last executing test programs: 31m56.783001181s ago: executing program 32 (id=26): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000086000000bf0900000000000055090100000000009500000000000000bdaa06000000000018130000", @ANYRES32, @ANYBLOB="00000000000000001801000020646c2500000000002020207b1af8e078bfb12889df6f000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0xffe, &(0x7f0000001cc0)=""/4094, 0x41100, 0x4d}, 0x94) 31m49.434058154s ago: executing program 33 (id=77): capset(&(0x7f00000004c0)={0x20080522}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) 30m42.818040424s ago: executing program 34 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30m10.362329705s ago: executing program 35 (id=819): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1038410, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)=@known='trusted.overlay.metacopy\x00', &(0x7f00000003c0)='-@{]#*))]\x00', 0xa, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0/file1\x00') 28m8.388408194s ago: executing program 36 (id=1139): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000040)={0x7}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) syz_io_uring_setup(0x50f, &(0x7f0000000380)={0x0, 0x2e41, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r4, 0x0}) 27m39.184043618s ago: executing program 37 (id=1206): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x4) 26m42.414504268s ago: executing program 9 (id=1387): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100), 0x10) 26m41.308157038s ago: executing program 9 (id=1391): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12) r2 = syz_clone(0x20004000, &(0x7f0000000100)="592af507723761d4835d74a7e9f71ac19e77f0838509bd3b2eb189a82704fb6db5cd", 0x22, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") sched_setaffinity(r1, 0x8, &(0x7f00000011c0)=0x8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000001240)={@multicast1, @broadcast}, 0xc) r4 = epoll_create(0x9) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000001280)={r4, r0, 0x9cd5}) ptrace(0xffffffffffffffff, r2) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f00000012c0)={[0x2]}) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f0000001300), 0x1003) r5 = gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000001340)={@remote}, 0x14) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001380), 0x240, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r7, 0x40045108, &(0x7f00000013c0)=0x5) ptrace$setregs(0xf, r2, 0xffff, &(0x7f0000001400)="bb77af299f1aa49605a64476214d79521e351ddb325eaececb5df9630b933399587fa13fb3bb97591297c77e34") ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001480)={0x23, 0x9, {r5}, {0xee00}, 0x9, 0xf}) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000014c0)={0x0, 0x3ff, {r2}, {r10}, 0xec1, 0x6c}) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001500)={0x0, 0x4, {r9}, {r11}, 0x3, 0xfffffffffffffffb}) fallocate(r4, 0x52, 0x9, 0x7) fcntl$lock(r8, 0x25, &(0x7f0000001540)={0x0, 0x4, 0x8, 0xfffffffffffffff7, r1}) ptrace$setregset(0x4205, r9, 0x4, &(0x7f0000001680)={&(0x7f0000001580)="1a53b96889ab704b9caa5cc6482928d2d7addc82db5c16568255dd887d099aa753e4bcde9823eb80b1e6c574a6b92639bc8200f960ded39116adf76c77d127014ccf9ace88b7efbe826bbdff833a4d865283be31356cfd6fac76e57cd2cae044789c223e13477df242b9f7110d2a7976c8c28ac86dd0e62b53b4d54a090b5f20a0f724aeee9e5bec23e2a249bf7eba1a14f2d64c3f86fc1cfaecf165c1c1030811b9d0439eff1048827d7193e16bb733f92780d5223f66a7465a696eb07e546a3b22cf2e405f45653a90f2d619f62262a3d14c290055a55b9a9318083c", 0xdd}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000001700)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 26m39.945954137s ago: executing program 9 (id=1393): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 26m37.316613759s ago: executing program 9 (id=1398): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000200)=[{0x3, 0x8001, 0x41, &(0x7f0000000080)="f253ade9dec81a0f5db558722bbf7ea0e8d63bcf9396eafd81bfbd48bac96ccff0e30fcdd7fb2656c4d588b3ad9b46d554b057454c626ae96f9728f7c8071a52ca"}], 0x1}) 26m33.66392071s ago: executing program 9 (id=1409): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080), 0x0) 26m31.664515542s ago: executing program 9 (id=1415): socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r2, r3, 0x0) 26m16.558562206s ago: executing program 38 (id=1415): socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd2(0x0, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r2, r3, 0x0) 20m15.916130964s ago: executing program 1 (id=2331): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x628, &(0x7f00000001c0)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x5f2, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, [{0x5, 0xe, "7db4000005d4a3b4364be7baa2d73b4ac24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d980110420fa979a3"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x1f, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0xa2, "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"}]}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x2, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000040)={{@any, 0xf}, 0x0, 0x1, 0x9}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r2, r2) wait4(r2, 0x0, 0x2, 0x0) setpgid(0x0, 0x0) 20m12.391518073s ago: executing program 1 (id=2341): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 20m10.138997888s ago: executing program 1 (id=2344): syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r2 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x0, 0x15b}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000300)) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x0, 0x400, 0x0, 0x3de6309979d131fe, [], [0xfffffffe, 0x5]}}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1001d, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {0x0, 0xfd}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {0x2}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x1}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @tick=0x8, {}, {}, @connect={{}, {0x0, 0x5}}}, {0x5, 0x1, 0x7f, 0x2, @time={0xffffffff, 0xd}, {0xac, 0x1}, {0x3, 0xda}, @result={0x8, 0x81}}], 0x8c) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r6, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x109200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) syz_open_dev$amidi(&(0x7f0000000040), 0xa, 0x10602) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x32) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0xffffffffffffffff) 20m7.373064296s ago: executing program 1 (id=2352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 20m7.205941834s ago: executing program 1 (id=2354): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 20m4.673940127s ago: executing program 1 (id=2362): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) 19m49.49463634s ago: executing program 39 (id=2362): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r7}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8936, &(0x7f0000000000)) 18m34.09675088s ago: executing program 8 (id=2558): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(0x0, 0x0, 0x1, &(0x7f0000ffe000/0x2000)=nil, 0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000100)={0x2a, 0x1, 0x8000}, 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r2, &(0x7f0000000340), 0x0) 18m33.02937959s ago: executing program 8 (id=2565): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x4, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x14b0050, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffe, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) keyctl$join(0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x7d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18m32.200396078s ago: executing program 8 (id=2568): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x2}) 18m31.856766088s ago: executing program 8 (id=2570): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_subtree(r2, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 18m30.391090351s ago: executing program 8 (id=2575): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') openat$cgroup_int(r5, &(0x7f0000000e00)='cpuset.mems\x00', 0x2, 0x0) dup(0xffffffffffffffff) 18m26.862478721s ago: executing program 8 (id=2582): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x0, 0x17, 0x59, "442228f7ce7e5dfb700ed0b33dcdf87ebb4becf290ad23b656a3484126fe0304d7d177e3718021a30ad8107636996d89c9bf84bff6d9b18af7ba3ca85c581a979886867cb36dd49fb7da50787e2d8bc2a90da26a4a798c6c5c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @remote, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff, 0xff, 0xa, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x184}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x101, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 18m10.891707137s ago: executing program 40 (id=2582): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000280)={0x0, 0x17, 0x59, "442228f7ce7e5dfb700ed0b33dcdf87ebb4becf290ad23b656a3484126fe0304d7d177e3718021a30ad8107636996d89c9bf84bff6d9b18af7ba3ca85c581a979886867cb36dd49fb7da50787e2d8bc2a90da26a4a798c6c5c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x104, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @remote, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0xffffffff, 0xff, 0xa, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'pimreg\x00', {0xff}, {}, 0x0, 0x184}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x101, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @rand_addr=0x64010102, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 17m19.406380963s ago: executing program 7 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x25, 0x18, @void}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 17m12.417248102s ago: executing program 7 (id=2713): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x3702, 0xb76a, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000340)={0xfc, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x99c, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @ib={0x1b, 0x9, 0xc6b3, {"a3081b743222dacd13b6a3d9689f0cf0"}, 0x2, 0x5bc4, 0x5}, @in6={0xa, 0x4e04, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf84f}}}, 0x118) close_range(r0, r0, 0x0) 17m11.306446475s ago: executing program 7 (id=2718): socket$inet6_tcp(0xa, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940), 0x62, 0x4890) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 17m9.784282673s ago: executing program 7 (id=2721): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) rmdir(0x0) 17m7.678320635s ago: executing program 7 (id=2728): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x3702, 0xb76a, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000340)={0xfc, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x99c, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @ib={0x1b, 0x9, 0xc6b3, {"a3081b743222dacd13b6a3d9689f0cf0"}, 0x2, 0x5bc4, 0x5}, @in6={0xa, 0x4e04, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf84f}}}, 0x118) close_range(r0, r0, 0x0) 17m7.146493798s ago: executing program 7 (id=2730): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 16m51.842897364s ago: executing program 41 (id=2730): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 5m14.37256585s ago: executing program 3 (id=4850): mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') 5m14.148058178s ago: executing program 3 (id=4854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) openat$sw_sync(0xffffff9c, &(0x7f0000000200), 0x42040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 5m13.035069834s ago: executing program 3 (id=4859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5m12.498364768s ago: executing program 3 (id=4861): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m9.12094988s ago: executing program 3 (id=4871): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100f0, 0x0) 5m8.5014863s ago: executing program 3 (id=4872): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$peek(0x2, r3, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x17, 0xb, 0x35}, 0x2c) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) creat(0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r4, 0x0, 0x1000, 0x1, &(0x7f0000000100)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) 4m53.27912888s ago: executing program 42 (id=4872): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$peek(0x2, r3, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x17, 0xb, 0x35}, 0x2c) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) creat(0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r4, 0x0, 0x1000, 0x1, &(0x7f0000000100)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) 8.177444106s ago: executing program 6 (id=6224): removexattr(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0x1, 0x619, &(0x7f0000001480)="$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") setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$security_capability(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d80), 0x0, 0x0, 0x0) 8.100222985s ago: executing program 4 (id=6225): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f00000005c0)={[{@dioread_nolock}, {@grpquota}, {@bh}, {@noblock_validity}]}, 0x4, 0x480, &(0x7f0000001040)="$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") timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x7, 0xffffffffffffffff}, {0xffffffff, 0x0, 0xe95c, 0x101}]}) 7.836718178s ago: executing program 0 (id=6227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r0) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r1, 0x4b3d, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6(0xa, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 7.057425725s ago: executing program 0 (id=6228): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x0, 0x9, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) dup(r0) shutdown(r0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) write$P9_RMKDIR(r0, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x8, 0x3, 0x3}}, 0x14) 6.948253926s ago: executing program 6 (id=6230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x50) 6.823523891s ago: executing program 0 (id=6232): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x20, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80) close(0x3) 6.708320527s ago: executing program 2 (id=6233): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x64000, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 6.624849736s ago: executing program 0 (id=6234): unshare(0x64000600) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) socket$inet6_icmp(0xa, 0x2, 0x3a) 6.624546536s ago: executing program 6 (id=6235): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x400c890) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000101030000000000000000000a0000053800028006000340000100002c0001801400030000000000000000000000ffffac1e000114000400fc0000000000000000000000000000016ccd955d0d562691ee0694b6fbc85f30144a13de0d6b44763cec46d8a01f07b2aeb193a29c8d3d9fdda5c3b3bccc76e1443e2cf1173336cc40944137897502b1cd34c635aecd40bb4fb9"], 0x4c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000c090) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000240), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f0000000200)=[{0x7, 0xa00, 0x46, &(0x7f00000002c0)="2d1ed09c847ed9f3f6d9a003405972feb51ff76f8d83b818162a3b9cb7693e37df65e2f847095c37e0d78a9c34cb2e786b407f50a4044a46f11d87580d214588cd0af9b47aa0"}], 0x1}) 6.240268683s ago: executing program 4 (id=6236): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x8000000000, 0x1, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) 5.340334823s ago: executing program 5 (id=6237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) close(0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {0x0}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x2, 0x22, 0x0) write(r0, 0x0, 0x0) 4.424525213s ago: executing program 5 (id=6238): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in6=@private2, 0x4ea0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x40000000000000, 0x1, 0xfffffffffffffff8}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x70bd2d, 0x70bd26, 0x70bd2a, 0x10}}]}, 0x154}}, 0x0) 3.578301057s ago: executing program 4 (id=6239): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r0, &(0x7f0000007300)="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", 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x8100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.345355179s ago: executing program 6 (id=6240): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r4, 0x0}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score\x00') preadv(r8, &(0x7f0000000040)=[{0x0}], 0x1, 0x16, 0xfffffff9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x0, 0xf514, {{0x29, 0x4, 0x0, 0x4, 0xa4, 0x64, 0x0, 0x9, 0x4, 0x0, @private=0xa010101, @empty, {[@ssrr={0x89, 0xf, 0xf6, [@multicast1, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xd4, 0x3, 0xb, [{@private=0xa010101, 0x7}]}, @timestamp_addr={0x44, 0xc, 0xde, 0x1, 0xe, [{@empty, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0x4, [{@empty, 0xffff}, {@remote, 0x24000}]}, @ssrr={0x89, 0x7, 0x58, [@multicast1]}, @timestamp_addr={0x44, 0x34, 0x1e, 0x1, 0xd, [{@local, 