usb 48-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1434.039035][T23380] vhci_hcd: connection reset by peer [ 1434.041131][ T5811] vhci_hcd vhci_hcd.5: stop threads [ 1434.042844][ T5811] vhci_hcd vhci_hcd.5: release socket [ 1434.044923][ T5811] vhci_hcd vhci_hcd.5: disconnect device [ 1434.484610][T23391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3928'. [ 1434.665867][T17120] usb 38-1: device descriptor read/8, error -110 [ 1435.447064][ T40] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1435.607909][T17120] usb usb38-port1: attempt power cycle [ 1435.634153][ T40] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1435.639872][ T40] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1435.644638][ T40] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1435.647884][ T40] usb 9-1: can't read configurations, error -71 [ 1435.987028][T10524] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 1436.137705][T10524] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1436.142837][T10524] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.147416][T10524] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1436.151207][T10524] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1436.158982][T10524] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.162579][T10524] usb 10-1: Product: syz [ 1436.164457][T10524] usb 10-1: Manufacturer: syz [ 1436.166530][T10524] usb 10-1: SerialNumber: syz [ 1436.169838][T17120] usb usb38-port1: unable to enumerate USB device [ 1436.180687][T10524] cdc_mbim 10-1:1.0: skipping garbage [ 1436.187021][T10524] cdc_mbim 10-1:1.0: skipping garbage [ 1436.189500][T10524] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1436.192494][T10524] cdc_mbim 10-1:1.0: bind() failure [ 1436.351628][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3936'. [ 1436.386736][T10596] usb 10-1: USB disconnect, device number 51 [ 1436.836391][T23426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.840386][T23426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.968163][T23436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3938'. [ 1437.340325][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3939'. [ 1437.677241][T23448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3949'. [ 1437.827151][ T6290] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1438.094931][T23450] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1438.097409][T23450] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1438.103887][T23450] vhci_hcd vhci_hcd.0: Device attached [ 1438.387169][T17120] usb 46-1: SetAddress Request (22) to port 0 [ 1438.388278][ T6290] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1438.389193][T17120] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1438.412762][ T6290] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1438.427728][T23451] vhci_hcd: connection reset by peer [ 1438.429928][ T5810] vhci_hcd vhci_hcd.4: stop threads [ 1438.430840][ T6290] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1438.433847][ T5810] vhci_hcd vhci_hcd.4: release socket [ 1438.439434][ T5810] vhci_hcd vhci_hcd.4: disconnect device [ 1438.444077][ T6290] usb 6-1: can't read configurations, error -71 [ 1438.504354][T23454] socket: no more sockets [ 1438.505347][T23456] tipc: Enabled bearer , priority 10 [ 1438.505866][T23454] Failed to initialize the IGMP autojoin socket (err -23) [ 1438.894555][ T29] usb 48-1: device descriptor read/8, error -110 [ 1439.430332][ T29] usb usb48-port1: attempt power cycle [ 1439.810296][T23480] Cannot find set identified by id 2 to match [ 1439.862788][T23490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3947'. [ 1439.995973][ T6290] libceph: connect (1)[c::]:6789 error -22 [ 1439.998918][ T6290] libceph: mon0 (1)[c::]:6789 connect error [ 1440.017963][ T29] usb usb48-port1: unable to enumerate USB device [ 1440.377346][T23512] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1440.437736][T23480] ceph: No mds server is up or the cluster is laggy [ 1440.464493][ T6290] libceph: connect (1)[c::]:6789 error -22 [ 1440.808100][T23518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3952'. [ 1441.099600][ T6290] libceph: mon0 (1)[c::]:6789 connect error [ 1441.294563][T23522] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3953'. [ 1441.617870][ T6290] libceph: connect (1)[c::]:6789 error -22 [ 1441.652907][ T6290] libceph: mon0 (1)[c::]:6789 connect error [ 1441.654962][ T42] audit: type=1326 audit(1786964531.887:66694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23523 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 1441.688553][ T42] audit: type=1326 audit(1786964531.927:66695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23523 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 1441.706531][ T42] audit: type=1326 audit(1786964531.927:66696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23523 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 1441.769507][ T42] audit: type=1326 audit(1786964531.937:66697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23523 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 1441.785098][ T42] audit: type=1326 audit(1786964531.937:66698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23523 comm="syz.5.3954" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 1442.037444][T23530] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 1443.447317][T17120] usb 46-1: device descriptor read/8, error -110 [ 1443.593286][T23569] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1443.599038][T21684] Bluetooth: hci1: Frame reassembly failed (-84) [ 1443.838942][T17120] usb usb46-port1: attempt power cycle [ 1444.398244][T17120] usb usb46-port1: unable to enumerate USB device [ 1444.635669][T23587] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1445.607228][ T5747] Bluetooth: hci1: command 0x1003 tx timeout [ 1445.625732][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1446.543777][T23606] Cannot find set identified by id 2 to match [ 1446.593076][ T40] libceph: connect (1)[c::]:6789 error -99 [ 1446.600406][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 1446.603399][ T40] libceph: connect (1)[c::]:6789 error -99 [ 1446.606126][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 1446.877448][ T40] libceph: connect (1)[c::]:6789 error -99 [ 1446.880663][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 1447.010798][T23617] netlink: 'syz.1.3969': attribute type 1 has an invalid length. [ 1447.124974][T23617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1447.243483][T23606] ceph: No mds server is up or the cluster is laggy [ 1447.388166][ T40] libceph: connect (1)[c::]:6789 error -99 [ 1447.392214][ T40] libceph: mon0 (1)[c::]:6789 connect error [ 1447.516498][T23627] bond2: (slave geneve3): making interface the new active one [ 1447.554373][T23627] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 1447.559124][ T5810] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.817379][ T5810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.821913][ T5810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.825764][ T5810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.829538][ T5810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.261158][T23648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3974'. [ 1448.886961][T17120] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1449.082559][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'. [ 1449.086337][T23661] bridge_slave_1: left allmulticast mode [ 1449.088501][T23661] bridge_slave_1: