last executing test programs: 15m4.176793111s ago: executing program 4 (id=620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 15m0.433013891s ago: executing program 4 (id=628): r0 = socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m58.477776012s ago: executing program 4 (id=631): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r2, 0x81, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 14m56.455802777s ago: executing program 4 (id=640): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) close(r1) inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 14m55.564338938s ago: executing program 4 (id=644): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x40001) 14m54.928694965s ago: executing program 4 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffffc, 0x9, 0x2, 0xf, 0x66, 0x6d, 0x2, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4898) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) 14m54.062676671s ago: executing program 32 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0xfffffffc, 0x9, 0x2, 0xf, 0x66, 0x6d, 0x2, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4898) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0x3}, 0x14) 6m56.702459467s ago: executing program 0 (id=2348): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) 6m56.4010747s ago: executing program 0 (id=2350): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0xf93f000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6m51.222246256s ago: executing program 0 (id=2362): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) 6m50.720479369s ago: executing program 0 (id=2364): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4888f234, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r2, r0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r3, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 6m50.141157001s ago: executing program 0 (id=2367): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0xfffffffe, 0xffff0001, 0x400, 0xffffffffffffffff, 0xd7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xf}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x31, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r4, 0xffffc000) msync(&(0x7f000021c000/0x2000)=nil, 0x2000, 0x6) 6m49.808620349s ago: executing program 0 (id=2368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000000, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m48.862252271s ago: executing program 33 (id=2368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x20000000, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m29.752863352s ago: executing program 2 (id=3349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x145400, 0x103) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_io_uring_setup(0xccb, &(0x7f0000000300)={0x0, 0x45d0, 0x10, 0x1, 0x310}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.835708112s ago: executing program 2 (id=3361): getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/76, 0x4c) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001b80)=""/4096, 0x1000, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) 1m27.38278662s ago: executing program 2 (id=3355): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x4000010) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x140) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x0, r4, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m27.011697529s ago: executing program 2 (id=3357): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1m25.341337429s ago: executing program 2 (id=3365): io_setup(0x8, &(0x7f0000000540)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x40, 0x8001, 0x0, 0x9, 0x80, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m25.017833232s ago: executing program 2 (id=3367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x4000000000000000, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x1) dup(0xffffffffffffffff) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 1m24.637567457s ago: executing program 34 (id=3367): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x4000000000000000, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x1) dup(0xffffffffffffffff) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x2, 0x36, 0x0, 0x0) 1m13.964566427s ago: executing program 5 (id=3404): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x31f}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07001d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r5 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1m12.758652404s ago: executing program 5 (id=3407): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 1m11.720677258s ago: executing program 5 (id=3409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20083, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) r3 = socket(0x2b, 0x1, 0x1) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000140)={r10, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c64d2, &(0x7f0000000180)={r11, 0x80000}) close_range(r4, 0xffffffffffffffff, 0x0) unshare(0x4000400) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xf5, 0x4, 0x1, 0x0, r12}, 0x48) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1m10.721609015s ago: executing program 5 (id=3413): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1m9.250572287s ago: executing program 5 (id=3415): getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/76, 0x4c) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001b80)=""/4096, 0x1000, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x20000000) 1m9.108652713s ago: executing program 3 (id=3417): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d00"/24, 0x18) 1m8.952828581s ago: executing program 5 (id=3418): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@mpls_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x1c, 0x14, 0x14, 0x2, 0xfc, 0x1, 0xc8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8c4) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) write$tun(r0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0xfce) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) 1m8.516616535s ago: executing program 35 (id=3418): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6gre0\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@mpls_newroute={0x1c, 0x18, 0x1, 0x70bd25, 0x25dfdbfd, {0x1c, 0x14, 0x14, 0x2, 0xfc, 0x1, 0xc8, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8c4) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) write$tun(r0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0xfce) pipe(&(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) 1m7.454625406s ago: executing program 3 (id=3421): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0xc002, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x3) syz_fuse_handle_req(r2, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x40a08010, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f370000", 0x8b, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1m5.873591219s ago: executing program 3 (id=3425): r0 = socket(0x23, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) listen(r0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000020000100ffff000200000000020020f8ffffff0115000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) ioperm(0x7, 0x401, 0x99) 1m4.361731457s ago: executing program 3 (id=3427): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 1m2.663649114s ago: executing program 3 (id=3430): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x7) landlock_restrict_self(r0, 0x3) landlock_restrict_self(r1, 0x9) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r1, 0x1) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0xa) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r1, 0x2) landlock_restrict_self(r0, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 1m2.257360145s ago: executing program 3 (id=3432): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f00000001c0)='GPL\x00', 0x10002, 0x0, 0x8000, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x2}, {[0x2abd, 0xfff, 0x1, 0xaf]}, 0x9, 0xd3, &(0x7f0000000580)=""/211}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./bus\x00', 0x14000278) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r5, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r6 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001540)={0x1, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001180)=""/237, 0xed}], 0x0}, 0x20) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) 1m1.456332546s ago: executing program 36 (id=3432): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f00000001c0)='GPL\x00', 0x10002, 0x0, 0x8000, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x2}, {[0x2abd, 0xfff, 0x1, 0xaf]}, 0x9, 0xd3, &(0x7f0000000580)=""/211}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) r2 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000180)='./bus\x00', 0x14000278) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r5, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r6 = syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x4ddb, 0x10000, 0x1, 0x2ca}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001540)={0x1, 0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001180)=""/237, 0xed}], 0x0}, 0x20) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) 15.747174011s ago: executing program 8 (id=3542): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="58c0e8bae42c0fe8bdf795b00994db801593518c974db2203b74e695040d2c9f2c3496ab3aa08c45023c6c77fd6e9ccb4cf2c9885b536185f74d40ac385923d11990841b9596d9129f0a565ef205da3f7bbd5cb09b2210051ecdda6e20ea108eaea68ba58a53f446db1598ff59bf94bf4e1749edb4d065b82120033bcaf01889dd81381abe885032f2c2f15d73828d65d839652b4402312ba82d9df95c4966a81a6c0a24a3025a7feff0cec1e3b77e442304a4ca1fe6d516cde88d197fb26de0c5f24403db89870d65da4cb763ae49eaf38a155547e9aafcf04cb6dadc1e760e9c1da7acc9f6afbac76fb44750d5f607aa72a985be38d229b8a7f6f848c0fa91edc5243192d2ee40e65abe7caab40a5e2ba95a3e6a69eb1bd3769b54ee7aa5360430b7f5e51589106eba39e12861a1d0b8f13c154100d0fbb0ba760f41470cb6b1904cb85bd8c5e4394ac77ce0468cce003cda723f72aeda6c766ddf96fccdb018769e77c6c2c0786dc85dc9438a75ad96c9f87c8d9a6f0353ef8f43070e4232b955e3f9b182aa66ae59f06529c685efc18d0384f5d79174ba85959e434e7b833040dcbf739e17c083b4c67042ff783f9aae8522ebf118700400c80035f686057c9a95108316d7a37e2fb90691b44cbe0e77ec66d08f0cb6b86ca7e1530a5122cad2170154c68cee7611542774534e9ed151295e80ea9ede97e1a05845baccc45ae42fcd9171fb6517793507260e8273e0357feb85572d4d2b695ad16574568c4e17effb582c751bdbb172a7fcc5d2034b8469e95748158c27e68d2d226e57e0f8e37ed5714280a87a15422c1825a5a2f734ec1ea4a7a71ce13df577f904cae48ee8f6be9f4e5a6cd101267673727ce343690335c479e3fced545d62d66f2aa2e12c74321d1ae0713fbf678db1a4d98e2583de3e4c1207a1b3ef0528bf4c979e7f46a9981acee9307e11e487a41d8ef6408df077e184a4368d5e22e75b528d27e626541076df37f3869c0022c0c9b6d41cc6874ae1e9cef8c4816b84f7a93e2a404691abee20c1fe78a9c91b64e06f2a5b2ffe5c0386f1341b130bb071dafb680bdb76cc61da6a8dcf65a38410c4fff0c8feae4eb36688c84ea493b4b993ee476625385a750c6592287721be80af5e4917646d37e503296667918b4fc572d36f20f23032df0703dcfcdb2edd0318750252a2693c0e446b394f710d8aec13b792681b667ef092e78d779fbaa02c0462f58ee92761278a6a2de26d5514f118a88013fb5ee84a4e8951b7273686c47840e2941d41b632ed15912cb6cea9d4bd5b8b1f713c391612f641eb7b6ce66f4b1a97da59b8e90ac9a855a7ebf07a8372cda66ddf04b73aa2fc11ffeb276572d1ff23f0dea2e1abe5e38ae315df083103fc702a00bf38cd8b4f7d52b4e7944a7c99ffb743cb878280957c840d480d6adf64a06a37ef71fa1b4674e8e2844dafe919961791fe61be794b6e8e9866d97b96c97b8a5e0f32658b0a07f707aa24690652fdbf538c08e982c21dfed05975c8d1d1281c2f65c1fd71f19f78bbb800a21311a5c14a50b11c7de69abe9c347398cfdccfe6816ffaae09a982b3847833996e8798c7e807ebd61ee013f7d1711f148291b10d7ee47f8d9ca645df551451d9c41cf4057ce4b63060dab137445458f41b5839c612f3b3f8b39690a66ee2e7cf796052bf0b90e0e1be2fd87ee1f265ea3930a980d117573765357a57cd6263ecff5511107114c8311d9fe9665d4dfed59c74e04f6410bffb8c57224a4ba391ac0b9121f3083e0c4ad52c036d57dda6e1e21b184561dce5556cb1148d6894ec2bf9d6a52d5bafd1f59e52d4d30acadf9f3c11ffbc6ba17441f66dd10b8ebb27a2316be64111a8f11b3384ce89628ba1cea730934451ff7b29ab813bc6c8ecbd5538fc2d581a8b6848eea60db2836b29da9e7c1c813717b18b860bb5ff6120453797bfa5ce95d0236137d1f726463932c788b6eebe00437df73bb1088b198ff1ce72cba8157ab5ca82b7030dd76ba5dac3ac333de636aec4be333dd68d652257706a1eabdb304f01f763ece502b4f9cefb870cc96e258a8073c94ca67738811e6a4d2ebe92a7323fe2a29218e8ace1547c9580680c6f595f17ba6e56109ce31176157f08fe911b43ad111d84d919f4774e0896b0933041551e4116187ed93e4cf2fc7af572fe4ae6affec258007de3175ef99f44843213ea73f2b051bffb703cb19f6001dd5f4c4d5a248150e7ea96ec2a9fa196e60149767c6bb0d78370f7d61e67a6e8d60fd881fcbf2705480fd5579dbad96665488c85848f638ef036d01b13f43593ae7f99d52bd7f5994d663a9cdc01134a03dec835af6b3ec9ffd16ba2381a8575414b092cffba58b0d9e58e58c3a09be7d77a3cb23b74567bc8906b47edd552f48736e7cb41a4cefc73c