0xfffffffc}, {@broadcast, 0xb2c}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x400}, {@broadcast, 0x8}, {@rand_addr=0x64010100, 0x9}, {@multicast1, 0x7ff}]}, @generic={0x88, 0x2}, @rr={0x7, 0x17, 0x6a, [@multicast2, @private=0xa010102, @multicast2, @local, @local]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 3.240180753s ago: executing program 5 (id=6241): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) io_setup(0xd3, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) alarm(0x401) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x8, 0x7f, 0x5, 0xe4, 0x9, 0x2, 0x41, 0x7, 0x5c, 0x5, 0x3, 0x7f, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x5, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 2.403501889s ago: executing program 4 (id=6242): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r3, 0x0, 0x9, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) dup(r0) shutdown(r0, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) write$P9_RMKDIR(r0, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x8, 0x3, 0x3}}, 0x14) 2.188754569s ago: executing program 2 (id=6243): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1813", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 2.112331672s ago: executing program 4 (id=6244): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r2, r1, 0x9, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) 2.039517042s ago: executing program 0 (id=6245): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x6}}, 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.912283843s ago: executing program 2 (id=6246): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0x81, 0x560c, {0x803, 0x5d5}, {0x59f, 0x2}, @cond=[{0x1000, 0xf934, 0x3, 0x19f, 0xc5df, 0x84}, {0xd, 0x1416, 0x245, 0x2, 0x3, 0x5}]}) 1.864424588s ago: executing program 4 (id=6247): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9, 0x0, 0x0, 0xe}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.789588288s ago: executing program 5 (id=6248): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) close(0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {0x0}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x2, 0x22, 0x0) write(r0, 0x0, 0x0) 1.779243313s ago: executing program 0 (id=6249): socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b700000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x8000000000, 0x1, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffffffc}, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, 0x0) 1.511202917s ago: executing program 5 (id=6250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x7, 0x2, r4}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) io_setup(0xd3, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) alarm(0x401) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0x7, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xc0, 0x5, 0x8, 0x7f, 0x5, 0xe4, 0x9, 0x2, 0x41, 0x7, 0x5c, 0x5, 0x3, 0x7f, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x5, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 1.151205661s ago: executing program 6 (id=6251): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03"], 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 852.312421ms ago: executing program 2 (id=6252): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000800000100000000000000006b1128000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 328.155305ms ago: executing program 6 (id=6253): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x64000, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 187.272826ms ago: executing program 2 (id=6254): read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) shutdown(0xffffffffffffffff, 0x1) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x20040) fsmount(r0, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x5) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0xff3a) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 83.318262ms ago: executing program 5 (id=6255): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = epoll_create1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f000048a000/0x1000)=nil, 0x1000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) ftruncate(r2, 0x84) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) 0s ago: executing program 2 (id=6256): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080), &(0x7f0000000200)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0xfd, 0xb7, 0x12}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) stat(0x0, &(0x7f0000000540)) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9p2000,version=9p2000.L,fsc']) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) kernel console output (not intermixed with test programs): ufacturer: syz [ 1711.388238][T16817] usb 7-1: SerialNumber: syz [ 1711.398932][T16817] usb 7-1: config 0 descriptor?? [ 1712.693817][T16817] usb 7-1: USB disconnect, device number 60 [ 1713.126087][T24521] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4902'. [ 1717.453131][T24555] netlink: 'syz.4.4916': attribute type 1 has an invalid length. [ 1717.493033][T24558] netlink: 'syz.2.4917': attribute type 13 has an invalid length. [ 1717.501003][T24558] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4917'. [ 1717.515777][T24555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4916'. [ 1717.527599][T24555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1717.761632][T24566] random: crng reseeded on system resumption [ 1717.883986][T24566] : entered promiscuous mode [ 1722.245479][T24598] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1722.778110][T18044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1722.881629][T24613] lo speed is unknown, defaulting to 1000 [ 1722.889138][T24613] lo speed is unknown, defaulting to 1000 [ 1722.901136][T24613] lo speed is unknown, defaulting to 1000 [ 1723.089394][T24613] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1723.467280][T24613] lo speed is unknown, defaulting to 1000 [ 1723.475533][T24613] lo speed is unknown, defaulting to 1000 [ 1723.485096][T24613] lo speed is unknown, defaulting to 1000 [ 1723.492305][T24613] lo speed is unknown, defaulting to 1000 [ 1723.500253][T24613] lo speed is unknown, defaulting to 1000 [ 1723.508382][T24613] lo speed is unknown, defaulting to 1000 [ 1723.517466][ T30] audit: type=1326 audit(4291404022.397:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24606 comm="syz.0.4934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f122f18f6c9 code=0x0 [ 1723.529557][T18044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1723.549697][T18044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1723.567889][T18044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1723.578037][T18044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1723.776952][T24609] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1723.834857][T24611] lo speed is unknown, defaulting to 1000 [ 1724.471244][ T1319] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.509498][ T1319] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1724.582801][T24611] lo speed is unknown, defaulting to 1000 [ 1724.688779][T24634] random: crng reseeded on system resumption [ 1724.714262][T24634] netlink: 'syz.6.4940': attribute type 2 has an invalid length. [ 1724.796588][ T1319] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.911973][T21196] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1725.065568][ T1319] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1725.138406][T21196] usb 3-1: Using ep0 maxpacket: 32 [ 1725.209684][T21196] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 1725.215154][ T1319] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.230068][T21196] usb 3-1: config 0 has no interface number 0 [ 1725.236888][T21196] usb 3-1: config 0 interface 46 has no altsetting 0 [ 1725.247355][ T1319] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1725.247940][T21196] usb 3-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=96.5d [ 1725.267250][T21196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.275755][T21196] usb 3-1: Product: syz [ 1725.280590][T21196] usb 3-1: Manufacturer: syz [ 1725.285380][T21196] usb 3-1: SerialNumber: syz [ 1725.300521][T21196] usb 3-1: config 0 descriptor?? [ 1725.342552][T21196] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 1725.370639][ T1319] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.403398][ T1319] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1725.768050][T21528] Bluetooth: hci3: command tx timeout [ 1725.795573][T21196] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1726.548736][T21196] gspca_pac7302 3-1:0.46: probe with driver gspca_pac7302 failed with error -71 [ 1726.642305][T21196] usb 3-1: USB disconnect, device number 72 [ 1728.552166][T21528] Bluetooth: hci3: command tx timeout [ 1728.634526][T24611] chnl_net:caif_netlink_parms(): no params data found [ 1729.797650][T24661] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4951'. [ 1730.612790][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.619382][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.642120][T21528] Bluetooth: hci3: command tx timeout [ 1730.825815][T24663] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1732.684618][T21528] Bluetooth: hci3: command tx timeout [ 1734.057922][T24701] random: crng reseeded on system resumption [ 1734.084761][T24701] netlink: 'syz.0.4959': attribute type 2 has an invalid length. [ 1734.184878][T24704] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4962'. [ 1734.395708][ T1319] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1734.651117][ T1319] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1736.037931][ T1319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.097648][ T1319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.149414][T21816] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 30 seconds [ 1736.149857][ T1319] bond0 (unregistering): Released all slaves [ 1736.163060][T21816] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 30 seconds [ 1736.205335][T21816] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 30 seconds [ 1738.118692][ T1319] bond1 (unregistering): Released all slaves [ 1738.290852][ T1319] bond2 (unregistering): Released all slaves [ 1739.026772][ T1319] tipc: Left network mode [ 1739.031843][T24611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.047308][T24611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.064026][T24611] bridge_slave_0: entered allmulticast mode [ 1739.087898][T24611] bridge_slave_0: entered promiscuous mode [ 1739.215298][T24611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.237238][T24611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.384712][T24611] bridge_slave_1: entered allmulticast mode [ 1739.393843][T24611] bridge_slave_1: entered promiscuous mode [ 1739.565806][T24728] Invalid ELF header type: 3 != 1 [ 1740.435279][T24611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.922048][T24611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1741.334613][T24744] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1741.642994][T24746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1741.658637][T24746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1741.696156][T24611] team0: Port device team_slave_0 added [ 1741.725592][T24611] team0: Port device team_slave_1 added [ 1742.359869][T19876] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1742.437585][T24611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.475418][T24611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1742.524605][T19876] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.575490][T24766] random: crng reseeded on system resumption [ 1742.619941][T19876] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1742.673008][T19876] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1742.689705][T24611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.704802][T24766] netlink: 'syz.2.4975': attribute type 2 has an invalid length. [ 1742.716185][T19876] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1742.745459][ T1319] hsr_slave_0: left promiscuous mode [ 1742.813321][T19876] usb 7-1: Manufacturer: syz [ 1742.821896][ T1319] hsr_slave_1: left promiscuous mode [ 1742.828312][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1742.838705][T19876] usb 7-1: config 0 descriptor?? [ 1742.864624][ T1319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1742.881758][T19876] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1745.848610][T21183] usb 7-1: USB disconnect, device number 61 [ 1748.709166][ T1319] team0 (unregistering): Port device team_slave_1 removed [ 1748.777474][ T1319] team0 (unregistering): Port device team_slave_0 removed [ 1751.004375][ T5902] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1751.280481][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.326214][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.393494][ T5902] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1751.450912][ T5902] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1751.512280][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.587674][ T5902] usb 7-1: config 0 descriptor?? [ 1752.347167][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.354878][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.362788][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.371134][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.412436][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.420668][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.428637][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.436734][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.444124][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.453111][ T5902] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1752.498801][T24820] overlayfs: failed to resolve './file2': -2 [ 1752.505961][ T5902] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1752.583014][ T5902] usb 7-1: USB disconnect, device number 62 [ 1752.819242][T24821] fido_id[24821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1753.995055][T21183] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1754.015311][T24611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.022382][T24611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.050272][T24611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.184180][T21183] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1754.217866][T21183] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1754.253786][T21183] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1754.346815][T21183] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1754.364272][T21183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.372391][T21183] usb 7-1: Product: syz [ 1754.393661][T21183] usb 7-1: Manufacturer: syz [ 1754.398333][T21183] usb 7-1: SerialNumber: syz [ 1754.413913][T21183] usb 7-1: config 0 descriptor?? [ 1754.440402][T24611] hsr_slave_0: entered promiscuous mode [ 1754.449169][T24611] hsr_slave_1: entered promiscuous mode [ 1754.462505][T24611] debugfs: 'hsr0' already exists in 'hsr' [ 1754.468955][T24611] Cannot create hsr debugfs directory [ 1754.684500][T24828] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1754.693780][T24828] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1754.703127][T21183] usb 7-1: ucan: probing device on interface #0 [ 1755.439211][ T1319] IPVS: stop unused estimator thread 0... [ 1755.586966][T21183] ucan 7-1:0.0 can0: registered device [ 1755.762175][T21183] ucan 7-1:0.0 can0: firmware string: X]ӍJe][šPJkߏdU{_@0?