left promiscuous mode [ 1449.092059][T23661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.105344][T23661] bridge_slave_0: left allmulticast mode [ 1449.107735][T23661] bridge_slave_0: left promiscuous mode [ 1449.110608][T23661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.944046][T17120] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1449.947584][T17120] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1449.953723][T17120] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1449.956864][T17120] usb 10-1: can't read configurations, error -71 [ 1450.177166][T19018] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1450.344154][T19018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1450.351479][T19018] usb 6-1: not running at top speed; connect to a high speed hub [ 1450.356755][T19018] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1450.363021][T19018] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1450.369513][T19018] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1450.375188][T19018] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.382535][T19018] usb 6-1: config 14 has no interface number 0 [ 1450.387615][T19018] usb 6-1: config 14 has no interface number 1 [ 1450.392079][T19018] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1450.399722][T19018] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1450.408145][T19018] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1450.416023][T19018] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1450.424339][T19018] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1450.427445][T19018] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1450.434617][T19018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.439189][T19018] usb 6-1: Product: syz [ 1450.444099][T19018] usb 6-1: Manufacturer: syz [ 1450.447097][T19018] usb 6-1: SerialNumber: syz [ 1450.669845][T23679] lo speed is unknown, defaulting to 1000 [ 1450.750369][T23679] lo speed is unknown, defaulting to 1000 [ 1450.855361][T23682] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1451.852501][T23695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3986'. [ 1451.867875][T19018] legousbtower 6-1:14.57: interrupt endpoints not found [ 1451.954534][T19018] legousbtower 6-1:14.228: get version request failed: -71 [ 1451.957751][T19018] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71 [ 1451.968343][T19018] usb 6-1: USB disconnect, device number 93 [ 1452.050263][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3987'. [ 1452.431965][T23721] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3991'. [ 1452.987023][T19018] usb 10-1: new full-speed USB device number 54 using dummy_hcd [ 1453.160013][T19018] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1453.170936][T19018] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.174722][T19018] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1453.179774][T19018] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1453.223758][T19018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.227154][T19018] usb 10-1: Product: syz [ 1453.228950][T19018] usb 10-1: Manufacturer: syz [ 1453.230900][T19018] usb 10-1: SerialNumber: syz [ 1453.241762][T19018] cdc_mbim 10-1:1.0: skipping garbage [ 1453.246446][T19018] cdc_mbim 10-1:1.0: skipping garbage [ 1453.248240][T19018] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1453.256961][T19018] cdc_mbim 10-1:1.0: bind() failure [ 1453.661818][T23732] syz.5.3992: page allocation failure: order:10, mode:0x40cc0(GFP_KERNEL|__GFP_COMP), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1453.675582][T23732] CPU: 3 UID: 0 PID: 23732 Comm: syz.5.3992 Tainted: G L syzkaller #0 PREEMPT(full) [ 1453.675606][T23732] Tainted: [L]=SOFTLOCKUP [ 1453.675611][T23732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1453.675619][T23732] Call Trace: [ 1453.675630][T23732] [ 1453.675638][T23732] dump_stack_lvl+0x100/0x190 [ 1453.675793][T23732] warn_alloc.cold+0x94/0xa8 [ 1453.675820][T23732] ? __pfx_warn_alloc+0x10/0x10 [ 1453.675853][T23732] ? find_held_lock+0x2b/0x80 [ 1453.675885][T23732] ? psi_memstall_leave+0x19c/0x360 [ 1453.675903][T23732] ? psi_memstall_leave+0x1e6/0x360 [ 1453.675920][T23732] ? psi_memstall_leave+0x1eb/0x360 [ 1453.675936][T23732] ? lockdep_hardirqs_on+0x78/0x100 [ 1453.675991][T23732] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 1453.676008][T23732] ? tomoyo_path_number_perm+0x3a0/0x580 [ 1453.676071][T23732] ? __ia32_compat_sys_ioctl+0xc2/0x360 [ 1453.676096][T23732] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1453.676121][T23732] ? interleave_nodes+0x170/0x400 [ 1453.676143][T23732] ? lockdep_hardirqs_on+0x78/0x100 [ 1453.676157][T23732] ? policy_nodemask+0xed/0x4f0 [ 1453.676174][T23732] alloc_pages_mpol+0x1fb/0x540 [ 1453.676191][T23732] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1453.676209][T23732] ? futex_wait+0x11e/0x370 [ 1453.676229][T23732] ___kmalloc_large_node+0xe5/0x120 [ 1453.676249][T23732] __kmalloc_large_node_noprof+0x1c/0x70 [ 1453.676266][T23732] ? __might_fault+0xc5/0x140 [ 1453.676279][T23732] __kmalloc_noprof+0x5a1/0x820 [ 1453.676294][T23732] ? raw_alloc_io_data+0x14d/0x1c0 [ 1453.676326][T23732] raw_alloc_io_data+0x14d/0x1c0 [ 1453.676340][T23732] raw_ioctl+0x114e/0x2b80 [ 1453.676356][T23732] ? __pfx_raw_ioctl+0x10/0x10 [ 1453.676371][T23732] ? __pfx_raw_ioctl+0x10/0x10 [ 1453.676383][T23732] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1453.676403][T23732] __do_fast_syscall_32+0xe7/0x970 [ 1453.676422][T23732] do_fast_syscall_32+0x32/0x70 [ 1453.676438][T23732] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1453.676453][T23732] RIP: 0023:0xf70aefec [ 1453.676471][T23732] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1453.676488][T23732] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1453.676500][T23732] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0085508 [ 1453.676507][T23732] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1453.676514][T23732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1453.676521][T23732] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1453.676528][T23732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1453.676543][T23732] [ 1453.676628][T23732] Mem-Info: [ 1453.781917][T23732] active_anon:8077 inactive_anon:1546 isolated_anon:0 [ 1453.781917][T23732] active_file:4086 inactive_file:32141 isolated_file:0 [ 1453.781917][T23732] unevictable:1000 dirty:504 writeback:0 [ 1453.781917][T23732] slab_reclaimable:7637 slab_unreclaimable:63180 [ 1453.781917][T23732] mapped:27081 shmem:4176 pagetables:1507 [ 1453.781917][T23732] sec_pagetables:315 bounce:0 [ 1453.781917][T23732] kernel_misc_reclaimable:0 [ 1453.781917][T23732] free:53540 free_pcp:3269 free_cma:0 [ 1453.796318][T23732] Node 0 active_anon:296kB inactive_anon:112kB active_file:56kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:24kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8000kB pagetables:1688kB sec_pagetables:1136kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1453.808399][T23732] Node 1 active_anon:32012kB inactive_anon:6072kB active_file:16288kB inactive_file:128488kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:108276kB dirty:2016kB writeback:0kB shmem:16680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3844kB pagetables:4340kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1453.819665][T23732] Node 0 DMA free:2576kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:28kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1453.831213][T23732] lowmem_reserve[]: 