1d9ba274d39042d4a2afe0aa0e6a06a7ae7933d8320d4b17511609f53dc4478e95895a1fbfe3b3c7727c0dc88e8726dfdfeba18998985e4f1268ac0f26ca69a65f4d82dcf4e451af14413f643a2c3f3bb00c3f1af5a56bc231023144d1995f9713f288622a5fac78a55824ce5791a2562e1d017b30ab0b599fa440812db16af0cf945d9257faf66ee1f48d9b247cb9b8b7c43f8bbc1959e250d944ba96f1d2f6017d8b83980ec4ab3f52eeeadd3b46eddfc0150745f06c215198124d6643799ba166f5825f3f2fe4ff4dbcc98a90027088dddcd47e8555baccfe469333ac72c8b733a4969adc9c640c633d880f51f78c5a3e491bfcdf40263e384a1e18109fe34ba45e66af1d32c9ee873524c5acd5d94061152e7f3089afe6e8c35dc980de6a3adaf1bf371ded4f4f3099c505c685d08db26086ca314b5f142a977df96bfdd12d7c2674cd66fbc93b5e4befec9f90cbdbd65424b7a2a756af23c77e329a477ed8afc4bfd78c97c47a484ec60f391ce7a8fa976b4e138a2faca3825dffd62c706b75d66971b17200ff912ff7768ebb3921e705b582d7e418131cd5af63620e48f02cb4b8f6c55c5e07b2cd561c1edf76dac09d4322ff3ea949aa42db106d33252f45afaf0b9e339d5ff8c73d52823320af6c70eb826d1514b9d4f004ee890ebbef5b77d6fdecf56a5234c501a0abd38246191a1ef5184d89fc2c2f2ff863e2e4e1c409e6a26323c8ee968140570723fcf50ce391bfd9f52c674134a48e6a7349830e2136531f7e762341df774a698de5145e5c9a168b329dd21f2c3f400364eeb609ec6a3547b8ef1a47d1dce5b5e50485ac497b9415ea6a35ff7898cfa3cbae678e4b37c50a775a069fddd5d84931f5f80c77f6bd12a3f8da843d7c8a46c7a260f31a574f01eb0c9bba6c10d516a5fc5c1cff6ef1d0009469ab9046b1e0351a86b4b3faa9e486f86952810fcba2adce553f47aa6e52978d6038f79eff7bb5e3796322c7a2df67e4016e689a6cb2c3613220c0e04a06f7d331a089f4febd7302b50cfed8e688dbf709476014819841c6702ed733e047cf464396ef5bf38391d4ffc1aca22db9b37cdcdb170c5b4f51b2a4f6cb5fd71e84755100d3e783c0a2c563ea8f32d0dfcef47a241abf3480eb0c176fe2afbba8da4b6479d51323cd224528b8e4f766a2ff4f011f973b91479fbf1d0f15e939756de7276465f9fd759930a8d402e898c6dfd8f17b244e35a58d1c1f7cacca684eaa5e32c9eda766a6a36cc0f9cbaf149a61f3296449434310274564c189e4888a610f273328557cd2e7c3688281bcd5fda93be2a58b8cd642ac10e0ead96b9d414b362c20c0c39a1321766e29ef1f36f61701d5aefef6d80c535eee00ce70db2d0f148783bc586089233ed7188a42a1cc07f7645197f083b9f6a4e9cab281b0daa0ff13dee6d3868fe131e324d7cdf94ca5d6f900fd0b6ad2fa7ca58d14cf916c530d172fa627799e6471085495c6fe1aabd47e283e2679b6e14231e4d611afe5f488d96a28f948433cca579f36e08ca1132c70297b75cef74f685e32d7da1fb43ceb6b303f9faf742c818326e5c84c6d4e5c7da8a4bd0111728e3d8c75c2c29df3472a261fa2a8a8ef102a40a30fe9e6b4dd9012413800e49bb7bb2d83d23a4738441255a39946a7feed4f413bcf2c41798b46f9001e0b61d76d7fb20e25c2b067df3b6b3e4b30a1f1139f3c129e6614ab41c609f6a90cdc191982e6109c31eaeee196132b894d9fbeb45208580d82b6299acee3a4916f16858f4bd6778c22a250619304a849d0c8c47d59adb55c6637c30a41a4eeb276245e46713adf362090ca060ff0afec7710b673dfd844c7af0940547b8fba12ea3cff96a1c934efdde5eded84f82d2ce3fcb9a64f30bdcc9a8bed0dc0397eaa918a09bce93ec327385be756c35f856f0960dc3f3a0ae50593d32119b6823c9adef126d1885e76ccd6c0e29f5d5190287da3e6d678ccbf46a291926d7b34e5543383b506701cf06eb8b4222947752564f53329b4709024fa8529863953b98134d0e6670bec652a75449a28a0ffbcf30d83a492704182aa96fca299595a5fa963e0bdce00904bf68aed1072de1bb3a16d5fb038da134e95353693de0855df566ea974d51385dbece097f3b540ddf749116446e9ee11dd835d89cbee43171e817e9c8cd9a558330952ada17dff3b127888c5979acc60604a162c3792afa50ef777f8da7fa4749e592fe4ae1dd7e837d82aac1d6bc6af3c0bd6bbd5dd424f1cf8a0e6da91a36101b26e974b7b00eca70cf53a82cbfcd1c10ccc63de22e067b05ae031f3dd71cc5eca8661f6d048396cb9b62943722f362e2574e772a550b79b7819ef6ef628cb5ede6f3c971a6bc7a42e2da7705e1c95a6fd8d0fcbe09252c2fae46c349b87f7487a34aec214f169934930a90d67fa22d22d66d282f6a659a469f41ef632d00cb7456d34eff9b38f6a02421cdfcde851334bd061a1fe12f05cebb241eb67f4079720cf7c7ed7e05df968ad1698522464c1ab1922117f0c49de0554834bb459901ff3561df19b19ae5569c2208da078d17ad17f7748f333f931bb8554deb11da2810c8bf11b2928b2c0883517a78ec1bcdcabdbe61e48dccb8cc9373121acb79d26c83e890c476056e766d979ab57fb41265e28a66a45ccb5cb59831998c93d27b0f72d5d3de432d107acd200f867bd4a0116799fb25b5bc7f37f93e328da23f86b0df35ac5502a58d4c86c06a9153559792b78eb2994eaa5465ecfa7a12d474b58de25d8f722a3e1d821f4453873d582dc5e1e07dfdbdb73a62e2821dfeef048a99ef437c51243f7f9dce7a805dcbb9ccc0de7fec75d64e864ce35d5d1d64e0541a1f49493cb458815c1e0e57bafe8942c81a5f902a83b99ef3e49837da43e998f36efa35ab27eb93ceb890915cbf5dc3aa6f008a74af57947c94a7fee8e30b4d7f5be9fea270ee7aa9f0b359db8c46c47b6332fdf238f08193f21b9ecbb14ad99cd43dfab6f16c414ae3d8e1b0fbe95207441fa675f6e8ee865f3664340a03e5a790bca145980ef2e542f1ab45539ad71c72364efdd9931c88f95ac80acec5ba3310b27ad9a3383901e1bb15eff89500441c9d938179f474185af46a85c86371be7b2b4662a7181b24b894263ae0f08581532040bd79a644cc853f822aa30245d62b004e81805383d6c576ba3ff151e7e1e7676dd15d9df7003bc569e2e980a7b2b3a8f19332509169265a623ee6bf4f2cea1c075262e08830a2e25810397310e6130681df411cee31fd746fb77d700b6f61962a9f11c132330fa8f3be5c8ad11a7ebd0025ada6f8b9", 0xff4}], 0x1}}], 0x1, 0x9200000000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 13.756564755s ago: executing program 8 (id=3545): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 11.325404158s ago: executing program 8 (id=3550): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001580)=@urb_type_iso={0x0, {0xc}, 0x4f, 0xe4, &(0x7f0000000040)="506262757a23be2cd0ecef1aad9306b5c4b355", 0x13, 0x3, 0xf, 0x6b, 0x8000, 0x2, &(0x7f00000001c0)="41dbcaceedea62bacc3e5bf74b735ecaae7bd88b2fc524da644b574a7dcd582cd27d016104f8940812a159b2dbd400b8c3392ad2596d3ea7130c51aafb48022fe186793c2d2e09c55d93dc506ac8089b55b8037fc18f203569e6d443aa39e51ec833c98bbbc1ffe2c7a4f181a75e0fbff4c38439780a195a5b77f9ea0864bef1eeff95224e541d4aa7f2433b6c843d8553461449d8cbcea6b16c2d0364e5dd47b04956e46315f725449d270f4b324ffd6e8053d923da6360dc691d15b7ad033347cfd9ba0e043147db19a995f4", [{0x7fff, 0x1, 0x6}, {0x10001, 0xc8a, 0x2}, {0x1ff, 0x7, 0x3}, {0xb0f3, 0x3, 0x6}, {0x81, 0x3, 0x1}, {0xffff058e, 0x7, 0x4}, {0xec, 0x0, 0x2}, {0x3, 0x6, 0x9}, {0x101, 0x100, 0xd0}, {0xe90, 0xffff8001}, {0x9, 0x7, 0x3ff}, {0x8, 0x7, 0x200}, {0x300000, 0x7, 0x345}, {0x1, 0xa7f4, 0xfffff801}, {0x4, 0x916, 0x3}, {0x9, 0x5, 0x9}, {0x81, 0x3, 0x6}, {0x2, 0x2, 0x8}, {0xc597, 0x8, 0xe}, {0xd4, 0x3, 0x9}, {0x47, 0x5, 0x6}, {0x9, 0x3, 0x7fffffff}, {0x2, 0x9d9, 0x4}, {0x6, 0x2, 0x3}, {0x2566, 0x8, 0x3ff}, {0x0, 0xfffffff9, 0x40}, {0xfffffff6, 0xeb9, 0x80000000}, {0x0, 0x8001, 0x6}, {0x5, 0x1, 0x5}, {0x400, 0xfffffffc, 0x4}, {0x7, 0x3, 0x80}, {0x9, 0x100, 0x4}, {0x200, 0x0, 0x6}, {0x9, 0x5, 0x1}, {0x1, 0x10, 0x6}, {0x60000, 0x6, 0xa}, {0xfffffffc, 0x5, 0xffffffff}, {0x3, 0x9, 0x5}, {0x3, 0xb2, 0x1}, {0x0, 0x2, 0x5}, {0x3ff, 0x5, 0x70000000}, {0x2, 0xd877, 0x10001}, {0xfffffff9, 0x0, 0x8}, {0x4e, 0xffff}, {0x7f800000, 0xc}, {0x8, 0x8, 0x6}, {0x8, 0x0, 0x40}, {0x5, 0x9000000}, {0xffffff00, 0x2, 0x2}, {0x3, 0x2, 0x8}, {0x800, 0xa, 0xfffffffa}, {0x10000, 0x5a7, 0x5}, {0x1, 0x8, 0x1}, {0x7, 0x9}, {0xff, 0x1, 0x705}, {0x96c, 0x7, 0xd}, {0x3, 0x8, 0x7f}, {0x7, 0x9e, 0x2}, {0x7, 0x80000001, 0xfffffff7}, {0x7, 0x200, 0xffffff2a}, {0xd71e, 0x5, 0x2}, {0x49, 0xf214, 0x1}, {0x9d, 0x698}, {0xac9, 0x5268c4d7, 0x8a}, {0x401, 0x1, 0x885}, {0x400, 0x4, 0xfffffff8}, {0x8, 0x6, 0x5}, {0x2000, 0x9, 0x8}, {0x5, 0x4, 0x7fffffff}, {0x1ff, 0x100, 0x7}, {0x1000, 0xf, 0x5}, {0x7, 0x1, 0x6}, {0x1c12, 0x1ff}, {0x4, 0x3, 0xa}, {0xe0000000, 0x6, 0xf7}, {0x3, 0x1, 0xfffffffb}, {0x9, 0x800, 0xa}, {0x2, 0x3, 0xffff5f2b}, {0xa1de, 0x7, 0x9}, {0x9, 0x4, 0x3}, {0x5, 0x2, 0x6}, {0x1e, 0xa555}, {0x1, 0x679f, 0x101}, {0xffff8001, 0x4, 0xc77c}, {0x80000000, 0x6, 0x1}, {0x7, 0x7, 0xe}, {0x7fff, 0x1, 0x1ff}, {0xfffff9a2, 0x7f, 0x48}, {0x10, 0x0, 0x3688b7c7}, {0xf, 0x3, 0x5578}, {0x8, 0x1ff, 0x4}, {0x8, 0x3, 0x7}, {0x3, 0x3, 0xab}, {0xc, 0x8, 0xb027}, {0x5, 0x200, 0x9}, {0xfff, 0x3, 0x6}, {0x5, 0xd412, 0x8}, {0x1ff, 0x2, 0x9}, {0x7, 0x255c, 0xffff8000}, {0x0, 0xe, 0x3}, {0xb, 0xb, 0x7fffffff}, {0x8, 0x0, 0x200}, {0x5, 0x40, 0x8efc}, {0xffffffff, 0x3, 0x10}, {0xf, 0x4, 0x7}, {0x7fff, 0xffff, 0x2}, {0x1000, 0x6, 0x7}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b0109021b00010100c00009040000020701010009050102"], 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000008982, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000fc0)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000001040)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4, &(0x7f0000001000), 0x0, 0x784, 0x40, 0x44, 0x2}) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r3, 0x0, 0x2000, 0x1000000, 0x0, 0x10}]) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x1, 0x0, r6}) syz_usb_disconnect(0xffffffffffffffff) close(0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 10.802601712s ago: executing program 6 (id=3551): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x268280, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af0", 0x30, 0x840, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) mknod(0x0, 0x8001420, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r2, &(0x7f00000011c0), 0xfffffffffffffffd) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000100), 0x4003) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2200001a0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="000000000200"/28], 0x50) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x5}) 10.332991452s ago: executing program 6 (id=3552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="20004dd70008010400000000000000000073797a3100"/32], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20048880) r1 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/image_size', 0x200, 0x100) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000016c0)=[{0xa48, 0xc0, 0x38, 0x105}]}) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, 0x0) 9.065858223s ago: executing program 7 (id=3564): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x29, 0x10, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xcb, 0x9d, 0xce, 0x20, 0x3b53, 0xa0d3, 0xe3d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f2, 0x2, 0x70bd26, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004c) splice(r4, 0x0, r0, 0x0, 0x25a5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 8.647813876s ago: executing program 1 (id=3555): getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/76, 0x4c) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001b80)=""/4096, 0x1000, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) 8.575826789s ago: executing program 6 (id=3556): unshare(0x6a040000) r0 = socket(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000004a80)=""/4083, 0xff3}], 0x1}}], 0x1, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r5, 0x4602, &(0x7f0000000080)) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000034c0)="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", 0xff4}], 0x1}}], 0x1, 0x9200000000000004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$media(0x0, 0x9, 0x402) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 8.574556714s ago: executing program 8 (id=3557): getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/76, 0x4c) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001b80)=""/4096, 0x1000, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) 7.397874811s ago: executing program 1 (id=3559): syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x208000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newtaction={0x18, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$vim2m(0xffffff9c, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0x980915, 0x8}) 6.567311536s ago: executing program 6 (id=3560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) 5.890491768s ago: executing program 7 (id=3561): ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x400, 0x34}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000085000000a000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33}}) 5.621242281s ago: executing program 9 (id=3562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xfefffffb, 0xfffffffc, 0x0, [{0xc, 0xfc, 0x8, '\x00', 0xb4}, {0x83, 0x9, 0x8, '\x00', 0x4b}, {0xf9, 0xe, 0x47, '\x00', 0x7f}, {0x0, 0x5, 0x8, '\x00', 0x8}, {0x28, 0xd, 0x8}, {0x2, 0x5, 0x6, '\x00', 0xfc}, {0x6, 0xe, 0x4b, '\x00', 0x6}, {0x5, 0x90, 0x6, '\x00', 0xe9}, {0xd, 0xf8, 0xa7, '\x00', 0x1}, {0x9, 0xcc, 0x14, '\x00', 0x5}, {0x1, 0x0, 0xb, '\x00', 0x8}, {0x0, 0x3, 0x2, '\x00', 0x7}, {0x1, 0xca, 0x80, '\x00', 0xa}, {0x7, 0xf1, 0x6}, {0x8, 0x4, 0x0, '\x00', 0xfd}, {0x6, 0x0, 0x4, '\x00', 0x9}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xee, 0x3, 0x4, '\x00', 0xff}, {0x11, 0x41, 0xf, '\x00', 0xfe}, {0x9, 0x3, 0x54, '\x00', 0x4}, {0x1, 0x3, 0x6, '\x00', 0x4}, {0x9, 0x40, 0x7}, {0xc0, 0x0, 0x7, '\x00', 0x7}, {0x5, 0x5, 0xfa, '\x00', 0x40}]}}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x9) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xd4, 0xdc, 0x47, 0x40, 0x2040, 0x7050, 0xeab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xfb, 0x5, 0x70, 0x2}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r5 = eventfd(0x1) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000b, 