ݸ?ug\5܎ƍ<~-T [ 1755.984752][T21183] usb 7-1: USB disconnect, device number 63 [ 1756.130602][T24611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1756.141484][T24611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1756.154940][T24611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1756.167415][T24611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1756.300155][T24611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.340898][T24611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.368722][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.376142][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.394814][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.402157][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.855189][T24888] overlayfs: failed to resolve './file2': -2 [ 1756.898927][T24611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1759.351030][T24611] veth0_vlan: entered promiscuous mode [ 1759.389614][T24611] veth1_vlan: entered promiscuous mode [ 1759.555150][T24611] veth0_macvtap: entered promiscuous mode [ 1759.812382][T24611] veth1_macvtap: entered promiscuous mode [ 1759.853567][T24611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.908528][T24611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.982685][T24489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.015160][T24489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.035908][T24489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.075561][T24489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1760.249061][T24489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.262099][T24489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.381705][T19872] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1760.401818][T24489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.410554][T24489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.566764][T19872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.589546][T19872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.619721][T19872] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1760.656149][T19872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.689820][T19872] usb 3-1: config 0 descriptor?? [ 1760.940922][T21183] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1761.110674][T21183] usb 6-1: Using ep0 maxpacket: 8 [ 1761.133257][T21183] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.168511][T21183] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1761.202019][T21183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.233231][T21183] usb 6-1: config 0 descriptor?? [ 1761.268676][T21183] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1761.323010][T19872] usbhid 3-1:0.0: can't add hid device: -32 [ 1761.348740][T19872] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1761.381259][T19872] usb 3-1: USB disconnect, device number 73 [ 1762.059902][T24931] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1762.179938][T19872] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1762.234794][T24931] usb 7-1: Using ep0 maxpacket: 16 [ 1762.257322][T24931] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1762.288344][T24931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.329526][T24931] usb 7-1: Product: syz [ 1762.333886][T24931] usb 7-1: Manufacturer: syz [ 1762.338513][T24931] usb 7-1: SerialNumber: syz [ 1762.354834][T24931] usb 7-1: config 0 descriptor?? [ 1762.372461][T19872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1762.393805][T24931] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1762.401445][T19872] usb 3-1: not running at top speed; connect to a high speed hub [ 1762.423341][T19872] usb 3-1: config 12 has an invalid interface number: 184 but max is 0 [ 1762.439698][T19872] usb 3-1: config 12 has no interface number 0 [ 1762.456402][T19872] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1762.472721][T24953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1762.504136][T19872] usb 3-1: config 12 interface 184 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1762.535660][T24953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1762.555045][T19872] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1762.572481][T24931] usb 7-1: USB disconnect, device number 64 [ 1762.603200][T21183] gspca_vc032x: reg_w err -71 [ 1762.604340][T19872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.620435][T21183] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 1762.638821][T19872] usb 3-1: Product: syz [ 1762.645597][T19872] usb 3-1: Manufacturer: syz [ 1762.652963][T19872] usb 3-1: SerialNumber: syz [ 1762.680087][T21183] usb 6-1: USB disconnect, device number 4 [ 1762.896148][T19872] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1763.072838][T19872] snd-usb-audio 3-1:12.184: probe with driver snd-usb-audio failed with error -12 [ 1763.107394][T23437] udevd[23437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1763.139440][T19872] usb 3-1: USB disconnect, device number 74 [ 1763.897679][T25035] netlink: 'syz.2.5032': attribute type 1 has an invalid length. [ 1764.193203][T25041] bond1: (slave gretap1): making interface the new active one [ 1764.260349][T25041] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1764.450426][T12677] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1764.788500][T12677] usb 7-1: Using ep0 maxpacket: 8 [ 1764.814162][T12677] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.075749][T12677] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1765.091356][T12677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.136462][T12677] usb 7-1: config 0 descriptor?? [ 1765.219891][T12677] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1765.546506][T19872] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1765.700839][T19872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.728085][T19872] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1765.760593][T19872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.786751][T19872] usb 3-1: config 0 descriptor?? [ 1765.817702][T19872] pwc: Askey VC010 type 2 USB webcam detected. [ 1766.061426][T25048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.084896][T25048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.222056][T19872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1766.231801][T19872] pwc: recv_control_msg error -32 req 02 val 2700 [ 1766.248907][T19872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1766.258778][T19872] pwc: recv_control_msg error -32 req 04 val 1000 [ 1766.266172][T19872] pwc: recv_control_msg error -32 req 04 val 1300 [ 1766.274187][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 60 seconds [ 1766.276575][T19872] pwc: recv_control_msg error -32 req 04 val 1400 [ 1766.286305][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 60 seconds [ 1766.307262][T19872] pwc: recv_control_msg error -32 req 02 val 2000 [ 1766.309209][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 60 seconds [ 1766.316152][T19872] pwc: recv_control_msg error -32 req 02 val 2100 [ 1766.339273][T19872] pwc: recv_control_msg error -32 req 04 val 1500 [ 1766.347586][T19872] pwc: recv_control_msg error -32 req 02 val 2500 [ 1766.359110][T19872] pwc: recv_control_msg error -32 req 02 val 2400 [ 1766.366870][T19872] pwc: recv_control_msg error -32 req 02 val 2600 [ 1766.375587][T19872] pwc: recv_control_msg error -32 req 02 val 2900 [ 1766.385307][T19872] pwc: recv_control_msg error -32 req 02 val 2800 [ 1766.394612][T19872] pwc: recv_control_msg error -32 req 04 val 1100 [ 1766.426591][T19872] pwc: Registered as video103. [ 1766.445967][T19872] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input54 [ 1766.469159][T21183] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1766.536973][T25048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1766.562833][T25048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1766.606636][T12677] gspca_vc032x: reg_w err -71 [ 1766.635241][T12677] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 1766.650068][T21183] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1766.680008][T21183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.695118][T12677] usb 7-1: USB disconnect, device number 65 [ 1766.723627][T21183] usb 6-1: config 0 descriptor?? [ 1766.732250][T25095] netlink: 'syz.0.5047': attribute type 1 has an invalid length. [ 1766.784800][ T793] usb 3-1: USB disconnect, device number 75 [ 1766.872575][T25095] bond1: (slave gretap1): making interface the new active one [ 1766.895916][T25095] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1766.972455][T21183] kaweth 6-1:0.0: Firmware present in device. [ 1767.162302][T21183] kaweth 6-1:0.0: Error reading configuration (-32), no net device created [ 1767.197936][T21183] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 1767.247712][T21183] usb 6-1: USB disconnect, device number 5 [ 1768.087400][T21183] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1768.386825][T21183] usb 3-1: Using ep0 maxpacket: 16 [ 1768.411724][T21183] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.460458][T21183] usb 3-1: config 0 has no interfaces? [ 1768.479799][T21183] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1768.505126][T21183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.532251][T21183] usb 3-1: Product: syz [ 1768.548548][T21183] usb 3-1: Manufacturer: syz [ 1768.558229][T21183] usb 3-1: SerialNumber: syz [ 1768.568019][T21183] usb 3-1: config 0 descriptor?? [ 1768.736901][T19872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1768.880621][T21182] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1768.898318][T19872] usb 6-1: Using ep0 maxpacket: 8 [ 1768.923422][T19872] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.948241][T19872] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1768.961857][T19872] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1768.971495][T19872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.979813][T19872] usb 6-1: Product: syz [ 1768.984022][T19872] usb 6-1: Manufacturer: syz [ 1768.989882][T19872] usb 6-1: SerialNumber: syz [ 1769.049122][T21182] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1769.067965][T21182] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1769.077581][T21182] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1769.085703][T21182] usb 7-1: Manufacturer: syz [ 1769.103163][T21182] usb 7-1: config 0 descriptor?? [ 1769.120569][T21182] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1770.603999][T19872] usb 3-1: USB disconnect, device number 76 [ 1770.678229][T25189] netlink: 'syz.2.5058': attribute type 1 has an invalid length. [ 1771.210356][T25202] siw: device registration error -23 [ 1771.335266][ T30] audit: type=1326 audit(4291404070.301:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25196 comm="syz.2.5060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4def8f6c9 code=0x0 [ 1772.044102][ T5902] usb 6-1: USB disconnect, device number 6 [ 1772.053589][T19872] usb 7-1: USB disconnect, device number 66 [ 1773.697240][T25237] netlink: 'syz.0.5069': attribute type 1 has an invalid length. [ 1773.944850][T21182] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1774.133866][T21182] usb 3-1: device descriptor read/64, error -71 [ 1774.383769][T21182] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1774.724109][T21182] usb 3-1: device descriptor read/64, error -71 [ 1775.120671][T21182] usb usb3-port1: attempt power cycle [ 1775.663079][T21182] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1775.695930][T21182] usb 3-1: device descriptor read/8, error -71 [ 1775.708904][T25283] netlink: 'syz.5.5083': attribute type 1 has an invalid length. [ 1775.806378][T25287] random: crng reseeded on system resumption [ 1776.014655][T21182] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1776.043440][T21182] usb 3-1: device descriptor read/8, error -71 [ 1776.153630][T21182] usb usb3-port1: unable to enumerate USB device [ 1776.181884][T25261] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1776.202873][T25261] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1776.218081][T25261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1776.231365][T25261] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1776.251289][T25261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1776.269619][T25261] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1776.401978][T25261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1776.425033][T25261] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1776.462839][T21182] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1776.605814][T25261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1776.613958][T25261] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1776.627029][T21182] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.658478][T21182] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.692742][T21182] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1776.755128][T21182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.851353][T21182] usb 6-1: config 0 descriptor?? [ 1778.156505][T21182] usbhid 6-1:0.0: can't add hid device: -71 [ 1778.166025][T21182] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1778.217378][T21182] usb 6-1: USB disconnect, device number 7 [ 1778.404501][T25330] netlink: 'syz.5.5096': attribute type 1 has an invalid length. [ 1778.602603][T25337] netlink: 292 bytes leftover after parsing attributes in process `syz.0.5098'. [ 1778.622224][T25340] netlink: 'syz.4.5097': attribute type 21 has an invalid length. [ 1778.641379][T25340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5097'. [ 1778.930551][T25353] netlink: 'syz.5.5101': attribute type 39 has an invalid length. [ 1778.994044][T25356] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5102'. [ 1779.101784][T25358] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1779.146100][T25358] block device autoloading is deprecated and will be removed. [ 1779.641460][T21182] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1780.322766][T21182] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1780.345708][T21182] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1780.396489][T21182] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1780.430367][T25374] syz_tun: entered allmulticast mode [ 1780.471884][T21182] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1780.488269][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5108'. [ 1780.505417][T21182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.538209][T21182] usb 6-1: Product: syz [ 1780.548919][T21182] usb 6-1: Manufacturer: syz [ 1780.580882][T21182] usb 6-1: SerialNumber: syz [ 1780.597481][T21182] usb 6-1: config 0 descriptor?? [ 1780.616959][T25362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1780.631476][T25374] syz_tun (unregistering): left allmulticast mode [ 1780.665659][T25362] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1780.712903][T21182] usb 6-1: ucan: probing device on interface #0 [ 1781.030989][T25387] netlink: 'syz.2.5111': attribute type 1 has an invalid length. [ 1781.111032][T25390] netlink: 292 bytes leftover after parsing attributes in process `syz.4.5112'. [ 1781.361973][T21182] ucan 6-1:0.0 can0: registered device [ 1781.503221][T24931] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 1781.545254][T21182] ucan 6-1:0.0 can0: firmware string: X]ӍJe][šPJkߏdU{_@0?ݸ?ug\5܎ƍ<~-T݅ [ 1781.714353][T24931] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1781.756422][T24931] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.767667][T19872] usb 6-1: USB disconnect, device number 8 [ 1781.797868][T24931] usb 7-1: config 0 has no interface number 0 [ 1781.813084][T24931] usb 7-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1781.854749][T24931] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1781.881115][T24931] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1781.891516][T24931] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1781.909594][T24931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.918596][T24931] usb 7-1: Product: syz [ 1781.928721][T24931] usb 7-1: Manufacturer: syz [ 1781.938843][T24931] usb 7-1: SerialNumber: syz [ 1781.974112][T24931] usb 7-1: config 0 descriptor?? [ 1781.994901][T24931] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -22 [ 1784.697784][T19872] usb 7-1: USB disconnect, device number 67 [ 1784.711063][T25467] netlink: 'syz.2.5124': attribute type 1 has an invalid length. [ 1784.861211][T25472] netlink: 292 bytes leftover after parsing attributes in process `syz.6.5125'. [ 1787.713602][T25518] netlink: 'syz.6.5137': attribute type 1 has an invalid length. [ 1787.769481][T25523] netlink: 308 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1790.181900][T25562] kthread_run failed with err -4 [ 1790.540465][T25580] netlink: 'syz.2.5152': attribute type 1 has an invalid length. [ 1790.575999][T25585] netlink: 308 bytes leftover after parsing attributes in process `syz.5.5153'. [ 1791.862242][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.869216][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.342923][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 90 seconds [ 1796.354142][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 90 seconds [ 1796.365567][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 90 seconds [ 1796.532866][T21182] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1796.722931][T21182] usb 6-1: Using ep0 maxpacket: 32 [ 1796.807831][T21182] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1796.932274][T21182] usb 6-1: config 0 has no interface number 0 [ 1797.060597][T21182] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1797.146031][T21182] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1797.180430][T21182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.227978][T21182] usb 6-1: Product: syz [ 1797.252307][T21182] usb 6-1: Manufacturer: syz [ 1797.279235][T25671] overlayfs: missing 'lowerdir' [ 1797.302201][T21182] usb 6-1: SerialNumber: syz [ 1797.328775][T21182] usb 6-1: config 0 descriptor?? [ 1797.353739][T25663] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1797.576331][T25663] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1798.033629][T21183] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1798.508194][T21183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.532142][T21183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.556756][T21183] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1798.581787][T21183] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1798.589892][T21183] usb 3-1: Manufacturer: syz [ 1798.627013][T21183] usb 3-1: config 0 descriptor?? [ 