0 280 280 280 280 [ 1453.833264][T23732] Node 0 DMA32 free:24964kB boost:0kB min:12772kB low:15964kB high:19156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:316kB inactive_anon:84kB active_file:56kB inactive_file:76kB unevictable:0kB writepending:0kB zspages:0kB present:1032196kB managed:286888kB mlocked:0kB bounce:0kB free_pcp:1104kB local_pcp:16kB free_cma:0kB [ 1453.843712][T23732] lowmem_reserve[]: 0 0 0 0 0 [ 1453.845411][T23732] Node 1 DMA32 free:186568kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32012kB inactive_anon:6072kB active_file:16288kB inactive_file:128488kB unevictable:4000kB writepending:2016kB zspages:2196kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:12060kB local_pcp:820kB free_cma:0kB [ 1453.864523][T23732] lowmem_reserve[]: 0 0 0 0 0 [ 1453.867553][T23732] Node 0 DMA: 74*4kB (UM) 25*8kB (UM) 8*16kB (UM) 16*32kB (UM) 5*64kB (UM) 3*128kB (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2608kB [ 1453.876787][T23732] Node 0 DMA32: 286*4kB (UME) 290*8kB (UME) 173*16kB (UME) 124*32kB (UME) 60*64kB (UME) 17*128kB (UME) 8*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 24408kB [ 1453.882919][T23732] Node 1 DMA32: 1520*4kB (UME) 1363*8kB (UME) 721*16kB (UME) 488*32kB (UME) 233*64kB (UME) 177*128kB (UME) 108*256kB (UME) 47*512kB (UME) 42*1024kB (UME) 5*2048kB (UM) 0*4096kB = 186664kB [ 1453.889155][T23732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1453.892259][T23732] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1453.895525][T23732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1453.899097][T23732] Node 1 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1453.902500][T23732] 41507 total pagecache pages [ 1453.904103][T23732] 1108 pages in swap cache [ 1453.905680][T23732] Free swap = 117320kB [ 1453.909719][T23732] Total swap = 124996kB [ 1453.911246][T23732] 524155 pages RAM [ 1453.912646][T23732] 0 pages HighMem/MovableOnly [ 1453.914299][T23732] 211540 pages reserved [ 1453.915744][T23732] 0 pages cma reserved [ 1453.923893][T19018] usb 10-1: USB disconnect, device number 54 [ 1454.636188][T23756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3998'. [ 1454.926555][T23761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3999'. [ 1454.930732][T23758] veth0_vlan: left promiscuous mode [ 1454.933076][T23758] veth0_vlan: entered promiscuous mode [ 1454.935412][T23758] veth0_vlan: entered allmulticast mode [ 1455.145600][T23771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4000'. [ 1455.434257][T23785] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 1455.437512][T23785] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1455.609503][T23795] 9p: Bad value for 'rfdno' [ 1455.876525][T23795] Console: switching to colour dummy device 80x25 [ 1456.047178][ T29] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1456.207060][T23797] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1456.307267][T23797] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1456.331022][ T29] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1456.331426][T23797] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1456.340276][T23797] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1456.367064][ T29] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1456.379180][ T29] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1456.389417][ T29] usb 10-1: can't read configurations, error -71 [ 1456.413316][T23797] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1456.544418][T23797] pci 0000:00:01.0: Adding to iommu group 1 [ 1456.551503][T23797] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1456.553734][T23797] pci 0000:00:01.0: vgaarb: bridge control possible [ 1456.555769][T23797] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1456.570682][T23797] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1456.577624][T23797] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1456.590661][T23797] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1456.648368][T23803] lo speed is unknown, defaulting to 1000 [ 1456.649382][T23797] [drm] Found bochs VGA, ID 0xb0c5. [ 1456.652258][T23797] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1456.729619][T23797] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1456.811506][T23803] lo speed is unknown, defaulting to 1000 [ 1457.006171][T23797] Console: switching to colour frame buffer device 160x50 [ 1457.008776][T23797] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1457.250521][T23810] syzkaller0: entered promiscuous mode [ 1457.252388][T23810] syzkaller0: entered allmulticast mode [ 1457.665451][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4011'. [ 1457.759272][T23834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4013'. [ 1457.887089][ T4299] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1458.038341][ T4299] usb 6-1: Using ep0 maxpacket: 16 [ 1458.045314][ T4299] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1458.055110][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1458.058621][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1458.063585][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.066145][ T4299] usb 6-1: Product: syz [ 1458.068200][ T4299] usb 6-1: Manufacturer: syz [ 1458.069822][ T4299] usb 6-1: SerialNumber: syz [ 1458.076588][ T4299] usb 6-1: config 0 descriptor?? [ 1458.080488][ T4299] hub 6-1:0.0: bad descriptor, ignoring hub [ 1458.082640][ T4299] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1458.086586][ T4299] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1458.155802][T23850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1458.223341][ T4299] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1458.275420][T23853] udevd[23853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.387471][ T4299] usb 6-1: USB disconnect, device number 94 [ 1459.123476][T23861] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1459.170026][ T6204] Bluetooth: hci1: Frame reassembly failed (-84) [ 1460.040031][T23866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.045469][T23866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.067167][T10596] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 1460.245064][T10596] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1460.803507][T10596] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.806763][T10596] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1460.810077][T10596] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1460.816013][T10596] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.819046][T10596] usb 10-1: Product: syz [ 1460.820510][T10596] usb 10-1: Manufacturer: syz [ 1460.822032][T10596] usb 10-1: SerialNumber: syz [ 1460.826781][T10596] cdc_mbim 10-1:1.0: skipping garbage [ 1460.828949][T10596] cdc_mbim 10-1:1.0: skipping garbage [ 1460.831139][T10596] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1460.833392][T10596] cdc_mbim 10-1:1.0: bind() failure [ 1461.030451][ T4299] usb 10-1: USB disconnect, device number 57 [ 1461.051928][T23890] lo speed is unknown, defaulting to 1000 [ 1461.137075][ T5747] Bluetooth: hci1: command 0x1003 tx timeout [ 1461.137131][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1461.197377][T23890] lo speed is unknown, defaulting to 1000 [ 1461.822245][T23906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4026'. [ 1463.329292][T18832] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1463.582203][T18832] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1463.601707][T18832] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1463.643140][T18832] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1463.651778][T18832] usb 