0x11, r6, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x8, 0x0, r5}) 4.541248003s ago: executing program 1 (id=3563): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="001b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.70388873s ago: executing program 7 (id=3565): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3.577195137s ago: executing program 7 (id=3566): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r4, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 3.224870565s ago: executing program 9 (id=3567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xfffffffe, 0x1, 0xd, 0x9, 0x800, 0x1, 0x7, 0x1, 0x8001, 0xffffffff, 0x14, 0x13, 0x10, 0x10, 0x10000ff, 0x126}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.016261979s ago: executing program 6 (id=3568): openat$fb0(0xffffffffffffff9c, 0x0, 0x418c00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) io_destroy(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 2.750013502s ago: executing program 9 (id=3569): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) socket$inet_udp(0x2, 0x2, 0x0) inotify_init() openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x200000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r5, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.542475702s ago: executing program 1 (id=3570): getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/76, 0x4c) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001b80)=""/4096, 0x1000, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) 2.462566486s ago: executing program 9 (id=3571): getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/76, 0x4c) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001b80)=""/4096, 0x1000, 0x10001, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x2}, 0x8000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) 2.002836391s ago: executing program 7 (id=3572): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.618778332s ago: executing program 6 (id=3573): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f00000006c0)={0x0, 0xb, 0x0, 0x3, 0x40}, 0xfcf0, 0x0, 0x8b0, 0x48000000, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f00000000c0), 0x1, 0x20040) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x5c}}, 0x4004000) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.463232359s ago: executing program 9 (id=3574): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x13c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x10000, 0x14000, 0x8}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f0000000000), 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040004) 1.331999119s ago: executing program 1 (id=3575): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x4, &(0x7f0000000140)={[0x4bbb, 0xcf]}, 0x8) epoll_create1(0x0) syz_emit_ethernet(0x4a, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x14, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af3"}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40087446, &(0x7f0000000340)={0x7, &(0x7f0000000200)=[{0x2000, 0x3, 0x8f, 0x2}, {0x60, 0x6, 0x5, 0x8}, {0x7, 0xd, 0xd, 0x3}, {0xfff, 0x58, 0x2, 0x7fff}, {0x4, 0x0, 0xc3, 0xd}, {0xfffa, 0x9, 0x5, 0xfffffff9}, {0xd, 0x3, 0xfa, 0x17b}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000380)='\x00', 0x3) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x80) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 269.12625ms ago: executing program 8 (id=3576): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 196.286781ms ago: executing program 1 (id=3577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) close(r0) r2 = gettid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r5 = syz_open_procfs(r2, &(0x7f0000000300)='net/snmp\x00') r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x3751, 0xfffffffffffffffd) openat$fuse(0xffffff9c, &(0x7f0000001640), 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300)={r6, r6, r6}, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000400007012fbd7000fedbdf25037c00000400c280100001800c001080050004"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) pread64(r5, &(0x7f0000000600)=""/4099, 0x1003, 0x110) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="d3197d91f7a552128c477307c8d38e0d8838f3329b952c6ba3f59eabced8613ec9ba00000000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000007c0)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342", {0x0, 0xffc}}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2e, 0x49}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x74}}, 0x0) 162.885569ms ago: executing program 9 (id=3578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) close(0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) 132.294638ms ago: executing program 8 (id=3579): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) link(0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000003c0)={0x8005, r2, 0x1}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) link(0x0, &(0x7f00000001c0)='./file0\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 0s ago: executing program 7 (id=3580): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="001b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 890.289588][ T5937] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 890.351495][T16130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 890.453735][ T5937] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 890.466397][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.475795][ T5937] usb 2-1: Product: syz [ 890.529760][ T5937] usb 2-1: Manufacturer: syz [ 890.535004][ T5937] usb 2-1: SerialNumber: syz [ 890.549020][ T5937] usb 2-1: config 0 descriptor?? [ 890.769528][ T797] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 890.777854][ T5937] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 890.939496][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 891.137581][ T797] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 891.154513][ T797] usb 4-1: config 0 has no interface number 0 [ 891.160774][ T797] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 891.179495][ T797] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 891.199481][ T797] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 891.227707][ T797] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 891.256040][ T797] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 891.276755][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.299148][ T797] usb 4-1: config 0 descriptor?? [ 891.327119][ T797] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 891.454689][T16136] syzkaller0: entered promiscuous mode [ 891.460634][T16136] syzkaller0: entered allmulticast mode [ 891.505131][T16138] syz_tun: entered allmulticast mode [ 891.533808][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.560561][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.563119][T16134] IPv6: NLM_F_CREATE should be specified when creating new route [ 891.595395][T16138] syz_tun: left allmulticast mode [ 891.644805][ T1662] usb 4-1: USB disconnect, device number 72 [ 891.663987][ T1662] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 891.814660][T16142] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 892.356958][T16146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.367807][T16146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.378587][ T5937] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 892.402268][ T5937] usb 2-1: USB disconnect, device number 66 [ 892.592082][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 892.592095][ T29] audit: type=1326 audit(1772850493.469:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.632369][ T29] audit: type=1326 audit(1772850493.469:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.655454][ T29] audit: type=1326 audit(1772850493.469:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.687672][ T29] audit: type=1326 audit(1772850493.469:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.739769][ T29] audit: type=1326 audit(1772850493.469:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.764393][ T29] audit: type=1326 audit(1772850493.469:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.787208][ T29] audit: type=1326 audit(1772850493.469:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.824351][ T29] audit: type=1326 audit(1772850493.469:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.848811][ T29] audit: type=1326 audit(1772850493.469:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 892.873089][ T29] audit: type=1326 audit(1772850493.469:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16148 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 893.444661][ T5907] gspca_zc3xx: reg_w_i err -71 [ 893.479594][ T5907] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 893.492566][ T5907] usb 6-1: USB disconnect, device number 52 [ 896.050084][ T797] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 896.308760][T16188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 896.358345][ T797] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 896.377494][ T797] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 896.397331][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.420331][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.431319][ T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.446449][ T797] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 896.456400][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.466664][ T797] usb 6-1: config 0 descriptor?? [ 896.568355][T16192] lo: entered allmulticast mode [ 896.829525][ T1662] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 896.947604][ T797] input: HID 28bd:0909 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.0018/input/input52 [ 897.014192][T16200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.023356][T16200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.031262][ T1662] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 897.040429][ T1662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.048414][ T1662] usb 2-1: Product: syz [ 897.059724][ T1662] usb 2-1: Manufacturer: syz [ 897.095750][ T1662] usb 2-1: SerialNumber: syz [ 897.475862][ T797] uclogic 0003:28BD:0909.0018: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0 [ 897.508541][ T797] usb 6-1: USB disconnect, device number 53 [ 898.116006][ T1662] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 898.159785][ T1662] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 898.180723][ T1662] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 898.205577][ T1662] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 898.227529][ T1662] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 898.335478][T16208] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 898.358323][T16202] fido_id[16202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 898.670232][ T1662] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 899.047523][T16214] lo: left allmulticast mode [ 900.070113][ T797] usb 2-1: USB disconnect, device number 67 [ 900.238094][T16226] tipc: Enabled bearer , priority 0 [ 900.286670][T16226] syzkaller0: entered promiscuous mode [ 900.311104][T16226] syzkaller0: entered allmulticast mode [ 900.409082][T16226] tipc: Resetting bearer [ 900.443851][T16225] tipc: Resetting bearer [ 900.870049][T16225] tipc: Disabling bearer [ 900.959518][ T5822] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 901.119523][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 901.277601][T16233] syzkaller0: entered promiscuous mode [ 901.283766][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.287219][T16233] syzkaller0: entered allmulticast mode [ 901.330380][ T5822] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 901.376660][ T29] audit: type=1326 audit(1772850502.249:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 901.511108][ T5822] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 901.537896][ T29] audit: type=1326 audit(1772850502.249:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 901.560517][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.609715][ T5822] usb 4-1: Product: syz [ 901.613896][ T5822] usb 4-1: Manufacturer: syz [ 901.618466][ T5822] usb 4-1: SerialNumber: syz [ 901.639629][ T29] audit: type=1326 audit(1772850502.289:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 901.672103][ T5822] usb 4-1: config 0 descriptor?? [ 901.691631][ T29] audit: type=1326 audit(1772850502.289:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 901.719662][ T1662] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 901.765513][ T29] audit: type=1326 audit(1772850502.299:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 901.824144][ T29] audit: type=1326 audit(1772850502.299:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 