1798.653742][T21182] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1798.720780][T21182] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1798.763238][T21182] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1799.011894][T21182] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1799.196916][T21183] usbhid 3-1:0.0: can't add hid device: -71 [ 1799.243453][T21182] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1799.307406][T21183] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1799.350273][T21182] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1799.368941][T21183] usb 3-1: USB disconnect, device number 81 [ 1799.400481][T21182] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1799.469886][T21182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1799.503919][T21182] usb 7-1: SerialNumber: syz [ 1799.734480][T21182] usb 7-1: 0:2 : does not exist [ 1799.740133][T21182] usb 7-1: unit 255 not found! [ 1799.760557][T21182] usb 7-1: 5:0: cannot get min/max values for control 7 (id 5) [ 1799.796600][T21182] usb 7-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1799.845979][T21182] usb 7-1: USB disconnect, device number 68 [ 1799.921069][T23437] udevd[23437]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1800.860013][T24931] usb 6-1: USB disconnect, device number 9 [ 1801.021505][T25715] overlayfs: missing 'lowerdir' [ 1801.760279][T21182] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1801.930138][T21182] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.003429][T21182] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1802.141634][T21182] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1802.246659][T21182] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1802.304187][T21182] usb 6-1: Manufacturer: syz [ 1802.326055][T21182] usb 6-1: config 0 descriptor?? [ 1802.798862][T25752] netlink: 'syz.6.5197': attribute type 39 has an invalid length. [ 1803.646629][T25765] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1803.657035][T25765] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1804.543815][T21183] usb 6-1: USB disconnect, device number 10 [ 1806.456019][T25818] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1806.488479][T25818] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1806.754529][T25826] syzkaller0: entered promiscuous mode [ 1806.767533][T25826] syzkaller0: entered allmulticast mode [ 1806.917957][T16817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1807.268861][T16817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.287237][T16817] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1807.296293][T16817] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1808.036838][T16817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.055119][T16817] usb 6-1: config 0 descriptor?? [ 1808.810775][T25861] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1808.820347][T25861] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1809.445883][T25875] syzkaller0: entered promiscuous mode [ 1809.480014][T25875] syzkaller0: entered allmulticast mode [ 1809.689215][T16817] usb 6-1: USB disconnect, device number 11 [ 1809.866429][T25883] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5233'. [ 1810.250672][T25888] syzkaller1: entered promiscuous mode [ 1810.264785][T25888] syzkaller1: entered allmulticast mode [ 1810.895787][T21182] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1810.947945][T25902] fuse: Unknown parameter 'gro00000000000000000000' [ 1811.611205][T21182] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.664813][T21182] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1811.728613][T21182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1811.776182][T21182] usb 7-1: config 0 descriptor?? [ 1811.808017][T21182] pwc: Askey VC010 type 2 USB webcam detected. [ 1812.302660][T21182] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1812.320685][T21182] pwc: recv_control_msg error -32 req 02 val 2700 [ 1812.333647][T21182] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1812.343119][T21182] pwc: recv_control_msg error -32 req 04 val 1000 [ 1812.351497][T21182] pwc: recv_control_msg error -32 req 04 val 1300 [ 1812.364187][T21182] pwc: recv_control_msg error -32 req 04 val 1400 [ 1812.377696][T21182] pwc: recv_control_msg error -32 req 02 val 2000 [ 1813.058286][T21182] pwc: recv_control_msg error -32 req 02 val 2100 [ 1813.076971][T21182] pwc: recv_control_msg error -32 req 04 val 1500 [ 1813.106978][T21182] pwc: recv_control_msg error -32 req 02 val 2500 [ 1813.130656][T21182] pwc: recv_control_msg error -71 req 02 val 2400 [ 1813.152575][T21182] pwc: recv_control_msg error -71 req 02 val 2600 [ 1813.168493][T21182] pwc: recv_control_msg error -71 req 02 val 2900 [ 1813.203469][T21182] pwc: recv_control_msg error -71 req 02 val 2800 [ 1813.213585][T21182] pwc: recv_control_msg error -71 req 04 val 1100 [ 1813.221456][T21182] pwc: recv_control_msg error -71 req 04 val 1200 [ 1813.230995][T21182] pwc: Registered as video103. [ 1813.239243][T21182] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 1813.309176][T21182] usb 7-1: USB disconnect, device number 69 [ 1813.704856][T25946] netlink: 'syz.0.5252': attribute type 12 has an invalid length. [ 1813.717645][T25946] netlink: 'syz.0.5252': attribute type 4 has an invalid length. [ 1813.831094][T21182] lo speed is unknown, defaulting to 1000 [ 1813.838632][T21182] syz0: Port: 1 Link DOWN [ 1814.355134][T18044] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1814.369841][T18044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1814.381521][T18044] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1814.392977][T18044] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1814.402763][T18044] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1814.432092][T21528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1814.440146][T21528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1814.447968][T21528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1814.459513][T21528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1814.467340][T21528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1814.529706][T25956] lo speed is unknown, defaulting to 1000 [ 1814.915167][T25956] lo speed is unknown, defaulting to 1000 [ 1815.819000][T25974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5259'. [ 1816.102896][T19872] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1816.309778][T19872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.340230][T19872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1816.362762][T19872] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1816.372023][T19872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.454201][T19872] usb 3-1: config 0 descriptor?? [ 1816.485630][T19872] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1816.509486][T18044] Bluetooth: hci0: command tx timeout [ 1816.516047][T25956] chnl_net:caif_netlink_parms(): no params data found [ 1818.561918][T18044] Bluetooth: hci0: command tx timeout [ 1819.110106][T21182] usb 3-1: USB disconnect, device number 82 [ 1819.643279][ T9358] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1820.644313][T18044] Bluetooth: hci0: command tx timeout [ 1821.215311][ T9358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1821.232538][ T9358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1821.256113][ T9358] bond0 (unregistering): Released all slaves [ 1821.541217][ T9358] bond1 (unregistering): Released all slaves [ 1821.748780][ T9358] bond2 (unregistering): Released all slaves [ 1822.069460][T26071] overlayfs: missing 'lowerdir' [ 1822.148694][T25956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.172068][T25956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.182788][T25956] bridge_slave_0: entered allmulticast mode [ 1822.197765][T25956] bridge_slave_0: entered promiscuous mode [ 1822.216404][T25956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.236805][T25956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.245721][T25956] bridge_slave_1: entered allmulticast mode [ 1822.257127][T26081] netlink: 'syz.6.5286': attribute type 1 has an invalid length. [ 1822.265179][T16817] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1822.267808][T25956] bridge_slave_1: entered promiscuous mode [ 1822.293345][ T9358] tipc: Left network mode [ 1822.294425][ T50] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x32 [ 1822.392396][T26085] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5286'. [ 1822.423906][T16817] usb 3-1: Using ep0 maxpacket: 32 [ 1822.442286][T16817] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1822.460763][T16817] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.481923][T16817] usb 3-1: config 0 has no interface number 0 [ 1822.489082][T16817] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1822.500276][T16817] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1822.517533][T16817] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1822.529016][T16817] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1822.543097][T16817] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1822.555214][T16817] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1822.568939][T16817] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1822.588667][T16817] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1822.610338][T16817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.624308][T16817] usb 3-1: Product: syz [ 1822.628533][T16817] usb 3-1: Manufacturer: syz [ 1822.633838][T16817] usb 3-1: SerialNumber: syz [ 1822.647327][T26085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1822.655321][T16817] usb 3-1: config 0 descriptor?? [ 1822.670298][T26069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1822.688111][T25956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.706685][T16817] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 1822.721046][T18044] Bluetooth: hci0: command tx timeout [ 1822.826332][T25956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.912099][T16817] usb 3-1: USB disconnect, device number 83 [ 1823.847515][T25956] team0: Port device team_slave_0 added [ 1823.972340][T25956] team0: Port device team_slave_1 added [ 1824.793200][ T9358] hsr_slave_0: left promiscuous mode [ 1824.825826][ T9358] hsr_slave_1: left promiscuous mode [ 1824.838045][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.859158][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.218328][T16817] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1825.378381][T16817] usb 6-1: Using ep0 maxpacket: 8 [ 1825.408968][T16817] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.435869][T16817] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1825.456500][T16817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.481198][T16817] usb 6-1: config 0 descriptor?? [ 1825.507748][T16817] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1825.887729][T26151] Driver unsupported XDP return value 0 on prog (id 745) dev N/A, expect packet loss! [ 1825.986312][ T9358] team0 (unregistering): Port device team_slave_0 removed [ 1826.329316][T26135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.351668][T26135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.421660][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 120 seconds [ 1826.435012][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 120 seconds [ 1826.449875][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 120 seconds [ 1826.952613][T26161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.969142][T26159] overlayfs: missing 'workdir' [ 1826.984384][T26161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.268706][T16817] gspca_vc032x: reg_w err -110 [ 1827.274850][T16817] vc032x 6-1:0.0: probe with driver vc032x failed with error -110 [ 1827.586484][T16817] usb 6-1: USB disconnect, device number 12 [ 1828.150307][T25956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1828.185720][T25956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1828.247379][T25956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1828.653343][T26131] team_slave_0: entered promiscuous mode [ 1828.659462][T26131] team_slave_1: entered promiscuous mode [ 1828.795087][T25956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1828.820582][T25956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1828.847783][T25956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1829.195331][T25956] hsr_slave_0: entered promiscuous mode [ 1829.214960][T25956] hsr_slave_1: entered promiscuous mode [ 1829.741756][ T9358] IPVS: stop unused estimator thread 0... [ 1832.271581][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5330'. [ 1832.324738][T16817] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1832.484603][T16817] usb 6-1: Using ep0 maxpacket: 16 [ 1832.516280][T16817] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1832.536667][T16817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.559600][T16817] usb 6-1: Product: syz [ 1832.568854][T16817] usb 6-1: Manufacturer: syz [ 1832.573676][T16817] usb 6-1: SerialNumber: syz [ 1832.574233][T25956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1832.596033][T16817] usb 6-1: config 0 descriptor?? [ 1832.610739][T25956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1832.650428][T25956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1832.660798][T16817] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1832.672314][T25956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1833.062944][T25956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.072084][T16817] usb 6-1: clie_3_5_startup: get interface number failed: -32 [ 1833.099477][T16817] visor 6-1:0.0: probe with driver visor failed with error -32 [ 1833.132867][T25956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1833.146128][T16817] usb 6-1: USB disconnect, device number 13 [ 1833.167627][ T9358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.174897][ T9358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.218716][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.226153][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1834.319057][T25956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.581821][T25956] veth0_vlan: entered promiscuous mode [ 1835.651654][T25956] veth1_vlan: entered promiscuous mode [ 1835.811557][T25956] veth0_macvtap: entered promiscuous mode [ 1835.856315][T25956] veth1_macvtap: entered promiscuous mode [ 1835.911546][T25956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.976437][T25956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1836.055719][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1836.101482][ T1319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.125936][ T1319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.209542][ T1319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.214329][T26337] netlink: 'syz.5.5341': attribute type 1 has an invalid length. [ 1836.235871][T12881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1836.274246][T26337] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5341'. [ 1836.391339][T21182] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1836.705447][T21182] usb 7-1: Using ep0 maxpacket: 32 [ 1836.740797][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.762533][T21182] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1836.768053][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.771087][T21182] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1836.804966][T21182] usb 7-1: config 0 has no interface number 0 [ 1836.817321][T21182] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1836.863306][T21182] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1836.895854][T21182] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1836.901778][ T9358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.938499][T21182] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1836.938570][ T9358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.974761][T21182] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1837.017403][T21182] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1837.059214][T21182] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1837.116673][T21182] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1837.132307][T21182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.153135][T21182] usb 7-1: Product: syz [ 1837.157357][T21182] usb 7-1: Manufacturer: syz [ 1837.181192][T21182] usb 7-1: SerialNumber: syz [ 1837.197768][T21182] usb 7-1: config 0 descriptor?? [ 1837.225625][T26341] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1837.238501][T21182] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 1837.352263][ T793] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1837.476073][T21182] usb 7-1: USB disconnect, device number 70 [ 1837.527138][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.539884][ T793] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.577667][ T793] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1837.605576][ T793] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1837.623478][ T793] usb 6-1: Manufacturer: syz [ 1837.641725][ T793] usb 6-1: config 0 descriptor?? [ 1838.499941][ T793] usbhid 6-1:0.0: can't add hid device: -71 [ 1838.507175][ T793] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1838.532101][ T793] usb 6-1: USB