9-1: can't read configurations, error -71 [ 1464.289939][T23939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4031'. [ 1464.584859][T23955] Cannot find set identified by id 2 to match [ 1464.606431][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 1464.608841][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1464.663385][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 1464.668845][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1464.806853][T23966] IPVS: Error connecting to the multicast addr [ 1464.937055][T10596] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1465.092065][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 1465.099248][T10596] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.104376][T10596] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.112806][T10596] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1465.116670][T10596] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1465.126646][T10596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.129817][T10596] usb 6-1: Product: syz [ 1465.133120][T10596] usb 6-1: Manufacturer: syz [ 1465.135071][T10596] usb 6-1: SerialNumber: syz [ 1465.152551][T10596] cdc_mbim 6-1:1.0: skipping garbage [ 1465.155798][T10596] cdc_mbim 6-1:1.0: skipping garbage [ 1465.158930][T10596] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 1465.162619][T10596] cdc_mbim 6-1:1.0: bind() failure [ 1465.190595][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1465.355201][T18832] usb 6-1: USB disconnect, device number 95 [ 1465.701836][T23955] ceph: No mds server is up or the cluster is laggy [ 1465.709485][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 1465.712294][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1466.229842][T23983] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1466.276317][T23985] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1466.347075][ T4299] usb 6-1: new full-speed USB device number 96 using dummy_hcd [ 1466.522257][ T4299] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1466.553110][ T4299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.560738][T22018] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1466.580926][ T4299] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1466.588732][ T4299] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.668852][ T4299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.672755][ T4299] usb 6-1: Product: syz [ 1466.674682][ T4299] usb 6-1: Manufacturer: syz [ 1466.677042][ T4299] usb 6-1: SerialNumber: syz [ 1466.773714][T22018] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1466.783217][T22018] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1466.789543][T22018] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1466.793013][ T4299] cdc_mbim 6-1:1.0: skipping garbage [ 1466.795030][T22018] usb 9-1: can't read configurations, error -71 [ 1466.797683][ T4299] cdc_mbim 6-1:1.0: skipping garbage [ 1466.799494][ T4299] cdc_mbim 6-1:1.0: CDC Union missing and no IAD found [ 1466.802119][ T4299] cdc_mbim 6-1:1.0: bind() failure [ 1466.950806][ T4299] usb 6-1: USB disconnect, device number 96 [ 1467.095378][T23991] lo speed is unknown, defaulting to 1000 [ 1467.250707][T23991] lo speed is unknown, defaulting to 1000 [ 1467.563544][ T42] audit: type=1800 audit(1786964557.797:66699): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4044" name="zoned" dev="configfs" ino=105816 res=0 errno=0 [ 1467.602880][ T42] audit: type=1800 audit(1786964557.837:66700): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4044" name="memory_backed" dev="configfs" ino=105817 res=0 errno=0 [ 1467.616542][T23998] null_blk: nullb1: using native zone append [ 1467.621323][ T42] audit: type=1800 audit(1786964557.857:66701): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4044" name="zone_nr_conv" dev="configfs" ino=105818 res=0 errno=0 [ 1467.642735][ T42] audit: type=1800 audit(1786964557.857:66702): pid=23998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4044" name="power" dev="configfs" ino=105819 res=0 errno=0 [ 1468.091078][T23998] null_blk: disk nullb1 created [ 1468.503798][T24021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.517505][T24021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.666740][T24028] Cannot find set identified by id 2 to match [ 1468.760277][T22018] libceph: connect (1)[c::]:6789 error -22 [ 1468.762459][T22018] libceph: mon0 (1)[c::]:6789 connect error [ 1468.777261][T22018] libceph: connect (1)[c::]:6789 error -22 [ 1468.781645][T22018] libceph: mon0 (1)[c::]:6789 connect error [ 1468.995242][T24033] netlink: 'syz.5.4049': attribute type 1 has an invalid length. [ 1469.010131][T24033] bond2: entered promiscuous mode [ 1469.012171][T24033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1469.037161][T22018] libceph: connect (1)[c::]:6789 error -22 [ 1469.039380][T22018] libceph: mon0 (1)[c::]:6789 connect error [ 1469.090660][T24033] bond2: (slave bridge3): making interface the new active one [ 1469.097211][T24033] bridge3: entered promiscuous mode [ 1469.100177][T24033] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1469.250877][T24036] lo speed is unknown, defaulting to 1000 [ 1469.387396][T24028] ceph: No mds server is up or the cluster is laggy [ 1469.565595][ T4299] libceph: connect (1)[c::]:6789 error -22 [ 1469.573541][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 1469.619240][T24036] lo speed is unknown, defaulting to 1000 [ 1469.848025][T24043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4052'. [ 1470.523259][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4054'. [ 1471.543513][T22148] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1471.717736][T22148] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1471.721811][T22148] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1471.725656][T22148] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1471.729618][T22148] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.739027][T22148] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1471.741957][T22148] usb 9-1: invalid MIDI out EP 0 [ 1471.845587][T22148] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1472.013246][T22018] usb 9-1: USB disconnect, device number 69 [ 1472.315945][T24084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.319524][T24084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.629334][T24097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1474.192125][T10596] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1474.420064][T10596] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1474.423946][T10596] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1474.432335][T10596] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1474.488053][T10596] usb 10-1: can't read configurations, error -71 [ 1475.357033][T19018] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1475.548425][T19018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1475.570461][T19018] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1475.597307][T19018] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1475.600351][T19018] usb 6-1: can't read configurations, error -71 [ 1476.963680][T18832] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1477.192908][T18832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1477.265182][T18832] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1477.309920][T18832] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1477.313022][T18832] usb 