901.868712][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 902.021951][ T29] audit: type=1326 audit(1772850502.299:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 902.022010][ T1662] usb 6-1: Using ep0 maxpacket: 8 [ 902.022056][ T29] audit: type=1326 audit(1772850502.299:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 902.111855][ T29] audit: type=1326 audit(1772850502.299:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 902.185599][ T29] audit: type=1326 audit(1772850502.309:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.5.2868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 902.289379][ T1662] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 902.331273][ T1662] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 902.459614][ T1662] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 902.469296][ T1662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.477509][ T1662] usb 6-1: Product: syz [ 902.482011][ T1662] usb 6-1: Manufacturer: syz [ 902.486635][ T1662] usb 6-1: SerialNumber: syz [ 902.497837][ T1662] usb 6-1: config 0 descriptor?? [ 902.522585][ T1662] powermate 6-1:0.0: probe with driver powermate failed with error -22 [ 903.481153][T16255] syzkaller1: entered promiscuous mode [ 903.509760][T16255] syzkaller1: entered allmulticast mode [ 904.149797][ T5937] usb 4-1: USB disconnect, device number 73 [ 905.326593][ T1662] usb 6-1: USB disconnect, device number 54 [ 905.345768][T16274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 905.945250][ T5937] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 906.339943][ T5937] usb 4-1: Using ep0 maxpacket: 16 [ 906.457877][ T5937] usb 4-1: config 0 has no interfaces? [ 906.603924][ T5937] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 906.697299][ T5937] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 906.735000][ T5937] usb 4-1: Manufacturer: syz [ 906.747287][ T5937] usb 4-1: config 0 descriptor?? [ 907.153664][T16292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2880'. [ 907.284384][T16294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2882'. [ 907.330572][T16284] netlink: 'syz.5.2878': attribute type 21 has an invalid length. [ 908.427315][T16305] usb usb8: usbfs: process 16305 (syz.6.2885) did not claim interface 0 before use [ 908.834934][T16312] tipc: Enabled bearer , priority 0 [ 908.885686][T16312] syzkaller0: entered promiscuous mode [ 908.898219][T16312] syzkaller0: entered allmulticast mode [ 908.939236][T16312] tipc: Resetting bearer [ 909.091516][T16311] tipc: Resetting bearer [ 909.177948][T16311] tipc: Disabling bearer [ 909.205082][T16318] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 909.214299][T16318] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 909.346929][T16320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.374639][T16320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.899820][T13524] usb 4-1: USB disconnect, device number 74 [ 910.644563][T16336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.916558][T16336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.214943][T16340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.289028][T16340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.539565][T13524] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 911.691569][T13524] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.702879][T13524] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 911.714773][T13524] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.738336][T13524] usb 2-1: config 0 descriptor?? [ 911.747070][T13524] pwc: Askey VC010 type 2 USB webcam detected. [ 911.815712][T16344] usb usb8: usbfs: process 16344 (syz.5.2898) did not claim interface 0 before use [ 912.170589][T13524] pwc: recv_control_msg error -32 req 02 val 2b00 [ 912.370727][T13524] pwc: recv_control_msg error -32 req 02 val 2700 [ 912.378941][T13524] pwc: recv_control_msg error -32 req 02 val 2c00 [ 912.387456][T16350] netlink: 'syz.6.2897': attribute type 21 has an invalid length. [ 912.412264][T13524] pwc: recv_control_msg error -32 req 04 val 1000 [ 912.421638][T13524] pwc: recv_control_msg error -32 req 04 val 1300 [ 912.428640][T13524] pwc: recv_control_msg error -32 req 04 val 1400 [ 912.440697][T13524] pwc: recv_control_msg error -32 req 02 val 2000 [ 912.457232][T13524] pwc: recv_control_msg error -32 req 02 val 2100 [ 912.540156][T16356] input: syz1 as /devices/virtual/input/input53 [ 912.613095][T13524] pwc: recv_control_msg error -32 req 04 val 1500 [ 912.630262][ T5937] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 912.659128][T13524] pwc: recv_control_msg error -32 req 02 val 2500 [ 912.673605][T13524] pwc: recv_control_msg error -32 req 02 val 2400 [ 912.700524][T13524] pwc: recv_control_msg error -32 req 02 val 2600 [ 912.795734][ T5937] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.929940][T13524] pwc: recv_control_msg error -71 req 02 val 2800 [ 912.949510][ T5937] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 912.963941][T13524] pwc: recv_control_msg error -71 req 04 val 1100 [ 912.971404][T13524] pwc: recv_control_msg error -71 req 04 val 1200 [ 912.983754][T13524] pwc: Registered as video103. [ 912.990374][T13524] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 913.008645][T13524] usb 2-1: USB disconnect, device number 68 [ 913.091920][ T5937] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 913.225277][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 913.283870][ T5937] usb 6-1: SerialNumber: syz [ 913.526378][ T5937] usb 6-1: 0:2 : does not exist [ 913.535541][ T5937] usb 6-1: unit 255 not found! [ 913.551519][ T5937] usb 6-1: 5:0: cannot get min/max values for control 16 (id 5) [ 913.630206][ T5937] usb 6-1: 5:0: cannot get min/max values for control 17 (id 5) [ 913.751489][ T5937] usb 6-1: USB disconnect, device number 55 [ 913.795074][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.220628][ T5937] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 914.382033][T16374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.399042][T16374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.400026][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 914.429775][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 914.429821][ T5937] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 914.429846][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.439228][ T5937] usb 2-1: config 0 descriptor?? [ 914.445324][ T5937] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 915.146620][T16382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2901'. [ 915.802758][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2906'. [ 915.978295][T16390] tipc: Enabled bearer , priority 0 [ 915.989738][T16390] syzkaller0: entered promiscuous mode [ 915.995234][T16390] syzkaller0: entered allmulticast mode [ 916.022943][T16395] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2911'. [ 916.043734][T16390] tipc: Resetting bearer [ 916.058936][T16395] syzkaller0: entered promiscuous mode [ 916.065315][T16395] syzkaller0: entered allmulticast mode [ 916.079195][T16389] tipc: Resetting bearer [ 916.100471][T16398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.110914][T16398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.138079][T16389] tipc: Disabling bearer [ 916.932867][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.963778][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.058222][ T797] usb 2-1: USB disconnect, device number 69 [ 919.028203][T16426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 919.056304][T16424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.463484][T16445] tipc: Enabled bearer , priority 0 [ 920.779823][T16445] syzkaller0: entered promiscuous mode [ 920.785327][T16445] syzkaller0: entered allmulticast mode [ 920.955290][T16445] tipc: Resetting bearer [ 920.981998][T16444] tipc: Resetting bearer [ 921.663078][T16444] tipc: Disabling bearer [ 921.807221][ T5907] tipc: Node number set to 1596356262 [ 921.863148][T16457] syzkaller0: entered promiscuous mode [ 921.879259][T16457] syzkaller0: entered allmulticast mode [ 922.169766][T13524] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 922.339992][T13524] usb 6-1: Using ep0 maxpacket: 32 [ 922.359349][T13524] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 922.381622][T13524] usb 6-1: config 0 has no interface number 0 [ 922.397535][T13524] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 922.407194][T13524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.429315][T13524] usb 6-1: Product: syz [ 922.447350][T13524] usb 6-1: Manufacturer: syz [ 922.462125][T13524] usb 6-1: SerialNumber: syz [ 922.492849][T13524] usb 6-1: config 0 descriptor?? [ 922.971414][T13524] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 923.009754][T13524] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 925.587930][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 925.615163][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2943'. [ 925.630997][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2943'. [ 925.687375][T16490] syzkaller0: entered promiscuous mode [ 925.693584][T16490] syzkaller0: entered allmulticast mode [ 925.823033][T16490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.860789][T16490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.131064][T13524] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000000: -71 [ 926.147275][T13524] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 926.225228][T13524] usb 6-1: USB disconnect, device number 56 [ 928.002645][T16521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.020131][T16521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.166826][T16524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.198439][T16524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.378410][T16540] syzkaller0: entered promiscuous mode [ 929.402385][T16540] syzkaller0: entered allmulticast mode [ 929.629559][ T5907] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 929.782370][ T1225] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 930.019796][ T5907] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 930.049151][ T5907] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 930.098562][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 930.108000][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 930.138421][ T1225] usb 6-1: Using ep0 maxpacket: 16 [ 930.166741][ T1225] usb 6-1: config 0 has no interfaces? [ 930.399531][ T5907] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 930.440934][ T1225] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 930.441656][ T5907] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 930.465274][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 930.624360][ T5907] usb 2-1: Product: syz [ 930.637051][ T5907] usb 2-1: Manufacturer: syz [ 930.651385][ T1225] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 930.698634][ T5907] cdc_wdm 2-1:1.0: skipping garbage [ 930.702239][ T1225] usb 6-1: Manufacturer: syz [ 930.713952][ T1225] usb 6-1: config 0 descriptor?? [ 930.754252][ T5907] cdc_wdm 2-1:1.0: skipping garbage [ 930.779245][ T5907] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 930.803242][ T5907] cdc_wdm 2-1:1.0: Unknown control protocol [ 931.327714][ T5907] usb 2-1: USB disconnect, device number 70 [ 931.534118][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.540611][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.568100][T16557] netlink: 'syz.3.2951': attribute type 10 has an invalid length. [ 931.625189][T16557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 931.645002][T16562] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 931.682971][T16562] syzkaller0: entered promiscuous mode [ 931.695492][T16562] syzkaller0: entered allmulticast mode [ 932.189546][ T1225] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 932.343237][ T1225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.353630][ T1225] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 932.454426][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.474550][ T1225] usb 2-1: config 0 descriptor?? [ 932.483569][ T1225] pwc: Askey VC010 type 2 USB webcam detected. [ 932.682955][T16581] syzkaller0: entered promiscuous mode [ 932.688568][T16581] syzkaller0: entered allmulticast mode [ 932.700308][ T797] usb 6-1: USB disconnect, device number 57 [ 932.927042][ T1225] pwc: recv_control_msg error -32 req 02 val 2b00 [ 932.966130][ T1225] pwc: recv_control_msg error -32 req 02 val 2700 [ 932.981829][ T1225] pwc: recv_control_msg error -32 req 02 val 2c00 [ 932.997091][ T1225] pwc: recv_control_msg error -32 req 04 val 1000 [ 933.012177][ T1225] pwc: recv_control_msg error -32 req 04 val 1300 [ 933.028786][ T1225] pwc: recv_control_msg error -32 req 04 val 1400 [ 933.042362][ T1225] pwc: recv_control_msg error -32 req 02 val 2000 [ 933.067831][ T1225] pwc: recv_control_msg error -32 req 02 val 2100 [ 933.086416][ T1225] pwc: recv_control_msg error -32 req 04 val 1500 [ 933.269491][ T797] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 933.280249][ T1225] pwc: recv_control_msg error -32 req 02 val 2500 [ 933.287674][ T1225] pwc: recv_control_msg error -32 req 02 val 2400 [ 933.295312][ T1225] pwc: recv_control_msg error -32 req 02 val 2600 [ 933.710097][ T1225] pwc: recv_control_msg error -71 req 02 val 2800 [ 933.718010][ T1225] pwc: recv_control_msg error -71 req 04 val 1100 [ 933.725285][ T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.736953][ T797] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 933.748139][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.756379][ T1225] pwc: recv_control_msg error -71 req 04 val 1200 [ 933.765637][ T1225] pwc: Registered as video103. [ 933.780331][ T797] usb 6-1: config 0 descriptor?? [ 933.789935][ T1225] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 933.802738][ T797] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 933.815067][ T1225] usb 2-1: USB disconnect, device number 71 [ 934.154851][T16583] vivid-001: disconnect [ 935.413066][T16611] ip6gre1: entered promiscuous mode [ 935.418290][T16611] ip6gre1: entered allmulticast mode [ 935.435433][T16611] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 935.484637][T16613] netlink: 'syz.2.2969': attribute type 2 has an invalid length. [ 935.844083][T16583] vivid-001: reconnect [ 935.864803][ T1225] usb 6-1: USB disconnect, device number 58 [ 936.027716][T16622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.043616][T16622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 936.229555][ T5907] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 936.379544][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 936.389300][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 936.402535][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 936.410396][ T1156] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.414660][ T5822] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 936.430611][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 936.467344][ T1156] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.475994][ T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.479170][ T5907] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.639344][ T5907] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 936.728615][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.759998][ T1225] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.827175][ T5907] usb 2-1: Product: syz [ 936.871781][ T1225] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.911679][ T5907] usb 2-1: Manufacturer: syz [ 936.919565][ T5907] usb 2-1: SerialNumber: syz [ 936.940253][ T5907] usb 2-1: config 0 descriptor?? [ 936.963949][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 937.010463][ T5907] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input56 [ 937.091410][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.101896][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.362787][ T5907] rc_core: IR keymap rc-imon-pad not found [ 937.369995][ T5907] Registered IR keymap rc-empty [ 937.375020][ T5907] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 937.385542][ T5907] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 937.411228][ T5907] rc rc0: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 937.423576][ T5907] input: iMON Remote (15c2:003b) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57 [ 937.442707][ T5907] imon 2-1:0.0: iMON device (15c2:003b, intf0) on usb<2:72> initialized [ 937.996257][T16632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.005034][T16632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.017485][T16632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.027031][T16632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.838646][T16635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.854333][T16635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.703399][ T1225] usb 2-1: USB disconnect, device number 72 [ 940.729674][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 941.983339][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 941.983357][ T29] audit: type=1800 audit(1772850542.859:542): pid=16693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2984" name="bus" dev="tmpfs" ino=3081 res=0 errno=0 [ 942.404299][T16696] ALSA: mixer_oss: invalid OSS volume 'batad' [ 942.461859][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.480190][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.892151][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.919953][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.953533][T16706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.967865][T16706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.519512][ T5912] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 943.950182][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.960602][ T5912] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 943.970409][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.356721][ T5912] usb 2-1: config 0 descriptor?? [ 944.373770][ T5912] pwc: Askey VC010 type 2 USB webcam detected. [ 944.809744][ T5912] pwc: recv_control_msg error -32 req 02 val 2b00 [ 944.848897][ T5912] pwc: recv_control_msg error -32 req 02 val 2700 [ 944.858897][ T5912] pwc: recv_control_msg error -32 req 02 val 2c00 [ 944.890312][ T5912] pwc: recv_control_msg error -32 req 04 val 1000 [ 944.900843][ T5912] pwc: recv_control_msg error -32 req 04 val 1300 [ 944.907999][ T5912] pwc: recv_control_msg error -32 req 04 val 1400 [ 944.917833][ T5912] pwc: recv_control_msg error -32 req 02 val 2000 [ 944.925018][ T5912] pwc: recv_control_msg error -32 req 02 val 2100 [ 944.932135][ T5912] pwc: recv_control_msg error -32 req 04 val 1500 [ 944.939236][ T5912] pwc: recv_control_msg error -32 req 02 val 2500 [ 944.958685][ T5912] pwc: recv_control_msg error -32 req 02 val 2400 [ 944.966118][ T5912] pwc: recv_control_msg error -32 req 02 val 2600 [ 945.508300][ T5912] pwc: recv_control_msg error -71 req 02 val 2800 [ 945.534771][ T5912] pwc: recv_control_msg error -71 req 04 val 1100 [ 945.621453][ T5912] pwc: recv_control_msg error -71 req 04 val 1200 [ 945.761460][ T5912] pwc: Registered as video103. [ 945.768403][ T5912] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58 [ 945.822010][ T5912] usb 2-1: USB disconnect, device number 73 [ 946.039519][ T5822] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 946.164000][T16757] fuse: Bad value for 'user_id' [ 946.169601][T16757] fuse: Bad value for 'user_id' [ 946.200952][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.218546][ T5822] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 946.259496][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.282509][ T5822] usb 4-1: config 0 descriptor?? [ 946.319207][ T5822] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 946.997769][T16753] ip6tnl0: Caught tx_queue_len zero misconfig [ 947.634134][T16778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.665492][T16778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.809590][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 948.986904][ T5937] usb 4-1: USB disconnect, device number 75 [ 949.999535][ T1662] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 950.211282][ T1662] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 950.252980][ T1662] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 950.265179][ T1662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.286675][ T1662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.305644][ T1662] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 950.332430][ T1662] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 950.345114][ T1662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.375083][ T1662] usb 4-1: config 0 descriptor?? [ 951.313071][ T1662] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0019/input/input59 [ 951.420254][ T1662] uclogic 0003:28BD:0909.0019: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0 [ 951.623754][ T1662] usb 4-1: USB disconnect, device number 76 [ 952.979269][T16818] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 952.986707][T16818] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 953.336684][T16825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 953.736981][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 954.055415][T16829] bridge_slave_0: left promiscuous mode [ 954.093452][T16824] fuse: Bad value for 'user_id' [ 954.098757][T16824] fuse: Bad value for 'user_id' [ 954.118409][T16829] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.183153][T16829] bridge_slave_1: left allmulticast mode [ 954.188845][T16829] bridge_slave_1: left promiscuous mode [ 954.256499][T16829] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.533623][T16829] team0: Port device team_slave_0 removed [ 954.552910][T16829] team0: Port device team_slave_1 removed [ 954.570797][T16829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.588420][T16829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.620806][T16829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.628271][T16829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.065757][T16829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 955.531663][ T1225] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 956.209567][ T1225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.229983][ T1225] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 956.269618][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.316489][ T1225] usb 2-1: config 0 descriptor?? [ 956.365399][ T1225] pwc: Askey VC010 type 2 USB webcam detected. [ 956.780216][ T1225] pwc: recv_control_msg error -32 req 02 val 2b00 [ 956.806952][ T1225] pwc: recv_control_msg error -32 req 02 val 2700 [ 956.859331][ T1225] pwc: recv_control_msg error -32 req 02 val 2c00 [ 956.960644][ T1225] pwc: recv_control_msg error -32 req 04 val 1000 [ 957.012483][ T1225] pwc: recv_control_msg error -32 req 04 val 1300 [ 957.033127][ T1225] pwc: recv_control_msg error -32 req 04 val 1400 [ 957.043788][ T1225] pwc: recv_control_msg error -32 req 02 val 2000 [ 957.055099][ T1225] pwc: recv_control_msg error -32 req 02 val 2100 [ 957.066630][ T1225] pwc: recv_control_msg error -32 req 04 val 1500 [ 957.184783][ T1225] pwc: recv_control_msg error -32 req 02 val 2500 [ 957.196736][ T1225] pwc: recv_control_msg error -32 req 02 val 2400 [ 957.204274][ T1225] pwc: recv_control_msg error -32 req 02 val 2600 [ 957.660095][ T1225] pwc: recv_control_msg error -71 req 02 val 2800 [ 957.694837][ T1225] pwc: recv_control_msg error -71 req 04 val 1100 [ 957.710620][ T1225] pwc: recv_control_msg error -71 req 04 val 1200 [ 957.723642][ T1225] pwc: Registered as video103. [ 957.736867][ T1225] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input60 [ 957.789774][ T1225] usb 2-1: USB disconnect, device number 74 [ 958.809657][T16895] syzkaller0: entered promiscuous mode [ 958.823482][T16895] syzkaller0: entered allmulticast mode [ 960.211349][T16897] fuse: Bad value for 'user_id' [ 960.243954][T16897] fuse: Bad value for 'user_id' [ 960.309996][T13524] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 960.632434][T13524] usb 4-1: Using ep0 maxpacket: 8 [ 960.639081][T13524] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 960.652368][T13524] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 960.662711][T13524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.733234][T16921] netlink: 'syz.5.3042': attribute type 2 has an invalid length. [ 960.747905][T16921] ‚#{6c: entered promiscuous mode [ 960.771600][T16921] netlink: 'syz.5.3042': attribute type 2 has an invalid length. [ 960.789615][T16921] ‚#{6c: left promiscuous mode [ 960.834037][T13524] usb 4-1: Product: syz [ 960.838213][T13524] usb 4-1: Manufacturer: syz [ 960.849811][T13524] usb 4-1: SerialNumber: syz [ 961.173990][T13524] usb 4-1: bad CDC descriptors [ 961.183016][T13524] usb 4-1: USB disconnect, device number 77 [ 962.779360][T16950] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 963.615685][T16964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.879611][T16964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.920458][T16964] input: syz0 as /devices/virtual/input/input61 [ 964.375255][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.391468][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.706204][ T29] audit: type=1800 audit(1772850565.509:543): pid=16973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3054" name="bus" dev="tmpfs" ino=3308 res=0 errno=0 [ 965.232478][T16976] tipc: Enabled bearer , priority 0 [ 965.309859][T16980] syzkaller0: entered promiscuous mode [ 965.334776][T16980] syzkaller0: entered allmulticast mode [ 965.449634][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 966.109290][T16975] tipc: Resetting bearer [ 966.352700][T16975] tipc: Disabling bearer [ 966.378766][T16985] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3056'. [ 966.804658][ T1225] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 967.160803][ T1225] usb 2-1: Using ep0 maxpacket: 32 [ 967.177529][ T1225] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 967.187591][ T1225] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 967.208921][ T1225] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 967.370352][ T1225] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 967.480338][ T1225] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 967.510382][ T1225] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 967.531586][ T1225] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 967.549515][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.646299][T17011] netlink: 'syz.2.3061': attribute type 2 has an invalid length. [ 967.681045][T17011] ‚#{6c: entered promiscuous mode [ 967.854996][ T1225] usb 2-1: config 0 descriptor?? [ 967.910980][T17014] netlink: 'syz.2.3061': attribute type 2 has an invalid length. [ 967.940746][T17014] ‚#{6c: left promiscuous mode [ 968.171635][T13524] usb 2-1: USB disconnect, device number 75 [ 968.569025][T17023] syzkaller0: entered promiscuous mode [ 968.577688][T17023] syzkaller0: entered allmulticast mode [ 969.199631][T13524] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 969.310450][T17023] simple: basic_2 [ 969.314545][T17023] simple: basic_4 [ 969.318172][T17023] simple: basic_6 [ 969.321822][T17023] simple: basic_8 [ 969.325443][T17023] simple: basic_10 [ 969.329151][T17023] simple: basic_12 [ 969.332878][T17023] simple: basic_14 [ 969.336578][T17023] simple: basic_16 [ 969.340294][T17023] simple: basic_18 [ 969.344005][T17023] simple: basic_20 [ 969.347713][T17023] simple: basic_22 [ 969.351456][T17023] simple: basic_24 [ 969.355191][T17023] simple: basic_26 [ 969.358910][T17023] simple: basic_28 [ 969.362645][T17023] simple: basic_30 [ 969.366348][T17023] simple: basic_32 [ 969.370086][T17023] simple: basic_34 [ 969.373806][T17023] 0: reclassify loop, rule prio 0, protocol 800 [ 969.429581][T13524] usb 2-1: device descriptor read/64, error -71 [ 970.011698][ T29] audit: type=1800 audit(1772850570.889:544): pid=17038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3070" name="bus" dev="tmpfs" ino=3117 res=0 errno=0 [ 972.108242][T17066] vlan3: left allmulticast mode [ 972.148398][T17066] bond2: left allmulticast mode [ 972.153666][T17066] batadv2: left allmulticast mode [ 972.799539][ T797] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 973.159789][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 973.169746][ T797] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 973.178113][ T797] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 973.247266][T17080] netlink: 'syz.1.3081': attribute type 2 has an invalid length. [ 973.264176][T17080] ‚#{6c: entered promiscuous mode [ 973.282986][T17080] netlink: 'syz.1.3081': attribute type 2 has an invalid length. [ 973.291046][T17080] ‚#{6c: left promiscuous mode [ 973.438903][ T797] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 973.477950][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 973.497269][ T797] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 973.690953][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 973.704276][ T797] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 973.713517][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.840130][ T797] usb 4-1: config 0 descriptor?? [ 974.150087][ T797] usb 4-1: USB disconnect, device number 78 [ 974.352784][T17073] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 975.049627][ T5822] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 975.210585][ T5822] usb 4-1: device descriptor read/64, error -71 [ 975.726527][ T5822] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 975.746642][ C0] raw-gadget.3 gadget.3: ignoring, device is not running [ 975.796161][T17101] ALSA: mixer_oss: invalid OSS volume 'RgºECLEV' [ 975.802707][T17101] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 976.149679][T17085] create_pit_timer: 8 callbacks suppressed [ 976.149699][T17085] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 976.237858][T17085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3083'. [ 976.269817][T17085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3083'. [ 976.281625][T17085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'. [ 976.699580][ T1662] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 977.059907][T17085] ip6gretap0 (unregistering): left promiscuous mode [ 977.297025][ T1662] usb 6-1: not running at top speed; connect to a high speed hub [ 977.470109][ T1662] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 977.497585][ T1662] usb 6-1: can't read configurations, error -71 [ 978.352553][ T29] audit: type=1800 audit(1772850579.199:545): pid=17128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3089" name="bus" dev="tmpfs" ino=843 res=0 errno=0 [ 978.928340][T17115] delete_channel: no stack [ 980.642335][T17162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.672838][T17162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.013644][T17172] vivid-007: disconnect [ 981.812281][T17166] vivid-007: reconnect [ 983.041961][T17199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.052612][T17199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.307198][ T29] audit: type=1800 audit(1772850584.179:546): pid=17205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3109" name="bus" dev="tmpfs" ino=2411 res=0 errno=0 [ 984.713113][T17220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3115'. [ 984.722791][T17225] tipc: Enabled bearer , priority 0 [ 984.723733][T17225] syzkaller0: entered promiscuous mode [ 984.735078][T17225] syzkaller0: entered allmulticast mode [ 984.939311][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'. [ 984.990075][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'. [ 985.463067][T17228] tipc: Resetting bearer [ 985.532252][T17232] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3116'. [ 985.560918][T17224] tipc: Resetting bearer [ 985.705585][T17224] tipc: Disabling bearer [ 985.999163][T17241] tipc: Enabled bearer , priority 0 [ 986.115369][T17241] syzkaller0: entered promiscuous mode [ 986.127611][T17247] Cannot find del_set index 3 as target [ 986.134677][T17247] ALSA: mixer_oss: invalid OSS volume '' [ 986.423878][T17241] syzkaller0: entered allmulticast mode [ 986.521983][T17241] tipc: Resetting bearer [ 986.559172][T17240] tipc: Resetting bearer [ 986.595616][T17240] tipc: Disabling bearer [ 987.513993][ T29] audit: type=1800 audit(1772850588.369:547): pid=17271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3128" name="bus" dev="tmpfs" ino=3169 res=0 errno=0 [ 989.142357][T17287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.162997][T17288] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 989.182676][T17287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.190650][T17288] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 989.218458][T17290] tipc: Enabled bearer , priority 0 [ 989.250385][T17290] syzkaller0: entered promiscuous mode [ 989.255897][T17290] syzkaller0: entered allmulticast mode [ 989.267075][T17296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.374220][T17296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.424335][T17290] tipc: Resetting bearer [ 989.474160][T17289] tipc: Resetting bearer [ 989.809619][ T5912] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 990.111175][T17289] tipc: Disabling bearer [ 990.289903][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 990.302109][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.331136][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.344994][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 990.359849][ T5912] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 990.369293][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.421118][ T5912] usb 2-1: config 0 descriptor?? [ 990.851877][T17319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.904502][ T5912] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001A/input/input62 [ 990.924130][T17319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.967676][ T5912] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 991.233445][ T797] usb 2-1: USB disconnect, device number 78 [ 991.940491][T17319] netlink: 'syz.2.3139': attribute type 64 has an invalid length. [ 991.948523][T17319] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3139'. [ 992.730119][ T29] audit: type=1800 audit(1772850593.599:548): pid=17343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3143" name="bus" dev="tmpfs" ino=885 res=0 errno=0 [ 993.110244][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.116675][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.799699][T17350] netlink: 'syz.1.3157': attribute type 7 has an invalid length. [ 994.622890][T17356] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3146'. [ 994.824703][T17362] netlink: 'syz.6.3147': attribute type 2 has an invalid length. [ 994.848311][T17362] ‚#{6c: entered promiscuous mode [ 994.866982][T17362] netlink: 'syz.6.3147': attribute type 2 has an invalid length. [ 994.875348][T17362] ‚#{6c: left promiscuous mode [ 994.984163][ T5912] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 995.179559][ T5912] usb 2-1: device descriptor read/64, error -71 [ 995.429622][ T5912] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 995.589499][ T5912] usb 2-1: device descriptor read/64, error -71 [ 995.704721][ T5912] usb usb2-port1: attempt power cycle [ 995.935323][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 995.968250][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 996.090560][ T5912] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 996.140707][ T5912] usb 2-1: device descriptor read/8, error -71 [ 996.392357][ T5912] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 996.440165][ T5912] usb 2-1: device descriptor read/8, error -71 [ 996.544392][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 996.591994][ T5912] usb usb2-port1: unable to enumerate USB device [ 996.819598][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 998.539660][ T29] audit: type=1800 audit(1772850599.219:549): pid=17414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3161" name="bus" dev="tmpfs" ino=901 res=0 errno=0 [ 999.064235][T17416] tipc: Enabled bearer , priority 0 [ 999.092416][T17416] syzkaller0: entered promiscuous mode [ 999.108174][T17416] syzkaller0: entered allmulticast mode [ 999.308481][T17416] tipc: Resetting bearer [ 999.318542][T17415] tipc: Resetting bearer [ 999.355919][T17415] tipc: Disabling bearer [ 1000.268419][T17429] ALSA: mixer_oss: invalid OSS volume 'RgºECLEV' [ 1000.275001][T17429] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 1000.814550][T17443] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 1000.823786][T17443] ALSA: mixer_oss: invalid OSS volume '' [ 1001.106946][T17453] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1001.845302][T17461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.862418][T17461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.843301][T17486] netlink: 'syz.1.3178': attribute type 10 has an invalid length. [ 1002.861696][T17488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.916293][T17488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.706690][T17493] blktrace: Concurrent blktraces are not allowed on sg0 [ 1004.781599][T17506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.810113][T17506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.054571][T17516] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 1005.093577][T17516] ‚#{6c: entered promiscuous mode [ 1005.107675][T17516] netlink: 'syz.3.3181': attribute type 2 has an invalid length. [ 1005.116488][T17516] ‚#{6c: left promiscuous mode [ 1005.880007][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3182'. [ 1006.324803][T17506] netlink: 'syz.6.3191': attribute type 64 has an invalid length. [ 1006.349119][T17506] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3191'. [ 1006.920014][ T5822] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1007.112383][ T5822] usb 4-1: no configurations [ 1007.160486][ T5822] usb 4-1: can't read configurations, error -22 [ 1007.829940][ T5822] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1008.015692][T17546] syzkaller0: entered promiscuous mode [ 1008.021376][T17546] syzkaller0: entered allmulticast mode [ 1008.051675][T17546] 