disconnect, device number 14 [ 1841.021862][T26411] siw: device registration error -23 [ 1843.326396][T26267] Set syz1 is full, maxelem 65536 reached [ 1843.939064][T19872] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1844.100458][T19872] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1844.181332][T19872] usb 3-1: config 0 has no interface number 0 [ 1844.200286][T19872] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1844.296130][T19872] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1844.313258][T19872] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1844.327697][T19872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.337692][T19872] usb 3-1: Product: syz [ 1844.343676][T19872] usb 3-1: Manufacturer: syz [ 1844.353705][T19872] usb 3-1: SerialNumber: syz [ 1844.403534][T19872] usb 3-1: config 0 descriptor?? [ 1844.460759][T19872] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 1845.396798][T26466] siw: device registration error -23 [ 1846.959628][T21183] usb 3-1: USB disconnect, device number 84 [ 1847.445312][T26487] IPVS: Scheduler module ip_vs_ not found [ 1847.455006][T26493] IPVS: length: 24 != 61944 [ 1847.557698][T19872] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1847.581620][T26497] bridge_slave_0: left allmulticast mode [ 1847.588637][T26497] bridge_slave_0: left promiscuous mode [ 1847.601108][T26497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.622626][T26497] bridge_slave_1: left allmulticast mode [ 1847.639483][T26497] bridge_slave_1: left promiscuous mode [ 1847.664304][T26497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.739858][T19872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.774896][T19872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.840314][T19872] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1848.000873][T26497] bond0: (slave bond_slave_0): Releasing backup interface [ 1848.402312][T26497] bond0: (slave bond_slave_1): Releasing backup interface [ 1848.552428][T26497] team0: Port device team_slave_0 removed [ 1848.581504][T19872] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1848.589761][T19872] usb 3-1: Manufacturer: syz [ 1848.609295][T19872] usb 3-1: config 0 descriptor?? [ 1848.640801][T26497] team0: Port device team_slave_1 removed [ 1848.668400][T26497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1848.679472][T26497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1848.693766][T26497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.703329][T26497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.715229][T26497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1848.949562][T26518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5394'. [ 1849.002678][T26518] erspan0: entered promiscuous mode [ 1849.059571][T26518] macvtap1: entered promiscuous mode [ 1849.065296][T26518] macvtap1: entered allmulticast mode [ 1849.070895][T26518] erspan0: entered allmulticast mode [ 1849.235617][T26527] siw: device registration error -23 [ 1849.497981][T19872] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 1849.568464][T19872] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 1849.692184][T19872] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 1849.792881][T19872] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 1849.825434][T19872] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 1849.871828][T19872] usb 3-1: USB disconnect, device number 85 [ 1850.142157][T26536] lo speed is unknown, defaulting to 1000 [ 1850.264475][T26546] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 1850.360758][T26544] tmpfs: Unknown parameter 'tmpfs' [ 1850.696131][T21183] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1850.977304][T26558] netlink: 'syz.5.5410': attribute type 1 has an invalid length. [ 1851.071851][T26561] Bluetooth: MGMT ver 1.23 [ 1851.470482][T21183] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1851.488014][T21183] usb 3-1: config 0 has no interface number 0 [ 1851.495547][T21183] usb 3-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1851.513764][T21183] usb 3-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1851.550653][T21183] usb 3-1: config 0 interface 49 has no altsetting 0 [ 1851.582243][T21183] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 1851.615245][T21183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.638575][T21183] usb 3-1: Product: syz [ 1851.642889][T21183] usb 3-1: Manufacturer: syz [ 1851.657552][T21183] usb 3-1: SerialNumber: syz [ 1851.676436][T21183] usb 3-1: config 0 descriptor?? [ 1851.752464][T26536] lo speed is unknown, defaulting to 1000 [ 1851.910067][T21183] usb 3-1: USB disconnect, device number 86 [ 1852.609577][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5417'. [ 1852.669939][T26582] erspan0: entered promiscuous mode [ 1852.691307][T26582] macvtap1: entered promiscuous mode [ 1852.704981][T26582] macvtap1: entered allmulticast mode [ 1852.715442][T26582] erspan0: entered allmulticast mode [ 1853.212054][T26603] lo speed is unknown, defaulting to 1000 [ 1853.272405][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.354170][ T30] audit: type=1326 audit(4291404152.382:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.5.5421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff466b8f6c9 code=0x0 [ 1853.578045][T26615] tmpfs: Unknown parameter 'tmpfs' [ 1853.611322][T26603] lo speed is unknown, defaulting to 1000 [ 1853.620770][T26599] siw: device registration error -23 [ 1853.934038][ T793] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1854.066809][T26624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5430'. [ 1854.118941][ T793] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1854.137848][ T793] usb 3-1: config 0 has no interface number 0 [ 1854.167051][ T793] usb 3-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1854.202233][ T793] usb 3-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1854.246749][ T793] usb 3-1: config 0 interface 49 has no altsetting 0 [ 1854.259704][ T793] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 1854.279933][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.315923][ T793] usb 3-1: Product: syz [ 1854.323350][T26624] macvtap1: entered promiscuous mode [ 1854.330534][ T793] usb 3-1: Manufacturer: syz [ 1854.339116][ T793] usb 3-1: SerialNumber: syz [ 1854.344913][T26624] erspan0: entered promiscuous mode [ 1854.363992][T26624] macvtap1: entered allmulticast mode [ 1854.370367][ T793] usb 3-1: config 0 descriptor?? [ 1854.379839][T26624] erspan0: entered allmulticast mode [ 1854.716331][ T793] usb 3-1: USB disconnect, device number 87 [ 1855.093823][ T5902] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1855.273538][ T5902] usb 6-1: device descriptor read/64, error -71 [ 1855.283405][T26658] netlink: 'syz.0.5441': attribute type 39 has an invalid length. [ 1855.541930][ T5902] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1855.693156][ T5902] usb 6-1: device descriptor read/64, error -71 [ 1855.814270][ T5902] usb usb6-port1: attempt power cycle [ 1856.203243][ T5902] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1856.233575][ T5902] usb 6-1: device descriptor read/8, error -71 [ 1856.467029][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 150 seconds [ 1856.478550][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 150 seconds [ 1856.490012][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 150 seconds [ 1856.493756][ T5902] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1856.546291][ T5902] usb 6-1: device descriptor read/8, error -71 [ 1856.664407][ T5902] usb usb6-port1: unable to enumerate USB device [ 1858.043978][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5445'. [ 1858.500369][T26669] macvtap2: entered promiscuous mode [ 1858.508650][T26669] macvtap2: entered allmulticast mode [ 1859.098809][T26684] tmpfs: Unknown parameter 'tmpfs' [ 1859.169202][T26689] lo: entered allmulticast mode [ 1859.232329][T26686] lo speed is unknown, defaulting to 1000 [ 1859.431155][T21182] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1859.440221][T26695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5457'. [ 1859.495014][T26695] macvtap2: entered promiscuous mode [ 1859.500536][T26695] macvtap2: entered allmulticast mode [ 1859.601067][T26686] lo speed is unknown, defaulting to 1000 [ 1859.654768][T21182] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 1859.668178][T21182] usb 7-1: config 0 has no interface number 0 [ 1859.675281][T21182] usb 7-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1859.707429][T21182] usb 7-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1859.756182][T21182] usb 7-1: config 0 interface 49 has no altsetting 0 [ 1859.880344][T21182] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 1859.932041][T21182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.940196][T21182] usb 7-1: Product: syz [ 1859.990937][T21182] usb 7-1: Manufacturer: syz [ 1859.996069][T21182] usb 7-1: SerialNumber: syz [ 1860.015128][T21182] usb 7-1: config 0 descriptor?? [ 1860.059786][T26706] netlink: 'syz.4.5461': attribute type 39 has an invalid length. [ 1860.082246][T26685] lo: left allmulticast mode [ 1860.270731][T21182] usb 7-1: USB disconnect, device number 71 [ 1860.947414][T24931] hid-generic 0005:0007:5507.0010: item fetching failed at offset 0/1 [ 1860.959730][T24931] hid-generic 0005:0007:5507.0010: probe with driver hid-generic failed with error -22 [ 1861.301083][T26738] fuse: Bad value for 'fd' [ 1861.726750][T26755] netlink: 'syz.2.5480': attribute type 1 has an invalid length. [ 1861.800785][T26755] bond6: entered promiscuous mode [ 1861.806452][T26755] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1861.931093][T26759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1861.961211][T26759] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 1861.981064][T26759] bond6: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1861.998362][T26759] bond6: (slave gre1): making interface the new active one [ 1862.040801][T26759] gre1: entered promiscuous mode [ 1862.079513][T26759] bond6: (slave gre1): Enslaving as an active interface with an up link [ 1862.206547][T26770] fuse: Bad value for 'fd' [ 1862.268139][T26765] team0: Port device team_slave_0 removed [ 1863.229032][T16817] IPVS: starting estimator thread 0... [ 1863.329227][T26799] IPVS: using max 26 ests per chain, 62400 per kthread [ 1863.358219][T26800] tipc: Started in network mode [ 1863.383674][T26803] netlink: 'syz.2.5497': attribute type 1 has an invalid length. [ 1863.401187][T26800] tipc: Node identity a63b50e52f06, cluster identity 4711 [ 1863.423454][T26800] tipc: Enabled bearer , priority 0 [ 1863.493629][T26803] bond7: entered promiscuous mode [ 1863.501350][T26803] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1863.513771][T26805] syzkaller0: entered promiscuous mode [ 1863.519742][T26805] syzkaller0: entered allmulticast mode [ 1863.565593][T26800] tipc: Resetting bearer [ 1863.614852][T26797] tipc: Resetting bearer [ 1863.701047][T26797] tipc: Disabling bearer [ 1863.793285][T26811] netlink: 'syz.2.5499': attribute type 16 has an invalid length. [ 1863.804470][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1865.119521][T26843] tipc: Started in network mode [ 1865.124411][T26843] tipc: Node identity 3a9a9d47a19, cluster identity 4711 [ 1865.173449][T26843] tipc: Enabled bearer , priority 0 [ 1865.207353][T26845] syzkaller0: entered promiscuous mode [ 1865.230745][T26845] syzkaller0: entered allmulticast mode [ 1865.363796][T26845] tipc: Resetting bearer [ 1865.392019][T26842] tipc: Resetting bearer [ 1865.468187][T16817] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1865.477415][T26842] tipc: Disabling bearer [ 1865.504327][T26850] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1865.528197][T26850] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1865.567590][T26850] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 1865.662925][T26848] veth0: entered promiscuous mode [ 1865.670941][T16817] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1865.684457][T16817] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1865.699981][T26846] veth0: left promiscuous mode [ 1865.827268][T16817] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1865.862444][T16817] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1865.874427][T16817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.892882][T16817] usb 7-1: Product: syz [ 1865.903001][T16817] usb 7-1: Manufacturer: syz [ 1865.913128][T16817] usb 7-1: SerialNumber: syz [ 1865.927488][T16817] usb 7-1: config 0 descriptor?? [ 1865.942737][T26849] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1865.968152][T26849] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1865.989837][T16817] usb 7-1: ucan: probing device on interface #0 [ 1866.270643][T21183] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1866.373601][T26877] tipc: Started in network mode [ 1866.379408][T26877] tipc: Node identity 7a67e033fd4e, cluster identity 4711 [ 1866.386887][T26877] tipc: Enabled bearer , priority 0 [ 1866.401297][T26877] syzkaller0: entered promiscuous mode [ 1866.406971][T26877] syzkaller0: entered allmulticast mode [ 1866.424817][T26877] tipc: Resetting bearer [ 1866.434735][T26876] tipc: Resetting bearer [ 1866.437674][T21183] usb 6-1: Using ep0 maxpacket: 32 [ 1866.444888][T26879] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5525'. [ 1866.460791][T21183] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1866.479378][T21183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.488852][T26876] tipc: Disabling bearer [ 1866.504972][T21183] usb 6-1: Product: syz [ 1866.510859][T21183] usb 6-1: Manufacturer: syz [ 1866.525720][T21183] usb 6-1: SerialNumber: syz [ 1866.538433][T21183] usb 6-1: config 0 descriptor?? [ 1866.558219][T21183] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1866.577107][T21183] dvb-usb: bulk message failed: -22 (2/0) [ 1866.602908][T21183] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1866.620906][T21183] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1866.623231][T16817] ucan 7-1:0.0 can0: registered device [ 1866.630128][T21183] usb 6-1: media controller created [ 1866.686860][T26881] vlan0: entered promiscuous mode [ 1866.690501][T21183] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1866.814776][T16817] ucan 7-1:0.0 can0: firmware string: X]ӍJe][šPJkߏdU{_@0?ݸ?ug\5܎ƍ<~-T݅ [ 1866.984020][T21183] usb 6-1: selecting invalid altsetting 7 [ 1866.989882][T21183] cxusb: set interface failed [ 1866.994603][T21183] dvb-usb: bulk message failed: -22 (1/0) [ 1866.997606][T26887] netlink: 'syz.2.5528': attribute type 8 has an invalid length. [ 1867.008411][T26885] lo speed is unknown, defaulting to 1000 [ 1867.057638][T16817] usb 7-1: USB disconnect, device number 72 [ 1867.091740][T26891] cxusb: i2c wr: len=79 is too big! [ 1867.091740][T26891] [ 1867.750111][T21183] DVB: Unable to find symbol lgdt330x_attach() [ 1867.756336][T21183] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1868.077225][T21183] rc_core: IR keymap rc-dvico-portable not found [ 1868.083633][T21183] Registered IR keymap rc-empty [ 1868.120091][T21183] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1868.164249][T21183] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input57 [ 1868.219427][T21183] dvb-usb: schedule remote query interval to 100 msecs. [ 1868.237594][T21183] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1868.359423][T21183] dvb-usb: bulk message failed: -22 (1/0) [ 1868.498391][T21183] dvb-usb: bulk message failed: -22 (1/0) [ 1868.636583][T21183] dvb-usb: bulk message failed: -22 (1/0) [ 1868.776589][T21183] dvb-usb: bulk message failed: -22 (1/0) [ 1868.977599][T21183] dvb-usb: bulk message failed: -22 (1/0) [ 1869.277329][T21183] usb 6-1: USB disconnect, device number 19 [ 1869.598454][T21183] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1871.016521][T26942] netlink: 'syz.6.5542': attribute type 9 has an invalid length. [ 1871.055895][T26942] netlink: 'syz.6.5542': attribute type 6 has an invalid length. [ 1871.063791][T26942] netlink: 'syz.6.5542': attribute type 7 has an invalid length. [ 1871.105493][T26942] netlink: 'syz.6.5542': attribute type 8 has an invalid length. [ 1871.605903][T26952] netlink: zone id is out of range [ 1871.611304][T26952] netlink: zone id is out of range [ 1871.635336][T26952] netlink: zone id is out of range [ 1871.640696][T26952] netlink: zone id is out of range [ 1871.665381][T26952] netlink: zone id is out of range [ 1871.671216][T26952] netlink: zone id is out of range [ 1871.740217][T26952] netlink: zone id is out of range [ 1871.774922][T26952] netlink: zone id is out of range [ 1871.795019][T26952] netlink: zone id is out of range [ 1871.832216][T26952] netlink: zone id is out of range [ 1874.335106][ T5192] udevd[5192]: worker [23303] /devices/virtual/block/nbd0 is taking a long time [ 1875.921294][T26885] lo speed is unknown, defaulting to 1000 [ 1875.973987][T26887] lo speed is unknown, defaulting to 1000 [ 1876.573429][T21182] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1876.651140][T26949] lo speed is unknown, defaulting to 1000 [ 