6-1: can't read configurations, error -71 [ 1478.463407][T19018] usb 10-1: new full-speed USB device number 60 using dummy_hcd [ 1478.657822][T19018] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1478.686961][T19018] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.694888][T19018] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1478.714076][T19018] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1478.843231][T19018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.939326][T19018] usb 10-1: Product: syz [ 1478.941250][T19018] usb 10-1: Manufacturer: syz [ 1478.974822][T19018] usb 10-1: SerialNumber: syz [ 1479.028191][T19018] cdc_mbim 10-1:1.0: skipping garbage [ 1479.030824][T19018] cdc_mbim 10-1:1.0: skipping garbage [ 1479.033187][T19018] cdc_mbim 10-1:1.0: CDC Union missing and no IAD found [ 1479.036487][T19018] cdc_mbim 10-1:1.0: bind() failure [ 1479.281971][T19018] usb 10-1: USB disconnect, device number 60 [ 1479.935173][T24176] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 1480.517943][T22018] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1480.647103][T24193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4085'. [ 1481.368112][T22018] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1481.379962][T22018] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1481.388746][T22018] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1481.394885][T22018] usb 9-1: can't read configurations, error -71 [ 1482.672997][T24219] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1482.757155][T22018] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1483.048427][T22018] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1483.054992][T22018] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1483.062325][T22018] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1483.067798][T22018] usb 9-1: can't read configurations, error -71 [ 1484.077275][ T4299] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1484.097735][T19018] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1484.281669][ T4299] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1484.286534][ T4299] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1484.292535][ T4299] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1484.305980][ T4299] usb 10-1: can't read configurations, error -71 [ 1484.616551][T19018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1484.623841][T19018] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1484.696534][T19018] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1484.700106][T19018] usb 6-1: can't read configurations, error -71 [ 1484.832088][T24232] pim6reg: entered allmulticast mode [ 1484.898476][T24231] pim6reg: left allmulticast mode [ 1485.067019][T24235] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4094'. [ 1485.279396][T24237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4095'. [ 1486.630655][T24254] lo speed is unknown, defaulting to 1000 [ 1487.489406][T24254] lo speed is unknown, defaulting to 1000 [ 1490.610673][T24288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4105'. [ 1491.237071][ T4299] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1491.257166][T22018] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1491.453985][T22018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1491.501384][T22018] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1491.533548][T22018] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1491.547669][T22018] usb 6-1: can't read configurations, error -71 [ 1491.551382][ T4299] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1491.555667][ T4299] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1491.571379][ T4299] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1491.579595][ T4299] usb 10-1: can't read configurations, error -71 [ 1492.002004][T24306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1492.904558][T24316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4110'. [ 1493.227013][ T4299] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1493.392089][ T4299] usb 10-1: Using ep0 maxpacket: 8 [ 1493.405253][ T4299] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1493.445173][ T4299] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.450467][ T4299] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.463619][ T4299] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1493.473023][ T4299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.488969][ T4299] usb 10-1: config 0 descriptor?? [ 1493.979468][ T4299] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1494.015852][ T4299] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1494.022956][ T4299] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1494.027257][ T4299] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1494.080610][ T4299] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1494.114112][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 1494.198028][ T4299] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1494.902779][ T4299] usb 10-1: USB disconnect, device number 65 [ 1495.165841][T24343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.183912][T24343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.811072][T24352] Console: switching to colour dummy device 80x25 [ 1496.157170][ T4299] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1496.340501][ T4299] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1496.356731][ T4299] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.363373][ T4299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1496.370258][ T4299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1496.380028][ T4299] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1496.390154][ T4299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.505021][T24359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1497.853887][ T4299] usb 10-1: config 0 descriptor?? [ 1497.868431][T24347] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1498.127691][ T4299] usbhid 10-1:0.0: can't add hid device: -71 [ 1498.130685][ T4299] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1498.169546][ T4299] usb 10-1: USB disconnect, device number 66 [ 1500.240444][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4127'. [ 1500.290830][T24376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4125'. [ 1500.917577][T24385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1502.153104][T24399] openvswitch: netlink: Duplicate key (type 6). [ 1502.549350][T24404] vlan0: entered promiscuous mode [ 1502.566304][T24404] hsr0: entered promiscuous mode [ 1502.578056][T24404] vlan0: entered allmulticast mode [ 1502.581477][T24404] hsr0: entered allmulticast mode [ 1502.584660][T24404] hsr_slave_0: entered allmulticast mode [ 1502.589367][T24404] hsr_slave_1: entered allmulticast mode [ 1502.615646][T24404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4132'. [ 1502.631152][T24405] smc: adding net device vlan1 with user defined pnetid SYZ2 [ 1502.696659][T24405] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 1502.752059][T24404] hsr_slave_0: left promiscuous mode [ 1502.982405][T24404] hsr_slave_1: left promiscuous mode [ 1503.326291][T24412] program syz.4.4134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1503.349186][T24412] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1503.436201][T24412] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1503.459579][T24412] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1503.464298][T24412] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1503.498809][T24412] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1503.560354][T24413] netlink: 