0: reclassify loop, rule prio 0, protocol 800 [ 1008.242145][ T5822] usb 4-1: no configurations [ 1008.300960][ T5822] usb 4-1: can't read configurations, error -22 [ 1008.321555][ T5822] usb usb4-port1: attempt power cycle [ 1008.686823][ T5822] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1008.970642][ T5822] usb 4-1: no configurations [ 1008.975587][ T5822] usb 4-1: can't read configurations, error -22 [ 1009.130209][ T5822] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1009.221244][ T5822] usb 4-1: no configurations [ 1009.225903][ T5822] usb 4-1: can't read configurations, error -22 [ 1009.243436][ T5822] usb usb4-port1: unable to enumerate USB device [ 1009.827433][ T29] audit: type=1800 audit(1772850610.699:550): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3194" name="file0" dev="tmpfs" ino=3304 res=0 errno=0 [ 1010.102398][T17585] Cannot find del_set index 3 as target [ 1010.695310][T17585] ALSA: mixer_oss: invalid OSS volume '' [ 1011.461310][T17597] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 1011.539679][T17597] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1011.570276][T17605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.595864][T17605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.706844][ T29] audit: type=1800 audit(1772850612.579:551): pid=17606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3207" name="bus" dev="ramfs" ino=133013 res=0 errno=0 [ 1012.337116][T17613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.378280][T17613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.427416][T17613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1013.074377][T17620] syzkaller0: entered promiscuous mode [ 1013.090632][T17620] syzkaller0: entered allmulticast mode [ 1013.214121][T17624] tipc: Enabling of bearer rejected, already enabled [ 1013.227946][T17624] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) ! [ 1013.319971][T17627] syzkaller0: entered promiscuous mode [ 1013.336916][T17627] syzkaller0: entered allmulticast mode [ 1013.963477][T17641] netlink: 'syz.1.3216': attribute type 2 has an invalid length. [ 1014.051524][T17643] netlink: 'syz.1.3216': attribute type 2 has an invalid length. [ 1014.962815][T17641] ‚#{6c: entered promiscuous mode [ 1015.390411][T17661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.470668][T17661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.665362][T17665] Cannot find del_set index 3 as target [ 1015.697106][T17665] ALSA: mixer_oss: invalid OSS volume '' [ 1017.151854][ T5907] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1017.318319][ T5907] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1017.356388][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.388745][ T5907] usb 4-1: Product: syz [ 1017.412721][ T5907] usb 4-1: Manufacturer: syz [ 1017.434367][ T5907] usb 4-1: SerialNumber: syz [ 1017.472601][ T5907] usb 4-1: config 0 descriptor?? [ 1017.741499][ T5907] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1019.163553][ T5907] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1019.221706][ T5907] usb 4-1: USB disconnect, device number 85 [ 1019.339496][ T5912] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1019.501240][ T5912] usb 6-1: config 0 has no interfaces? [ 1019.513291][ T5912] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1019.555372][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.582121][ T5912] usb 6-1: Product: syz [ 1019.593214][ T5912] usb 6-1: Manufacturer: syz [ 1019.606778][T17717] syzkaller0: entered promiscuous mode [ 1019.620691][ T5912] usb 6-1: SerialNumber: syz [ 1019.622329][T17717] syzkaller0: entered allmulticast mode [ 1019.656645][ T5912] usb 6-1: config 0 descriptor?? [ 1019.914194][ T5912] usb 6-1: USB disconnect, device number 62 [ 1020.160951][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3242'. [ 1020.313548][ T29] audit: type=1804 audit(1772850621.189:552): pid=17732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3243" name="/newroot/641/file1" dev="fuse" ino=1 res=1 errno=0 [ 1023.709688][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1023.990170][T17788] syzkaller0: entered promiscuous mode [ 1024.004334][T17788] syzkaller0: entered allmulticast mode [ 1024.271385][T17798] vlan2: entered promiscuous mode [ 1025.389463][T17814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.434062][T17814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.149535][ T5907] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1026.371678][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 1026.388716][T17827] ALSA: mixer_oss: invalid OSS volume 'RgºECLEV' [ 1026.396224][T17827] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 1026.420485][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.458440][ T5907] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1026.482140][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.505232][ T5907] usb 6-1: Product: syz [ 1026.538146][ T5907] usb 6-1: Manufacturer: syz [ 1026.570076][ T5907] usb 6-1: SerialNumber: syz [ 1026.590359][ T5907] usb 6-1: config 0 descriptor?? [ 1026.639057][ T5907] mcba_usb 6-1:0.0: Can't find endpoints [ 1028.517840][T17853] netlink: 'syz.1.3274': attribute type 10 has an invalid length. [ 1028.552740][ T1225] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 1028.618309][T17853] tipc: Resetting bearer [ 1028.731097][ T1225] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.770071][ T1225] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 8 [ 1028.823982][ T1225] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.859001][ T5912] usb 6-1: USB disconnect, device number 63 [ 1028.878566][ T1225] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.911214][ T1225] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 8 [ 1028.952555][ T1225] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.010004][ T1225] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.049600][ T1225] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 8 [ 1029.099734][ T1225] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1029.159818][ T1225] usb 4-1: string descriptor 0 read error: -22 [ 1029.173554][ T1225] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1029.192976][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.218091][ T1225] adutux 4-1:168.0: interrupt endpoints not found [ 1030.408969][ T5912] usb 4-1: USB disconnect, device number 86 [ 1030.494967][T17880] ALSA: mixer_oss: invalid OSS volume 'RgºECLEV' [ 1030.512450][T17880] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 1031.039964][ T5907] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1031.073605][T17888] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3283'. [ 1031.236328][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.257113][ T5907] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1031.282999][ T5907] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1031.352780][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.378197][ T5907] usb 4-1: config 0 descriptor?? [ 1031.628680][T17892] tipc: Enabled bearer , priority 0 [ 1031.641663][T17892] syzkaller0: entered promiscuous mode [ 1031.647152][T17892] syzkaller0: entered allmulticast mode [ 1031.707938][T17892] tipc: Resetting bearer [ 1031.724688][T17891] tipc: Resetting bearer [ 1031.769580][T17891] tipc: Disabling bearer [ 1031.938092][T17898] blktrace: Concurrent blktraces are not allowed on sg0 [ 1032.036913][T17903] syzkaller0: entered promiscuous mode [ 1032.042724][T17903] syzkaller0: entered allmulticast mode [ 1032.406943][T17906] syzkaller0: entered promiscuous mode [ 1032.444172][T17906] syzkaller0: entered allmulticast mode [ 1032.897594][T17919] syzkaller0: entered promiscuous mode [ 1032.909497][T17919] syzkaller0: entered allmulticast mode [ 1032.924586][T17919] simple: basic_1 [ 1032.928706][T17919] simple: basic_2 [ 1032.932417][T17919] simple: basic_3 [ 1032.936157][T17919] simple: basic_4 [ 1032.939832][T17919] simple: basic_5 [ 1032.943474][T17919] simple: basic_6 [ 1032.947112][T17919] simple: basic_7 [ 1032.950758][T17919] simple: basic_8 [ 1032.954379][T17919] simple: basic_9 [ 1032.958003][T17919] simple: basic_10 [ 1032.961779][T17919] simple: basic_11 [ 1032.965570][T17919] simple: basic_12 [ 1032.969272][T17919] simple: basic_13 [ 1032.973241][T17919] simple: basic_14 [ 1032.976979][T17919] simple: basic_15 [ 1032.980729][T17919] simple: basic_16 [ 1032.984449][T17919] simple: basic_17 [ 1032.988150][T17919] 0: reclassify loop, rule prio 0, protocol 800 [ 1033.559216][T17936] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1033.585605][T17936] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1033.876924][ T5907] usb 4-1: USB disconnect, device number 87 [ 1034.772460][T17949] syzkaller0: entered promiscuous mode [ 1034.802655][T17949] syzkaller0: entered allmulticast mode [ 1034.976807][T17955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.015243][T17955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.594767][T17965] blktrace: Concurrent blktraces are not allowed on sg0 [ 1036.189657][T17971] syzkaller0: entered promiscuous mode [ 1036.222617][T17971] syzkaller0: entered allmulticast mode [ 1036.454978][T17979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1036.540017][ T5912] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1036.707304][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.730979][ T5912] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1036.749263][ T5912] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1036.783605][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.807907][ T5912] usb 4-1: config 0 descriptor?? [ 1038.156973][T18002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.171380][T18002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.331897][ T5907] usb 4-1: USB disconnect, device number 88 [ 1039.808442][T18024] syzkaller0: entered promiscuous mode [ 1039.814090][T18024] syzkaller0: entered allmulticast mode [ 1041.073824][T18035] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1041.080653][T18035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1041.090624][T18035] vhci_hcd vhci_hcd.0: Device attached [ 1041.139168][T18035] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 1041.145811][T18035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1041.270473][T18045] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 1041.277130][T18045] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1041.314559][T18035] vhci_hcd vhci_hcd.0: Device attached [ 1041.322739][T18050] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1041.329358][T18050] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1041.359607][ T5907] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1041.367785][T18045] vhci_hcd vhci_hcd.0: Device attached [ 1041.377418][T18056] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 1041.384043][T18056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1041.404211][T18050] vhci_hcd vhci_hcd.0: Device attached [ 1041.425746][T18035] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 1041.432376][T18035] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1041.497643][T18045] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1041.558326][T18056] vhci_hcd vhci_hcd.0: Device attached [ 1041.620265][T18035] vhci_hcd vhci_hcd.0: Device attached [ 1041.651350][T18047] vhci_hcd: connection closed [ 1041.651993][T18041] vhci_hcd: connection closed [ 1041.653816][T18038] vhci_hcd: connection reset by peer [ 1041.658888][T18057] vhci_hcd: connection closed [ 1041.666904][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1041.679620][T18052] vhci_hcd: connection closed [ 1041.683408][T18059] vhci_hcd: connection closed [ 1041.688633][ T36] vhci_hcd vhci_hcd.2: release socket [ 1041.713726][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1041.724412][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1041.746781][ T36] vhci_hcd vhci_hcd.2: release socket [ 1041.762858][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1041.783939][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1041.801975][ T36] vhci_hcd vhci_hcd.2: release socket [ 1041.824614][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1041.840225][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1041.855062][ T36] vhci_hcd vhci_hcd.2: release socket [ 1041.872541][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1041.887075][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1041.902144][ T36] vhci_hcd vhci_hcd.2: release socket [ 1041.919129][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1041.946681][ T36] vhci_hcd vhci_hcd.2: stop threads [ 1041.964775][ T36] vhci_hcd vhci_hcd.2: release socket [ 1041.979552][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 