1876.745231][T21182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.761019][T21182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1876.777792][T21182] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1876.792722][T21182] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1876.812618][T21182] usb 7-1: Manufacturer: syz [ 1876.834301][T21182] usb 7-1: config 0 descriptor?? [ 1876.984228][T26949] lo speed is unknown, defaulting to 1000 [ 1877.006191][T26887] lo speed is unknown, defaulting to 1000 [ 1877.679195][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1877.687269][T21182] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 1877.740256][T21182] usb 7-1: USB disconnect, device number 73 [ 1879.341311][T21182] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1879.365427][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5558'. [ 1880.896398][T26999] netlink: 'syz.4.5559': attribute type 1 has an invalid length. [ 1882.411786][T21182] usb 3-1: unable to read config index 0 descriptor/all [ 1882.418922][T21182] usb 3-1: can't read configurations, error -71 [ 1882.790626][T27003] netlink: 'syz.2.5560': attribute type 1 has an invalid length. [ 1882.933050][T26999] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1884.568844][T16817] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1884.630256][T27042] netlink: 'syz.5.5574': attribute type 1 has an invalid length. [ 1884.665501][T27042] bond2: entered promiscuous mode [ 1884.671343][T27042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1884.678680][T21182] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 1884.694712][T27042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1884.702862][T27042] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 1884.713206][T27042] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1884.725508][T27042] bond2: (slave gre1): making interface the new active one [ 1884.733001][T27042] gre1: entered promiscuous mode [ 1884.740287][T16817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.750837][T27042] bond2: (slave gre1): Enslaving as an active interface with an up link [ 1884.759451][T16817] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1884.779822][T16817] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1884.799788][T16817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.814364][T16817] usb 7-1: config 0 descriptor?? [ 1884.840777][T16817] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1884.850972][T21182] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.863310][T21182] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1884.882728][T21182] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1884.899949][T21182] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1884.919136][T21182] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1884.937651][T21182] usb 3-1: Product: syz [ 1884.942004][T21182] usb 3-1: Manufacturer: syz [ 1884.946654][T21182] usb 3-1: SerialNumber: syz [ 1884.957472][T27046] IPVS: Scheduler module ip_vs_ not found [ 1884.964837][T27049] IPVS: length: 24 != 55320 [ 1884.970769][T21182] usb 3-1: config 0 descriptor?? [ 1885.016083][T21182] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1885.077360][T23437] udevd[23437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1886.529855][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 180 seconds [ 1886.540940][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 180 seconds [ 1886.552198][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 180 seconds [ 1887.351511][T16817] usb 7-1: USB disconnect, device number 74 [ 1887.501678][T24931] usb 3-1: USB disconnect, device number 90 [ 1888.035536][T27097] random: crng reseeded on system resumption [ 1888.062265][T27097] netlink: 'syz.4.5587': attribute type 2 has an invalid length. [ 1888.929066][T27123] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 1889.023138][T27123] bond3: entered promiscuous mode [ 1889.039018][T27123] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1889.046652][T24931] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1889.176254][T16817] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1889.223900][T27126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1889.258260][T24931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.269322][T24931] usb 3-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1889.286190][T24931] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1889.296731][T27126] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 1889.317455][T24931] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1889.331893][T16817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.348120][T24931] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1889.364314][T16817] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1889.376098][T27126] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 1889.386519][T24931] usb 3-1: Product: syz [ 1889.390976][T24931] usb 3-1: Manufacturer: syz [ 1889.401211][T16817] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1889.411788][T24931] usb 3-1: SerialNumber: syz [ 1889.429867][T24931] usb 3-1: config 0 descriptor?? [ 1889.437715][T16817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.463714][T27126] bond3: (slave gre1): making interface the new active one [ 1889.475877][T16817] usb 7-1: config 0 descriptor?? [ 1889.510257][T16817] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1889.536544][T24931] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1889.546532][T27126] gre1: entered promiscuous mode [ 1889.553239][T27126] bond3: (slave gre1): Enslaving as an active interface with an up link [ 1889.593967][T23437] udevd[23437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1892.101130][T24931] usb 3-1: USB disconnect, device number 91 [ 1892.241739][T16817] usb 7-1: USB disconnect, device number 75 [ 1892.335862][T27158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5607'. [ 1892.451969][T27162] netlink: 'syz.2.5609': attribute type 1 has an invalid length. [ 1892.490939][T27162] bond9: entered promiscuous mode [ 1892.496973][T27162] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1892.767285][T27170] siw: device registration error -23 [ 1892.862599][ T30] audit: type=1326 audit(4291404191.911:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27159 comm="syz.6.5611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd7cb8f6c9 code=0x0 [ 1894.821831][T27202] pimreg: entered allmulticast mode [ 1894.964739][T27204] lo speed is unknown, defaulting to 1000 [ 1895.142040][T27208] tmpfs: Unknown parameter 'tmpfs' [ 1895.483346][T21183] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1895.651421][T27204] lo speed is unknown, defaulting to 1000 [ 1895.659263][T21183] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 1895.667601][T21183] usb 7-1: config 0 has no interface number 0 [ 1895.678622][T21183] usb 7-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1895.716440][T21183] usb 7-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1895.733141][T21183] usb 7-1: config 0 interface 49 has no altsetting 0 [ 1895.753013][T21183] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 1895.762100][T21183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.796419][T21183] usb 7-1: Product: syz [ 1895.800731][T21183] usb 7-1: Manufacturer: syz [ 1895.832930][T21183] usb 7-1: SerialNumber: syz [ 1895.854141][T21183] usb 7-1: config 0 descriptor?? [ 1896.081601][T21183] usb 7-1: USB disconnect, device number 76 [ 1898.645023][T27249] netlink: 'syz.6.5637': attribute type 1 has an invalid length. [ 1898.739932][T27249] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5637'. [ 1898.820278][T27256] fuse: Unknown parameter 'gro00000000000000000000' [ 1900.601712][ T793] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 1900.827880][ T793] usb 7-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1900.860787][ T793] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1900.897957][ T793] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1900.910401][ T793] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1900.918634][ T793] usb 7-1: Product: syz [ 1900.950378][ T793] usb 7-1: Manufacturer: syz [ 1900.955041][ T793] usb 7-1: SerialNumber: syz [ 1900.995857][ T793] usb 7-1: config 0 descriptor?? [ 1901.105100][ T793] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1901.248679][T23437] udevd[23437]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1903.497085][ T793] usb 7-1: USB disconnect, device number 77 [ 1903.869242][T27313] fuse: Unknown parameter 'gro00000000000000000000' [ 1907.495306][T27335] lo speed is unknown, defaulting to 1000 [ 1908.939280][T27367] netlink: 'syz.5.5675': attribute type 1 has an invalid length. [ 1908.959609][T27369] fuse: Unknown parameter 'gro00000000000000000000' [ 1909.283908][T27367] bond3: entered promiscuous mode [ 1909.303564][T27367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1909.322243][T27335] lo speed is unknown, defaulting to 1000 [ 1909.349787][T27375] lo speed is unknown, defaulting to 1000 [ 1911.194942][T27387] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 1913.463552][T27395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5680'. [ 1914.680860][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.861619][T27408] netlink: 'syz.6.5684': attribute type 13 has an invalid length. [ 1914.966641][T27375] lo speed is unknown, defaulting to 1000 [ 1916.065798][T27425] overlayfs: failed to clone upperpath [ 1919.370851][ T5192] udevd[5192]: worker [23303] /devices/virtual/block/nbd0 timeout; kill it [ 1919.788449][ T5192] udevd[5192]: seq 27735 '/devices/virtual/block/nbd0' killed [ 1919.845640][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 210 seconds [ 1919.856654][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 210 seconds [ 1919.868049][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 210 seconds [ 1921.117008][T27458] fuse: Unknown parameter 'fd0x0000000000000003' [ 1921.335786][T27465] overlayfs: failed to clone upperpath [ 1921.729153][T27472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5706'. [ 1921.837268][T27474] siw: device registration error -23 [ 1921.869530][T27472] bridge_slave_1: left allmulticast mode [ 1921.887743][T27472] bridge_slave_1: left promiscuous mode [ 1921.901683][ T30] audit: type=1326 audit(4291404220.966:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27451 comm="syz.2.5699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4def8f6c9 code=0x0 [ 1921.930214][T27472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.952703][T27472] bridge_slave_0: left allmulticast mode [ 1921.970967][T27472] bridge_slave_0: left promiscuous mode [ 1921.987239][T27472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1922.419080][T27486] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 1922.498945][T27482] IPVS: Scheduler module ip_vs_ not found [ 1922.528304][T27479] lo speed is unknown, defaulting to 1000 [ 1923.663344][T27495] Cannot find add_set index 0 as target [ 1924.292125][T27501] bond10: option arp_all_targets: invalid value (3) [ 1924.302175][T27501] bond10 (unregistering): Released all slaves [ 1924.331089][T27479] lo speed is unknown, defaulting to 1000 [ 1924.582448][T27513] IPVS: length: 24 != 55320 [ 1925.050882][T27524] syzkaller0: entered promiscuous mode [ 1925.061078][T27524] syzkaller0: entered allmulticast mode [ 1925.072131][T27526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5723'. [ 1925.089032][T21182] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1925.286243][T21182] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1925.294707][T21182] usb 3-1: config 0 has no interface number 0 [ 1925.328205][T21182] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1925.363580][T21182] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1925.394548][T21182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.418165][T21182] usb 3-1: Product: syz [ 1925.422484][T21182] usb 3-1: Manufacturer: syz [ 1925.433634][T21182] usb 3-1: SerialNumber: syz [ 1925.453983][T21182] usb 3-1: config 0 descriptor?? [ 1925.795698][T27540] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.5730'. [ 1926.096105][T21182] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 1926.527678][T24931] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1926.689699][T24931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.702937][T24931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.713372][T24931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1926.726970][T24931] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1926.736133][T24931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.746850][T24931] usb 6-1: config 0 descriptor?? [ 1927.304561][T24931] usbhid 6-1:0.0: can't add hid device: -71 [ 1927.343034][T24931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1927.384247][T24931] usb 6-1: USB disconnect, device number 20 [ 1927.869173][T21182] usb 3-1: USB disconnect, device number 92 [ 1928.650380][T27617] lo speed is unknown, defaulting to 1000 [ 1928.673356][T27619] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5761'. [ 1928.694353][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5762'. [ 1928.727952][T27619] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5761'. [ 1929.238103][T27617] lo speed is unknown, defaulting to 1000 [ 1929.316664][T24931] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1929.511176][T24931] usb 6-1: Using ep0 maxpacket: 32 [ 1929.521096][T24931] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1929.536518][T24931] usb 6-1: config 0 has no interface number 0 [ 1929.566989][T24931] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1929.589009][T24931] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1929.606048][T24931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1929.614284][T24931] usb 6-1: Product: syz [ 1929.624404][T24931] usb 6-1: Manufacturer: syz [ 1929.631779][T24931] usb 6-1: SerialNumber: syz [ 1929.679691][T24931] usb 6-1: config 0 descriptor?? [ 1929.686450][T27626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1929.923656][T27626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1930.372721][T24931] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1930.429581][T21528] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1930.444099][T24931] asix 6-1:0.188: probe with driver asix failed with error -61 [ 1930.453706][T21528] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1930.468576][T21528] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1930.477460][T21528] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1930.507266][T21528] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1930.661278][T27644] lo speed is unknown, defaulting to 1000 [ 1931.100952][T27644] lo speed is unknown, defaulting to 1000 [ 1931.214593][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5776'. [ 1931.381734][T27644] chnl_net:caif_netlink_parms(): no params data found [ 1931.564469][T27644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1931.572513][T27644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.580125][T27644] bridge_slave_0: entered allmulticast mode [ 1931.588916][T27644] bridge_slave_0: entered promiscuous mode [ 1931.598505][T27644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1931.606366][T27644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.613694][T27644] bridge_slave_1: entered allmulticast mode [ 1931.621279][T27644] bridge_slave_1: entered promiscuous mode [ 1931.664414][T27644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1931.682944][T27644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1931.728652][T27683] random: crng reseeded on system resumption [ 1931.755260][T27683] netlink: 'syz.2.5781': attribute type 2 has an invalid length. [ 1931.833983][T27644] team0: Port device team_slave_0 added [ 1931.846745][T27644] team0: Port device team_slave_1 added [ 1931.915602][T27644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1931.922824][T27644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1931.950455][T27644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1931.967646][T27644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1931.975426][T27644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.002237][T27644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.041609][ T5902] usb 6-1: USB disconnect, device number 21 [ 1932.182589][T27687] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5783'. [ 1932.204062][T27644] hsr_slave_0: entered promiscuous mode [ 1932.211688][T27644] hsr_slave_1: entered promiscuous mode [ 1932.223766][T27644] debugfs: 'hsr0' already exists in 'hsr' [ 1932.230755][T27644] Cannot create hsr debugfs directory [ 1932.235702][T27689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5783'. [ 1932.584981][T18044] Bluetooth: hci5: command tx timeout [ 1933.424225][T21182] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1933.617636][T21182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1933.637611][T21182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1933.660744][T21182] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1933.675417][T21182] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1933.685294][T21182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.696979][T21182] usb 