'syz.5.4133': attribute type 4 has an invalid length. [ 1503.585139][T24412] pci 0000:00:01.0: Adding to iommu group 1 [ 1503.595412][T24412] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1503.614801][T24412] pci 0000:00:01.0: vgaarb: bridge control possible [ 1503.618295][T24412] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1503.653033][T24412] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1503.674964][T24412] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1503.726609][T24412] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1503.894163][T24412] [drm] Found bochs VGA, ID 0xb0c5. [ 1503.898380][T24412] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1503.941321][T24412] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1504.320830][T24412] Console: switching to colour frame buffer device 160x50 [ 1504.336833][T24412] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1504.448025][T24421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1506.126102][T24431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4137'. [ 1507.261698][T24440] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1507.311590][T24449] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1507.959407][T24455] batadv_slave_1: entered promiscuous mode [ 1508.022115][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4143'. [ 1508.115508][T24456] batadv_slave_1: left promiscuous mode [ 1509.023729][T24465] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4144'. [ 1509.363282][T22148] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1509.597412][T22148] usb 6-1: Using ep0 maxpacket: 8 [ 1509.628259][T22148] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1509.672560][T22148] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1509.704333][T22148] usb 6-1: config 0 has no interface number 0 [ 1509.726262][T22148] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1509.734328][T22148] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1509.743381][T22148] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1509.766219][T22148] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1509.801760][T22148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.828908][T22148] usb 6-1: config 0 descriptor?? [ 1509.855456][T22148] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1510.594647][T24482] lo speed is unknown, defaulting to 1000 [ 1511.492083][T24482] lo speed is unknown, defaulting to 1000 [ 1512.913725][ T4299] usb 6-1: USB disconnect, device number 105 [ 1512.931059][ T4299] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1513.628202][T24511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4156'. [ 1514.318373][T24525] netlink: 'syz.0.4159': attribute type 4 has an invalid length. [ 1514.811400][T24536] comedi comedi1: comedi_parport: I/O base address not correctly aligned [ 1514.820116][T24532] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1514.822982][T24532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1514.868320][T24537] hub 8-0:1.0: USB hub found [ 1514.887710][T24532] vhci_hcd vhci_hcd.0: Device attached [ 1515.082454][T24532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1515.086452][T24537] hub 8-0:1.0: 1 port detected [ 1515.186151][T22148] usb 38-1: SetAddress Request (30) to port 0 [ 1515.189354][T22148] usb 38-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1515.275964][T19018] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1515.567328][T19018] usb 6-1: Using ep0 maxpacket: 32 [ 1515.577312][T19018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1515.580581][T19018] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1515.600459][T19018] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1515.600554][T19018] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1515.600575][T19018] usb 6-1: config 14 has no interface number 0 [ 1515.600589][T19018] usb 6-1: config 14 has no interface number 1 [ 1515.600937][T19018] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1515.600965][T19018] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1515.600992][T19018] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1515.601018][T19018] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1515.601040][T19018] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1515.601055][T19018] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1515.688338][T19018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.705397][T24533] vhci_hcd: connection reset by peer [ 1515.708078][T19018] usb 6-1: Product: syz [ 1515.735114][T15756] vhci_hcd vhci_hcd.0: stop threads [ 1515.767041][T19018] usb 6-1: Manufacturer: syz [ 1515.776674][T15756] vhci_hcd vhci_hcd.0: release socket [ 1515.804519][T15756] vhci_hcd vhci_hcd.0: disconnect device [ 1515.816538][T19018] usb 6-1: SerialNumber: syz [ 1517.768116][T24560] cgroup: release_agent respecified [ 1517.877640][T24560] random: crng reseeded on system resumption [ 1517.936734][T19018] legousbtower 6-1:14.57: interrupt endpoints not found [ 1517.984216][T19018] legousbtower 6-1:14.228: interrupt endpoints not found [ 1518.065107][T19018] usb 6-1: USB disconnect, device number 106 [ 1518.158408][T24565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4166'. [ 1520.287581][T22148] usb 38-1: device descriptor read/8, error -110 [ 1520.493983][T24593] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1520.655452][T24613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1520.780474][T22148] usb usb38-port1: attempt power cycle [ 1521.493380][T22148] usb usb38-port1: unable to enumerate USB device [ 1521.772177][ T65] Bluetooth: hci5: command 0x0405 tx timeout [ 1521.856354][T24630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4176'. [ 1522.021695][T22148] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1522.285237][T22148] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1522.346390][T22148] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1522.432315][T22148] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1522.441925][T22148] usb 6-1: can't read configurations, error -71 [ 1524.213903][T24661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.223762][T24661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.633352][T19018] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1524.840932][T19018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1524.844904][T19018] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1524.876980][T19018] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1524.881647][T19018] usb 6-1: can't read configurations, error -71 [ 1527.317101][T19018] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1527.535630][T19018] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1527.538739][T19018] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1527.560174][T19018] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1527.567458][T19018] usb 6-1: can't read configurations, error -71 [ 1527.833395][T24713] bridge0: entered promiscuous mode [ 1527.836452][T24713] bridge0: entered allmulticast mode [ 1528.040835][T24713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4193'. [ 1528.554091][T24721] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 1529.606697][T24739] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1529.611407][ T50] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1529.842445][ T50] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1529.846766][ T50] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1529.897295][ T50] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1529.904837][ T50] usb 10-1: can't read configurations, error -71 [ 1532.175491][T24784] tmpfs: Unknown parameter 'h9孱H{dxi80Zl |w?VHC\W4tC|A [ 1532.175491][T24784] 5' [ 1532.268159][T21684] Bluetooth: hci1: Frame reassembly failed (-84) [ 1532.673508][ T42] audit: type=1804 audit(1786964622.917:66703): pid=24793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4208" name="/newroot/1030/bus/bus" dev="overlay" ino=5809 res=1 errno=0 [ 1534.327621][ T5747] Bluetooth: hci1: command 0x1003 tx timeout [ 1534.340816][ T65] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1534.733143][ T4299] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1534.913323][T24816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4214'. [ 1535.039692][ T4299] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1535.046006][ T4299] usb 10-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1535.109949][ T4299] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1535.113435][ T4299] usb 10-1: can't read configurations, error -71 [ 1537.213588][T24844] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4222'. [ 1537.335274][T24844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4222'. [ 1537.712644][T24854] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4223'. [ 1539.677536][T24865] lo speed is unknown, defaulting to 1000 [ 1539.764461][T24870] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4226'. [ 1540.022134][T24865] lo speed is unknown, defaulting to 1000 [ 1540.902616][T24882] lo speed is unknown, defaulting to 1000 [ 1542.007791][T24882] lo speed is unknown, defaulting to 1000 [ 1542.637077][T19018] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1542.797047][T19018] usb 10-1: Using ep0 maxpacket: 8 [ 1542.800305][T19018] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1542.808438][T19018] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1542.813498][T19018] usb 10-1: config 0 has no interface number 0 [ 1542.826325][T19018] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1542.851822][T19018] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1542.856234][T19018] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1542.862471][T19018] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1542.892318][T19018] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.145803][T19018] usb 10-1: config 0 descriptor?? [ 1543.182864][T19018] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1544.458594][T24900] lo speed is unknown, defaulting to 1000 [ 1545.830728][T24900] lo speed is unknown, defaulting to 1000 [ 1545.952826][T24910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.969071][T24910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.033997][T24913] cgroup: subsys name conflicts with all [ 1546.424874][T24920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4238'. [ 1547.551589][T24932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4239'. [ 1547.885181][ T4299] usb 10-1: USB disconnect, device number 71 [ 1547.892870][ T4299] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1548.465313][T24939] CIFS: Attempting to mount //127.0.0.1/share [ 1549.638887][T24939] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1549.645699][T24939] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1551.531124][T18832] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1551.659153][T24989] bridge0: entered promiscuous mode [ 1551.674691][T24989] bridge0: entered allmulticast mode [ 1551.726239][T18832] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1551.750809][T18832] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1551.768817][T18832] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1551.774846][T18832] usb 6-1: can't read configurations, error -71 [ 1551.967036][T24990] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4249'. [ 1552.769277][ T40] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1553.040341][ T40] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1553.056116][ T40] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1553.060833][ T40] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1553.064227][ T40] usb 9-1: can't read configurations, error -71 [ 1553.164828][T22148] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1553.358373][T22148] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1553.364782][T22148] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1553.417505][T22148] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1553.455201][T22148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.550262][T25000] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1553.614022][T22148] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1554.044177][T25004] nvme nvme0: failed to connect socket: -512 [ 1556.145302][T22148] usb 6-1: USB disconnect, device number 115 [ 1556.607139][T25026] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1556.662066][T25028] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4267'. [ 1558.103740][T25045] CIFS: Attempting to mount //127.0.0.1/share [ 1558.999639][T25045] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1559.045548][T25045] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1559.921148][T19018] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1560.052215][T25067] bridge0: entered promiscuous mode [ 1560.055734][T25067] bridge0: entered allmulticast mode [ 1560.182433][T19018] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1560.205415][T19018] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 1560.215369][T19018] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1560.224214][T19018] usb 9-1: can't read configurations, error -71 [ 1560.228949][T25069] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1560.260918][T25069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1560.271220][T25069] vhci_hcd vhci_hcd.0: Device attached [ 1560.339203][T25067] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1560.364723][T25067] dummy0 (unregistering): left promiscuous mode [ 1560.399374][T25067] team0: Port device dummy0 removed [ 1560.464611][ T9854] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1560.532580][ T9854] usb 47-1: new full-speed USB device number 4 using vhci_hcd [ 1560.704468][T25077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.721855][T25077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.913319][T25070] vhci_hcd: connection reset by peer [ 1560.965340][ T5811] vhci_hcd vhci_hcd.5: stop threads [ 1560.967573][ T5811] vhci_hcd vhci_hcd.5: release socket [ 1560.970219][ T5811] vhci_hcd vhci_hcd.5: disconnect device [ 1563.293600][T25091] x_tables: duplicate underflow at hook 1 [ 1563.404346][T25094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4270'. [ 1565.686950][ T9854] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1565.751177][T25101] batadv_slave_1: left allmulticast mode [ 1565.776797][T25117] pim6reg: entered allmulticast mode [ 1565.849693][T25114] team0: entered allmulticast mode [ 1565.853578][T25114] team_slave_0: entered allmulticast mode [ 1565.912161][T25114] team_slave_1: entered allmulticast mode [ 1565.928829][T25121] team0: left allmulticast mode [ 1565.931066][T25121] team_slave_0: left allmulticast mode [ 1565.935203][T25121] team_slave_1: left allmulticast mode [ 1565.939700][T25121] pim6reg: left allmulticast mode [ 1567.222963][T25136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.249027][T25136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.946830][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1567.952490][T25149] bridge_slave_1: left allmulticast mode [ 1567.955715][T25149] bridge_slave_1: left promiscuous mode [ 1567.967431][T25149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.976794][T25149] bridge_slave_0: left allmulticast mode [ 1567.990037][T25149] bridge_slave_0: left promiscuous mode [ 1568.018084][T25149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.518007][T25156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4282'. [ 1569.166450][T25162] jffs2: notice: (25162) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1569.548645][T25169] 9p: Bad value for 'rfdno' [ 1569.598124][T25169] Console: switching to colour dummy device 80x25 [ 1570.641011][T25177] lo speed is unknown, defaulting to 1000 [ 1570.759495][T25171] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1570.909944][T25171] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1570.957224][T25171] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff] [ 1570.960006][T25171] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1570.963479][T25171] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1571.094611][T25171] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 128203 usecs [ 1571.129046][T25171] pci 0000:00:01.0: Adding to iommu group 1 [ 1571.136620][T25171] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1571.139716][T25171] pci 0000:00:01.0: vgaarb: bridge control possible [ 1571.142427][T25171] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1571.170554][T25171] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1571.190304][T25171] pci 0000:00:01.0: BAR 2 [mem 0x81084000-0x81084fff]: assigned [ 1571.194602][T25171] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1571.231905][T25171] [drm] Found bochs VGA, ID 0xb0c5. [ 1571.251086][T25171] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81084000. [ 1571.279181][T25171] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1571.629579][T25177] lo speed is unknown, defaulting to 1000 [ 1572.147904][ T42] audit: type=1800 audit(1786964662.377:66704): pid=25161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4284" name="bus" dev="ramfs" ino=109146 res=0 errno=0 [ 1572.338724][T25192] program syz.5.4288 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1572.393477][T25192] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 1572.687244][ T40] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1572.870200][ T40] usb 9-1: Using ep0 maxpacket: 32 [ 1572.894885][ T40] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1572.924987][ T40] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1572.944356][ T40] usb 9-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 1572.981368][ T40] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.986749][ T40] usb 9-1: Product: syz [ 1572.989314][ T40] usb 9-1: Manufacturer: syz [ 1572.992142][ T40] usb 9-1: SerialNumber: syz [ 1573.569262][ T40] usb 9-1: USB disconnect, device number 78 [ 1575.008533][T25203] nbd: socks must be embedded in a SOCK_ITEM attr [ 1575.018828][T25203] block nbd0: shutting down sockets [ 1575.120403][T25204] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4291'. [ 1576.435270][T25215] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN NOPTI [ 1576.439367][T25215] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 1576.455005][T25215] CPU: 1 UID: 0 PID: 25215 Comm: syz.5.4302 Tainted: G L syzkaller #0 PREEMPT(full) [ 1576.473176][T25215] Tainted: [L]=SOFTLOCKUP [ 1576.478432][T25215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1576.490433][T25215] RIP: 0010:configfs_symlink+0x5a6/0x11f0 [ 1576.494782][T25215] Code: 3c 02 00 0f 85 2b 0b 00 00 48 8b 44 24 20 48 8b 68 48 48 b8 00 00 00 00 00 fc ff df 48 8d bd b0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f6 0a 00 00 48 8b 85 b0 00 00 00 48 89 c7 48 89 [ 1576.518277][T25215] RSP: 0018:ffffc900062dfcb0 EFLAGS: 00010202 [ 1576.530798][T25215] RAX: dffffc0000000000 RBX: ffff88801311eeb0 RCX: fffff52000c5bf70 [ 1576.538002][T25215] RDX: 0000000000000016 RSI: ffffffff8c3fe500 RDI: 00000000000000b0 [ 1576.541309][T25215] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff224431a [ 1576.566589][T25215] R10: ffffc900062dfcb0 R11: 0000000000000000 R12: ffff888012eb4280 [ 1576.576225][T25215] R13: ffff888012eb4358 R14: ffff88802573e600 R15: ffff888000876600 [ 1576.587235][T25215] FS: 0000000000000000(0000) GS:ffff888096ce6000(0063) knlGS:00000000f549db40 [ 1576.595532][T25215] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1576.599930][T25215] CR2: 00000000f5037ff4 CR3: 0000000044f1b000 CR4: 0000000000352ef0 [ 1576.604985][T25215] Call Trace: [ 1576.607042][T25215] [ 1576.609012][T25215] ? bpf_lsm_inode_permission+0x9/0x10 [ 1576.613397][T25215] ? security_inode_permission+0xbf/0x250 [ 1576.616765][T25215] ? __pfx_configfs_symlink+0x10/0x10 [ 1576.619542][T25215] vfs_symlink+0x178/0x4d0 [ 1576.621904][T25215] filename_symlinkat+0x2a6/0x560 [ 1576.624629][T25215] ? __pfx_filename_symlinkat+0x10/0x10 [ 1576.628231][T25215] ? strncpy_from_user+0x19d/0x2d0 [ 1576.634069][T25215] ? do_getname+0x191/0x390 [ 1576.637748][T25215] __ia32_sys_symlinkat+0x9b/0xe0 [ 1576.640954][T25215] __do_fast_syscall_32+0xe7/0x970 [ 1576.643695][T25215] do_fast_syscall_32+0x32/0x70 [ 1576.646150][T25215] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1576.648900][T25215] RIP: 0023:0xf70aefec [ 1576.650532][T25215] Code: Unable to access opcode bytes at 0xf70aefc2. [ 1576.653386][T25215] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 1576.656696][T25215] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 00000000ffffff9c [ 1576.661306][T25215] RDX: 0000000080000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 1576.668311][T25215] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1576.677118][T25215] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1576.693688][T25215] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1576.698429][T25215] [ 1576.699725][T25215] Modules linked in: [ 1576.701902][T25215] ---[ end trace 0000000000000000 ]--- [ 1576.724861][T25215] RIP: 0010:configfs_symlink+0x5a6/0x11f0 [ 1576.727387][T25215] Code: 3c 02 00 0f 85 2b 0b 00 00 48 8b 44 24 20 48 8b 68 48 48 b8 00 00 00 00 00 fc ff df 48 8d bd b0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 f6 0a 00 00 48 8b 85 b0 00 00 00 48 89 c7 48 89 [ 1576.749070][T25217] nvme nvme0: failed to connect socket: -512 [ 1576.754679][T25215] RSP: 0018:ffffc900062dfcb0 EFLAGS: 00010202 [ 1576.782930][T25215] RAX: dffffc0000000000 RBX: ffff88801311eeb0 RCX: fffff52000c5bf70 [ 1576.788471][T25215] RDX: 0000000000000016 RSI: ffffffff8c3fe500 RDI: 00000000000000b0 [ 1576.813024][T25215] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff224431a [ 1576.816571][T25215] R10: ffffc900062dfcb0 R11: 0000000000000000 R12: ffff888012eb4280 [ 1576.875171][T25215] R13: ffff888012eb4358 R14: ffff88802573e600 R15: ffff888000876600 [ 1576.879937][T25215] FS: 0000000000000000(0000) GS:ffff888096be6000(0063) knlGS:00000000f549db40 [ 1576.883974][T25215] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1576.899300][T25215] CR2: 00000000801d2018 CR3: 0000000044f1b000 CR4: 0000000000352ef0 [ 1576.902433][T25215] Kernel panic - not syncing: Fatal exception [ 1576.941665][T25215] Kernel Offset: disabled [ 1576.954520][T25215] Rebooting in 86400 seconds..