3-1: config 0 descriptor?? [ 1934.144767][T21182] usbhid 3-1:0.0: can't add hid device: -71 [ 1934.151638][T21182] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1934.171782][T21182] usb 3-1: USB disconnect, device number 93 [ 1934.673986][T18044] Bluetooth: hci5: command tx timeout [ 1935.889996][T27722] netlink: 'syz.4.5797': attribute type 1 has an invalid length. [ 1936.743251][T18044] Bluetooth: hci5: command tx timeout [ 1937.115656][T27722] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1937.126395][T27731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5801'. [ 1937.361933][T27644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1937.375235][T27738] netlink: 212352 bytes leftover after parsing attributes in process `syz.0.5802'. [ 1937.390611][T27644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1937.526987][T27644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1938.363155][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5804'. [ 1938.382861][T27644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1938.660630][T27644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1938.749201][T27644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1938.777597][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1938.784918][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1938.821772][T18044] Bluetooth: hci5: command tx timeout [ 1938.852889][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1938.860225][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1938.961061][T27767] netlink: 'syz.5.5812': attribute type 1 has an invalid length. [ 1939.161379][T27767] bond4: entered promiscuous mode [ 1939.167505][T27767] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1939.295127][T27644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1940.234627][T27785] tipc: Started in network mode [ 1940.687321][T27785] tipc: Node identity 4, cluster identity 4711 [ 1940.693942][T27785] tipc: Node number set to 4 [ 1940.828249][T27785] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1940.893424][T27785] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1940.950516][T27785] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5818'. [ 1941.185570][T27805] fuse: Bad value for 'fd' [ 1941.228129][T27806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5823'. [ 1941.349759][T27806] bridge_slave_1: left allmulticast mode [ 1941.365945][T27806] bridge_slave_1: left promiscuous mode [ 1941.383194][T27806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1941.406279][T27806] bridge_slave_0: left allmulticast mode [ 1941.422919][T27806] bridge_slave_0: left promiscuous mode [ 1941.429090][T27806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.146442][T27644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1943.195058][T27831] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5834'. [ 1943.227659][T27831] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5834'. [ 1943.243280][T27831] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5834'. [ 1944.873150][T27644] veth0_vlan: entered promiscuous mode [ 1944.997114][T27644] veth1_vlan: entered promiscuous mode [ 1945.133997][T27860] lo speed is unknown, defaulting to 1000 [ 1945.135804][T27862] netlink: 212352 bytes leftover after parsing attributes in process `syz.5.5844'. [ 1945.156583][T27644] veth0_macvtap: entered promiscuous mode [ 1945.211692][T27644] veth1_macvtap: entered promiscuous mode [ 1945.295780][T27864] loop5: detected capacity change from 0 to 16 [ 1945.335334][T27864] erofs (device loop5): mounted with root inode @ nid 36. [ 1945.361681][T27644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1945.448668][T27644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1945.529154][T24542] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.568741][T12881] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.609353][T12881] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.630602][T12881] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1945.707563][T27860] lo speed is unknown, defaulting to 1000 [ 1946.158922][ T1319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.197861][ T1319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.356030][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.381596][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.439235][T27895] overlayfs: failed to clone upperpath [ 1947.632414][T27903] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5859'. [ 1947.733880][T27904] siw: device registration error -23 [ 1947.746107][ T30] audit: type=1326 audit(4291404246.829:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27892 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4def8f6c9 code=0x0 [ 1948.639154][T27914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5864'. [ 1948.788527][T21183] kernel write not supported for file [eventfd] (pid: 21183 comm: kworker/0:1) [ 1949.769093][T27936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5872'. [ 1949.818101][T27936] IPVS: length: 24 != 55320 [ 1949.869237][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 240 seconds [ 1949.880269][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 240 seconds [ 1949.891730][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 240 seconds [ 1951.822925][T27977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1951.858102][T27977] IPVS: length: 24 != 55320 [ 1951.930736][T27979] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5888'. [ 1951.940804][T27979] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5888'. [ 1951.960649][T27979] netlink: 19 bytes leftover after parsing attributes in process `syz.2.5888'. [ 1955.887629][T28014] loop4: detected capacity change from 0 to 2048 [ 1956.010791][T28014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1958.379287][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5921'. [ 1958.394004][T28066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5923'. [ 1958.433006][T28065] IPVS: length: 24 != 55320 [ 1960.153998][T28094] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5930'. [ 1960.474258][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5935'. [ 1960.487354][T28108] IPVS: length: 24 != 55320 [ 1960.770477][T21183] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1960.960349][T21183] usb 7-1: Using ep0 maxpacket: 32 [ 1960.983967][T21183] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1961.008094][T21183] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1961.033927][T21183] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1961.043707][T21183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.071441][T21183] usb 7-1: Product: syz [ 1961.077992][T21183] usb 7-1: Manufacturer: syz [ 1961.093068][T21183] usb 7-1: SerialNumber: syz [ 1961.126433][T21183] usb 7-1: config 0 descriptor?? [ 1961.158187][T21183] usb 7-1: no audio or video endpoints found [ 1961.430267][ T5902] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1961.525556][T28150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5946'. [ 1962.054293][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.118042][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1962.180944][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1962.226296][ T5902] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1962.330357][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.479898][ T5902] usb 6-1: config 0 descriptor?? [ 1962.749809][ T5920] usb 7-1: USB disconnect, device number 78 [ 1962.860213][ T30] audit: type=1326 audit(4291404261.886:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28161 comm="syz.0.5954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f122f18f6c9 code=0x0 [ 1963.046431][ T5902] hid_parser_main: 5 callbacks suppressed [ 1963.046524][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.407863][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.416058][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.429327][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.436784][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.447049][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.454896][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.483534][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.525218][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.546685][ T5902] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1963.578553][T28167] syzkaller0: entered promiscuous mode [ 1963.595254][ T5902] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1963.618597][T28167] syzkaller0: entered allmulticast mode [ 1963.684278][ T5902] usb 6-1: USB disconnect, device number 22 [ 1963.884822][T28173] fido_id[28173]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1964.329649][T21182] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1964.368781][ T5902] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1964.530059][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 1964.537689][ T5902] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1964.551845][ T5902] usb 6-1: config 0 has no interface number 0 [ 1964.578153][ T5902] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1964.627543][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.658488][T21182] usb 7-1: Using ep0 maxpacket: 8 [ 1964.666781][ T5902] usb 6-1: Product: syz [ 1964.674086][T21182] usb 7-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1964.684687][ T5902] usb 6-1: Manufacturer: syz [ 1964.684725][ T5902] usb 6-1: SerialNumber: syz [ 1964.692170][ T5902] usb 6-1: config 0 descriptor?? [ 1964.699855][T21182] usb 7-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1964.720578][T21182] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1964.730531][T21182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.785150][T21182] usb 7-1: Product: syz [ 1964.801245][T21182] usb 7-1: Manufacturer: syz [ 1964.820052][T21182] usb 7-1: SerialNumber: syz [ 1965.495321][ T5902] smsc95xx v2.0.0 [ 1965.739892][T21182] usb 7-1: USB disconnect, device number 79 [ 1965.954166][ T5902] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1965.989802][ T5902] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1966.820365][ T5902] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1966.846847][ T5902] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1966.870856][ T5902] usb 6-1: USB disconnect, device number 23 [ 1967.958259][T28250] syzkaller0: entered promiscuous mode [ 1967.963811][T28250] syzkaller0: entered allmulticast mode [ 1968.129459][T28258] netlink: 'syz.2.5984': attribute type 12 has an invalid length. [ 1968.448044][T21183] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1968.616743][ T30] audit: type=1326 audit(4291404267.629:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28259 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f122f18f6c9 code=0x0 [ 1968.907129][T21183] usb 6-1: Using ep0 maxpacket: 8 [ 1969.173162][T21183] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 1969.184330][T21183] usb 6-1: config 254 has 0 interfaces, different from the descriptor's value: 1 [ 1969.200510][T21183] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1969.209854][T21183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.227444][T21183] usb 6-1: Product: syz [ 1969.231675][T21183] usb 6-1: Manufacturer: syz [ 1969.257128][T21183] usb 6-1: SerialNumber: syz [ 1969.348062][T28272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5991'. [ 1970.132779][ T5920] usb 6-1: USB disconnect, device number 24 [ 1970.191007][T28281] lo speed is unknown, defaulting to 1000 [ 1974.237850][T28281] lo speed is unknown, defaulting to 1000 [ 1974.333651][T28309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1974.466724][T28315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6005'. [ 1976.134314][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.604219][T28343] net_ratelimit: 5 callbacks suppressed [ 1976.604240][T28343] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1979.507581][T28354] lo speed is unknown, defaulting to 1000 [ 1979.913873][T28354] lo speed is unknown, defaulting to 1000 [ 1979.932262][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 270 seconds [ 1979.943809][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 270 seconds [ 1979.955361][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 270 seconds [ 1982.027304][T28385] IPVS: length: 24 != 55320 [ 1983.280877][T18044] Bluetooth: hci0: command 0x0405 tx timeout [ 1983.461680][T28406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6038'. [ 1983.507659][T28405] lo speed is unknown, defaulting to 1000 [ 1983.825404][T28405] lo speed is unknown, defaulting to 1000 [ 1983.916408][T28420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6044'. [ 1984.517903][T28436] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6051'. [ 1984.614959][T28436] erspan0: entered promiscuous mode [ 1984.622302][T28436] macvtap1: entered promiscuous mode [ 1984.627990][T28436] macvtap1: entered allmulticast mode [ 1984.634102][T28436] erspan0: entered allmulticast mode [ 1986.026909][T28452] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6054'. [ 1986.808674][T28455] netlink: 'syz.2.6056': attribute type 12 has an invalid length. [ 1987.100675][T28468] IPVS: length: 24 != 55320 [ 1987.257391][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1987.315221][T28472] macvtap3: entered promiscuous mode [ 1987.318046][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1987.327421][T28472] macvtap3: entered allmulticast mode [ 1987.336313][T28477] loop6: detected capacity change from 0 to 1024 [ 1987.401038][T28477] EXT4-fs: inline encryption not supported [ 1987.480712][T28477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1987.800892][T27644] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1988.687678][T28505] loop4: detected capacity change from 0 to 256 [ 1988.740563][T28505] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 1988.771847][T28511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6080'. [ 1988.796100][T28505] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1988.825654][T28505] exFAT-fs (loop4): failed to load alloc-bitmap [ 1988.854706][T28511] erspan0: entered promiscuous mode [ 1988.860828][T28511] macvtap1: entered promiscuous mode [ 1988.866236][T28505] exFAT-fs (loop4): failed to recognize exfat type [ 1988.880644][T28513] loop6: detected capacity change from 0 to 8 [ 1988.887977][T28511] macvtap1: entered allmulticast mode [ 1988.888003][T28511] erspan0: entered allmulticast mode [ 1991.491713][T21182] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1991.533557][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6095'. [ 1991.596713][T28550] erspan0: entered promiscuous mode [ 1991.602256][T28550] macvtap1: entered promiscuous mode [ 1991.618112][T28550] macvtap1: entered allmulticast mode [ 1991.624300][T28550] erspan0: entered allmulticast mode [ 1991.667216][T21182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1991.721563][T21182] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1991.874431][T21182] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1991.888807][T21182] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1991.898706][T21182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.921981][T21182] usb 7-1: config 0 descriptor?? [ 1992.305880][T28566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'. [ 1992.316969][T28566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'. [ 1992.367849][T21182] hid_parser_main: 5 callbacks suppressed [ 1992.367873][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.426298][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.433779][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.454568][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.476688][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.497891][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.519289][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.543683][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.558802][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.576990][T21182] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 1992.608930][T21182] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1992.675167][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1992.694681][T21182] usb 7-1: USB disconnect, device number 80 [ 1992.742303][T28582] macvtap2: entered promiscuous mode [ 1992.762726][T28582] macvtap2: entered allmulticast mode [ 1992.796685][T28585] netlink: 'syz.5.6111': attribute type 1 has an invalid length. [ 1992.817533][T28583] fido_id[28583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1992.891230][T28585] bond5: entered promiscuous mode [ 1992.941834][T28593] loop4: detected capacity change from 0 to 512 [ 1992.949828][T28585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1992.958227][T28593] EXT4-fs (loop4): unable to read superblock [ 1993.277668][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1993.305703][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1993.332505][T28606] netlink: 'syz.5.6119': attribute type 1 has an invalid length. [ 1993.357108][T28606] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6119'. [ 1993.462055][T28614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6124'. [ 1993.503825][T28614] macvtap3: entered promiscuous mode [ 1993.543388][T28614] macvtap3: entered allmulticast mode [ 1993.612606][T28622] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1993.696501][T28626] netlink: 'syz.5.6129': attribute type 1 has an invalid length. [ 1993.781338][T28626] bond6: entered promiscuous mode [ 1993.787798][T28626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1994.000508][T28641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6134'. [ 1994.017383][T28642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1994.030464][T28642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1994.055210][T28642] netlink: 'syz.5.6136': attribute type 1 has an invalid length. [ 1994.068766][T28642] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6136'. [ 1994.162464][T28646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6138'. [ 1994.192739][T28646] macvtap2: entered promiscuous mode [ 1994.199029][T28646] macvtap2: entered allmulticast mode [ 1994.432599][T28658] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6143'. [ 1994.465791][ T5887] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1994.642182][ T5887] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1994.662984][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1994.684389][ T5887] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1994.698783][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1994.708676][ T5887] usb 6-1: Product: syz [ 1994.712886][ T5887] usb 6-1: Manufacturer: syz [ 1994.718235][ T5887] usb 6-1: SerialNumber: syz [ 1994.736945][ T5887] usb 6-1: config 0 descriptor?? [ 1994.762744][ T5887] usb 6-1: selecting invalid altsetting 0 [ 1994.915413][T28679] fuse: Unknown parameter 'gro00000000000000000000' [ 1994.941389][T28678] lo speed is unknown, defaulting to 1000 [ 1996.664100][T28678] lo speed is unknown, defaulting to 1000 [ 1996.852535][T28705] loop4: detected capacity change from 0 to 512 [ 1996.901717][T28705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 1996.912545][T28705] System zones: 1-12 [ 1996.925530][T28705] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.6162: Directory hole found for htree index block 0 [ 1996.980019][T28705] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1997.001894][T28705] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.6162: Directory hole found for htree index block 0 [ 1997.043079][T28705] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1997.061153][T28705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1997.107457][T28705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1997.366793][T16817] usb 6-1: USB disconnect, device number 25 [ 1997.981171][T28727] netlink: 'syz.5.6172': attribute type 1 has an invalid length. [ 1998.106490][T28727] bond7: entered promiscuous mode [ 1998.135697][T28727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1998.163834][T28736] fuse: Unknown parameter 'gro00000000000000000000' [ 1998.449132][T28741] loop4: detected capacity change from 0 to 764 [ 1998.909877][T28742] lo speed is unknown, defaulting to 1000 [ 1999.057312][T28742] lo speed is unknown, defaulting to 1000 [ 1999.163043][T28749] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1999.226116][T28749] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6179'. [ 1999.453062][T28756] loop5: detected capacity change from 0 to 512 [ 1999.536894][T28756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1999.704062][T28756] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1999.782320][T28772] netlink: 'syz.0.6186': attribute type 1 has an invalid length. [ 1999.795645][T28770] loop4: detected capacity change from 0 to 164 [ 1999.886622][T28772] bond4: entered promiscuous mode [ 1999.912801][T28772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1999.925307][ T30] audit: type=1800 audit(4291404299.025:307): pid=28775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6182" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 2000.184252][T24611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2000.315830][T28779] netlink: 'syz.2.6190': attribute type 4 has an invalid length. [ 2001.404094][T28808] netlink: 184 bytes leftover after parsing attributes in process `syz.5.6196'. [ 2002.110082][T28813] fuse: Unknown parameter 'gro00000000000000000000' [ 2003.009653][T28829] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6208'. [ 2006.022215][T28868] loop4: detected capacity change from 0 to 512 [ 2006.058681][T28868] EXT4-fs: Ignoring removed bh option [ 2006.101101][T28868] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2006.129999][T28869] loop6: detected capacity change from 0 to 1024 [ 2006.192195][T28868] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2006.285550][T28868] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.6225: Invalid block bitmap block 0 in block_group 0 [ 2006.518081][T28868] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 2006.914349][T28868] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.6225: attempt to clear invalid blocks 983261 len 1 [ 2006.951338][T28868] EXT4-fs error (device loop4): __ext4_get_inode_loc:4836: comm syz.4.6225: Invalid inode table block 0 in block_group 0 [ 2007.041870][T28868] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6317: Corrupt filesystem [ 2007.104349][T28868] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 2007.154864][ T5192] udevd[5192]: worker [23437] terminated by signal 33 (Unknown signal 33) [ 2007.165735][ T5192] udevd[5192]: worker [23437] failed while handling '/devices/virtual/block/loop6' [ 2007.188648][T28868] EXT4-fs error (device loop4): __ext4_get_inode_loc:4836: comm syz.4.6225: Invalid inode table block 0 in block_group 0 [ 2007.297010][T28868] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6317: Corrupt filesystem [ 2007.321465][T28868] EXT4-fs error (device loop4): ext4_truncate:4641: inode #11: comm syz.4.6225: mark_inode_dirty error [ 2007.343384][T28868] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 2007.357700][T28868] EXT4-fs error (device loop4): __ext4_get_inode_loc:4836: comm syz.4.6225: Invalid inode table block 0 in block_group 0 [ 2007.400552][T28868] EXT4-fs (loop4): 1 truncate cleaned up [ 2007.443825][T28868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2007.527078][ T5920] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2007.638870][T28895] lo speed is unknown, defaulting to 1000 [ 2007.693058][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.712604][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2007.733231][ T5920] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2007.749775][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2007.774799][ T5920] usb 6-1: SerialNumber: syz [ 2007.817146][T16817] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2007.822764][T25956] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2007.996818][T16817] usb 7-1: Using ep0 maxpacket: 32 [ 2008.041247][ T5920] usb 6-1: 0:2 : does not exist [ 2008.046250][ T5920] usb 6-1: usbmixer: too many channels (61) in unit 5 [ 2008.075341][T16817] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2008.120646][T16817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.158389][T16817] usb 7-1: Product: syz [ 2008.184866][ T5920] usb 6-1: USB disconnect, device number 26 [ 2008.190976][T16817] usb 7-1: Manufacturer: syz [ 2008.216939][T16817] usb 7-1: SerialNumber: syz [ 2008.257636][T16817] usb 7-1: config 0 descriptor?? [ 2008.322513][T23457] udevd[23457]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2008.358551][T16817] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2008.396602][T16817] dvb-usb: bulk message failed: -22 (2/0) [ 2008.452452][T16817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2008.515080][T16817] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2008.855695][T16817] usb 7-1: media controller created [ 2008.878158][T16817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2008.974608][T28908] dvb-usb: bulk message failed: -22 (73/0) [ 2009.006036][T16817] usb 7-1: selecting invalid altsetting 7 [ 2009.225090][T16817] cxusb: set interface failed [ 2009.383679][T16817] dvb-usb: bulk message failed: -22 (1/0) [ 2009.672898][T28895] lo speed is unknown, defaulting to 1000 [ 2009.719926][T16817] DVB: Unable to find symbol lgdt330x_attach() [ 2009.757236][T16817] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2009.940449][T16817] rc_core: IR keymap rc-dvico-portable not found [ 2009.965981][T16817] Registered IR keymap rc-empty [ 2009.989440][ T95] block nbd0: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 300 seconds [ 2009.993198][T16817] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 2010.000345][ T95] block nbd0: Possible stuck request ffff8880251e0200: control (read@1024,1024B). Runtime 300 seconds [ 2010.025223][ T95] block nbd0: Possible stuck request ffff8880251e0400: control (read@2048,1024B). Runtime 300 seconds [ 2010.144717][T16817] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input60 [ 2010.220642][T16817] dvb-usb: schedule remote query interval to 100 msecs. [ 2010.254873][T16817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2010.356247][T16817] dvb-usb: bulk message failed: -22 (1/0) [ 2010.494378][T16817] dvb-usb: bulk message failed: -22 (1/0) [ 2010.678676][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 2010.692749][T16817] usb 7-1: USB disconnect, device number 81 [ 2010.786567][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 2010.951504][T16817] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2013.681446][T28959] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6251'. [ 2014.082108][T28967] loop5: detected capacity change from 0 to 128 [ 2014.104278][ T5887] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 2014.119657][T28967] vfat filesystem being mounted at /253/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 2014.266239][T28967] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 2014.278193][T28967] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 2014.286906][T28967] CPU: 1 UID: 0 PID: 28967 Comm: syz.5.6255 Not tainted syzkaller #0 PREEMPT(full) [ 2014.296409][T28967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2014.306669][T28967] RIP: 0010:bio_seg_gap+0x1c6/0x7d0 [ 2014.312059][T28967] Code: fd 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 5c 24 20 49 89 de 49 c1 e6 04 48 89 44 24 08 4a 8d 2c 30 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 7c 04 b9 fd 48 ba 00 00 00 00 00 fc [ 2014.331793][T28967] RSP: 0018:ffffc9000c06eca0 EFLAGS: 00010246 [ 2014.338001][T28967] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 2014.346264][T28967] RDX: dffffc0000000000 RSI: 0000000000001a3b RDI: ffff88807c4d82b0 [ 2014.354435][T28967] RBP: 0000000000000000 R08: ffff8881417709f7 R09: 1ffff110282ee13e [ 2014.362520][T28967] R10: dffffc0000000000 R11: ffffed10282ee13f R12: 0000000000000c00 [ 2014.370688][T28967] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807c4d8280 [ 2014.375210][ T5887] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2014.378850][T28967] FS: 00007ff4679bf6c0(0000) GS:ffff888125fcc000(0000) knlGS:0000000000000000 [ 2014.378874][T28967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2014.392158][ T5887] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2014.397857][T28967] CR2: 00007fd11fb9d000 CR3: 00000000441fa000 CR4: 00000000003526f0 [ 2014.397884][T28967] Call Trace: [ 2014.397895][T28967] [ 2014.397908][T28967] ? blk_add_trace_bio+0x1de/0x2f0 [ 2014.415308][ T5887] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2014.419697][T28967] bio_attempt_back_merge+0x4ae/0x930 [ 2014.445990][T28967] ? blk_attempt_bio_merge+0x273/0x4c0 [ 2014.451548][T28967] blk_attempt_plug_merge+0x145/0x1d0 [ 2014.456927][T28967] blk_mq_submit_bio+0x1aad/0x26e0 [ 2014.462109][T28967] ? blk_mq_submit_bio+0x46a/0x26e0 [ 2014.467310][T28967] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 2014.472857][T28967] ? blk_mq_submit_bio+0xd5b/0x26e0 [ 2014.478058][T28967] ? __lock_acquire+0xab9/0xd20 [ 2014.482960][T28967] __submit_bio+0x207/0x5a0 [ 2014.487506][T28967] ? __pfx___submit_bio+0x10/0x10 [ 2014.492540][T28967] ? blk_add_trace_bio+0x2e/0x2f0 [ 2014.497570][T28967] submit_bio_noacct_nocheck+0x2eb/0xa50 [ 2014.503291][T28967] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 2014.509446][T28967] ? blk_add_trace_bio+0x2e/0x2f0 [ 2014.514483][T28967] ? submit_bio_noacct+0xdfc/0x1b80 [ 2014.519737][T28967] submit_bio_wait+0x104/0x200 [ 2014.524590][T28967] ? __pfx_submit_bio_wait+0x10/0x10 [ 2014.529899][T28967] ? blk_alloc_discard_bio+0x243/0x2c0 [ 2014.535454][T28967] blkdev_issue_discard+0x113/0x1b0 [ 2014.540687][T28967] ? __pfx_blkdev_issue_discard+0x10/0x10 [ 2014.546416][T28967] fat_free_clusters+0x405/0xb80 [ 2014.551426][T28967] ? __pfx_fat_free_clusters+0x10/0x10 [ 2014.556918][T28967] ? __mark_inode_dirty+0x6a8/0x13c0 [ 2014.562257][T28967] ? rcu_is_watching+0x15/0xb0 [ 2014.567031][T28967] ? __mark_inode_dirty+0xb3c/0x13c0 [ 2014.572317][T28967] fat_truncate_blocks+0x7d7/0xaf0 [ 2014.577757][T28967] ? __pfx_fat_truncate_blocks+0x10/0x10 [ 2014.583496][T28967] ? unmap_mapping_range+0xde/0x170 [ 2014.588737][T28967] ? __pfx_unmap_mapping_range+0x10/0x10 [ 2014.594474][T28967] ? setattr_prepare+0x1e7/0xac0 [ 2014.599526][T28967] ? truncate_setsize+0xcf/0xf0 [ 2014.604424][T28967] fat_setattr+0xa3c/0xf10 [ 2014.608937][T28967] ? try_break_deleg+0x79/0x130 [ 2014.613890][T28967] ? __pfx_fat_setattr+0x10/0x10 [ 2014.618917][T28967] notify_change+0xc1a/0xf40 [ 2014.623531][T28967] do_truncate+0x1a4/0x220 [ 2014.627970][T28967] ? __pfx_do_truncate+0x10/0x10 [ 2014.633001][T28967] ? apparmor_file_truncate+0x23e/0x2d0 [ 2014.638649][T28967] path_openat+0x308c/0x3860 [ 2014.643324][T28967] ? __pfx_path_openat+0x10/0x10 [ 2014.648274][T28967] do_filp_open+0x1fa/0x410 [ 2014.652777][T28967] ? __lock_acquire+0xab9/0xd20 [ 2014.657636][T28967] ? __pfx_do_filp_open+0x10/0x10 [ 2014.662690][T28967] ? _raw_spin_unlock+0x28/0x50 [ 2014.667712][T28967] ? alloc_fd+0x64c/0x6c0 [ 2014.672083][T28967] do_sys_openat2+0x121/0x1c0 [ 2014.676770][T28967] ? __pfx_do_sys_openat2+0x10/0x10 [ 2014.681982][T28967] ? rcu_is_watching+0x15/0xb0 [ 2014.686763][T28967] __x64_sys_openat+0x138/0x170 [ 2014.691621][T28967] do_syscall_64+0xfa/0xfa0 [ 2014.696226][T28967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.702324][T28967] ? clear_bhb_loop+0x60/0xb0 [ 2014.707180][T28967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.713079][T28967] RIP: 0033:0x7ff466b8f6c9 [ 2014.717584][T28967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2014.737459][T28967] RSP: 002b:00007ff4679bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2014.745880][T28967] RAX: ffffffffffffffda RBX: 00007ff466de5fa0 RCX: 00007ff466b8f6c9 [ 2014.753869][T28967] RDX: 0000000000181242 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 2014.761942][T28967] RBP: 00007ff466c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2014.769955][T28967] R10: 0000000000000148 R11: 0000000000000246 R12: 0000000000000000 [ 2014.778326][T28967] R13: 00007ff466de6038 R14: 00007ff466de5fa0 R15: 00007fff8ece9ed8 [ 2014.786320][T28967] [ 2014.789343][T28967] Modules linked in: [ 2014.795643][T28967] ---[ end trace 0000000000000000 ]--- [ 2014.802894][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2014.811530][ T5887] usb 7-1: Product: syz [ 2014.815857][ T5887] usb 7-1: Manufacturer: syz [ 2014.820480][ T5887] usb 7-1: SerialNumber: syz [ 2014.829330][T28967] RIP: 0010:bio_seg_gap+0x1c6/0x7d0 [ 2014.834963][T28967] Code: fd 48 ba 00 00 00 00 00 fc ff df 49 8b 06 48 89 5c 24 20 49 89 de 49 c1 e6 04 48 89 44 24 08 4a 8d 2c 30 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 7c 04 b9 fd 48 ba 00 00 00 00 00 fc [ 2014.855482][T28967] RSP: 0018:ffffc9000c06eca0 EFLAGS: 00010246 [ 2014.861904][T28967] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 2014.870321][T28969] siw: device registration error -23 [ 2014.877766][ T5887] usb 7-1: config 0 descriptor?? [ 2014.884487][T28967] RDX: dffffc0000000000 RSI: 0000000000001a3b RDI: ffff88807c4d82b0 [ 2014.893060][T28967] RBP: 0000000000000000 R08: ffff8881417709f7 R09: 1ffff110282ee13e [ 2014.909845][T28967] R10: dffffc0000000000 R11: ffffed10282ee13f R12: 0000000000000c00 [ 2014.912736][ T5887] usb 7-1: selecting invalid altsetting 0 [ 2014.924070][T28967] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88807c4d8280 [ 2014.932278][T28967] FS: 00007ff4679bf6c0(0000) GS:ffff888125fcc000(0000) knlGS:0000000000000000 [ 2014.933361][ T30] audit: type=1326 audit(4291404569.992:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28968 comm="+}[@" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4def8f6c9 code=0x0 [ 2014.942416][T28967] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2014.970022][T28967] CR2: 00007ff46799ed58 CR3: 00000000441fa000 CR4: 00000000003526f0 [ 2014.978746][T28967] Kernel panic - not syncing: Fatal exception [ 2014.985088][T28967] Kernel Offset: disabled [ 2014.989414][T28967] Rebooting in 86400 seconds..