1042.504228][T18080] netlink: 'syz.3.3332': attribute type 2 has an invalid length. [ 1042.524567][T18080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3332'. [ 1044.494694][T18096] syzkaller0: entered promiscuous mode [ 1044.501274][T18096] syzkaller0: entered allmulticast mode [ 1044.772878][T18099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.805089][T18099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.954810][T18124] syzkaller0: entered promiscuous mode [ 1045.964971][T18124] syzkaller0: entered allmulticast mode [ 1046.095571][T18116] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1046.105804][T18116] 0ªX¹¦À: renamed from caif0 [ 1046.148296][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'. [ 1046.184729][T18116] 0ªX¹¦À: entered allmulticast mode [ 1046.195025][T18116] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1046.483763][ T5907] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1046.605075][T18134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.625671][T18134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.656157][T18134] binder: 18133:18134 ioctl 4018620d 0 returned -22 [ 1046.680750][T18134] binder: 18133:18134 ioctl 5000943a 0 returned -22 [ 1047.070361][T18138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.556243][T16708] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.576546][T16708] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.602456][T16708] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.651763][T16708] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.683333][T16708] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.701367][T16708] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.745537][T16708] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.765582][T16708] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.800833][ T5822] usb usb38-port1: attempt power cycle [ 1048.397797][ T5822] usb usb38-port1: unable to enumerate USB device [ 1049.418094][ T29] audit: type=1326 audit(1772850650.289:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1049.490354][ T29] audit: type=1326 audit(1772850650.289:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1049.496667][T18165] kvm_intel: kvm [18162]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x1d9) = 0xca00e08e0041 [ 1049.620902][ T29] audit: type=1326 audit(1772850650.289:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1049.715634][T18175] tipc: New replicast peer: 255.255.255.255 [ 1049.723034][ T29] audit: type=1326 audit(1772850650.289:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1049.769825][T18175] tipc: Enabled bearer , priority 10 [ 1049.801638][T18179] netlink: 'syz.6.3359': attribute type 62 has an invalid length. [ 1049.819021][ T29] audit: type=1326 audit(1772850650.289:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1049.946576][ T29] audit: type=1326 audit(1772850650.289:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1050.045245][ T29] audit: type=1326 audit(1772850650.289:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18162 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1050.182307][T18188] netlink: 'syz.6.3362': attribute type 2 has an invalid length. [ 1050.266447][T18189] netlink: 'syz.6.3362': attribute type 2 has an invalid length. [ 1050.312462][T18188] ‚#{6c: entered promiscuous mode [ 1050.366315][T18189] ‚#{6c: left promiscuous mode [ 1051.223014][ T5822] usb 3-1: USB disconnect, device number 58 [ 1051.952686][T18209] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1051.962401][T18209] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1051.979065][T18209] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1051.987312][T18209] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1051.995620][T18209] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1052.310485][T18211] chnl_net:caif_netlink_parms(): no params data found [ 1052.420169][T18211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.431876][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.439938][T18211] bridge_slave_0: entered allmulticast mode [ 1052.449304][T18211] bridge_slave_0: entered promiscuous mode [ 1052.460211][T18211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.473458][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.487037][T18211] bridge_slave_1: entered allmulticast mode [ 1052.496790][T18211] bridge_slave_1: entered promiscuous mode [ 1052.545587][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.563778][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.645254][T18211] team0: Port device team_slave_0 added [ 1052.672375][T18211] team0: Port device team_slave_1 added [ 1052.757259][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.787624][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.840612][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.857655][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.874910][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.925459][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.999601][ T5822] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1053.033052][T18211] hsr_slave_0: entered promiscuous mode [ 1053.050473][T18211] hsr_slave_1: entered promiscuous mode [ 1053.063783][T18211] debugfs: 'hsr0' already exists in 'hsr' [ 1053.070757][T18211] Cannot create hsr debugfs directory [ 1053.161707][ T5822] usb 4-1: config 0 has no interfaces? [ 1053.180612][ T5822] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1053.205435][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.244656][ T5822] usb 4-1: config 0 descriptor?? [ 1053.444556][T18211] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1053.481144][T18211] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1053.494103][T18211] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1053.528581][T18211] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1053.575159][T18225] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1053.644517][ T5822] usb 4-1: USB disconnect, device number 89 [ 1053.732912][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.768967][T18211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.787288][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.794400][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.849041][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.856262][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.080633][T18211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.090066][T18209] Bluetooth: hci3: command tx timeout [ 1054.147766][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3375'. [ 1054.270021][T18211] veth0_vlan: entered promiscuous mode [ 1054.322284][T18211] veth1_vlan: entered promiscuous mode [ 1054.414288][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.421021][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.447528][T18211] veth0_macvtap: entered promiscuous mode [ 1054.472464][T18211] veth1_macvtap: entered promiscuous mode [ 1054.584287][T18211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.651114][T18211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.743936][ T157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.799516][ T157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.823015][ T157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.897672][ T157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.998008][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.033243][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.082946][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.110694][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.948305][ T29] audit: type=1800 audit(1772850656.809:560): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3378" name="file0" dev="tmpfs" ino=2690 res=0 errno=0 [ 1056.172296][T18209] Bluetooth: hci3: command tx timeout [ 1057.176228][T18281] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1057.182776][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1057.259808][T18281] vhci_hcd vhci_hcd.0: Device attached [ 1057.449979][ T1225] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1057.499680][ T797] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1057.620785][ T1225] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.646133][ T1225] usb 8-1: config 0 has no interfaces? [ 1057.665486][ T1225] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1057.693417][ T1225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.729020][ T1225] usb 8-1: config 0 descriptor?? [ 1057.984230][T18281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3383'. [ 1058.026787][T18297] Unknown metaid 34525 dlen 0 [ 1058.186254][T18282] usb 47-1: recv xbuf, 0 [ 1058.191266][ T1156] vhci_hcd vhci_hcd.7: stop threads [ 1058.196546][ T1156] vhci_hcd vhci_hcd.7: release socket [ 1058.220594][ T1156] vhci_hcd vhci_hcd.7: disconnect device [ 1058.259901][T18209] Bluetooth: hci3: command tx timeout [ 1058.269913][ T797] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1058.288700][ T1225] usb 8-1: USB disconnect, device number 2 [ 1059.539668][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1060.204597][T18324] syzkaller0: entered promiscuous mode [ 1060.216314][T18324] syzkaller0: entered allmulticast mode [ 1060.333892][T18209] Bluetooth: hci3: command tx timeout [ 1060.630259][T18333] syzkaller0: entered promiscuous mode [ 1060.660148][T18333] syzkaller0: entered allmulticast mode [ 1060.720656][T18333] 0: reclassify loop, rule prio 0, protocol 800 [ 1060.820210][T18334] netlink: 'syz.1.3392': attribute type 62 has an invalid length. [ 1061.657541][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3398'. [ 1061.689277][T18352] syzkaller0: entered promiscuous mode [ 1061.705664][T18352] syzkaller0: entered allmulticast mode [ 1061.868614][ T146] wlan0: Trigger new scan to find an IBSS to join [ 1062.079095][T18350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3398'. [ 1062.409557][ T797] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1062.442404][T18363] fuse: Unknown parameter '' [ 1062.561418][ T797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.572642][ T797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.599732][ T797] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1062.622490][ T797] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1062.631854][ T797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.649792][ T797] usb 8-1: config 0 descriptor?? [ 1063.073559][ T797] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1063.351599][T18354] binder: 18353:18354 ioctl 4018620d 0 returned -22 [ 1063.362835][T18354] binder: 18353:18354 ioctl 5000943a 0 returned -22 [ 1063.476198][ T5822] usb 8-1: USB disconnect, device number 3 [ 1063.482202][T18354] usb 8-1: string descriptor 0 read error: -19 [ 1063.574477][T18368] netlink: 'syz.5.3407': attribute type 1 has an invalid length. [ 1063.617826][T18368] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1063.631167][T18368] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1063.692878][T18376] bond6: (slave bridge2): Enslaving as an active interface with a down link [ 1063.751539][T18368] macvlan0: entered promiscuous mode [ 1063.766875][T18368] macvlan0: entered allmulticast mode [ 1063.796527][T18368] bond6: entered promiscuous mode [ 1063.823206][T18368] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1063.856661][T18368] bond6: left promiscuous mode [ 1064.815167][T16708] wlan0: Trigger new scan to find an IBSS to join [ 1065.349966][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1066.809610][ T58] wlan0: Trigger new scan to find an IBSS to join [ 1067.245331][T17146] syz_tun (unregistering): left promiscuous mode [ 1067.852039][ T58] wlan0: Trigger new scan to find an IBSS to join [ 1068.122140][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1068.156138][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1068.165123][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1068.180226][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1068.187858][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1068.998882][T18441] fuse: Unknown parameter '00000000000000000006' [ 1069.678518][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.690204][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.863783][T16708] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.917361][T16708] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1069.999663][T18441] netlink: 'syz.3.3421': attribute type 12 has an invalid length. [ 1070.094052][T16708] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.104745][T16708] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1070.232808][T16708] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.245175][T16708] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1070.250060][ T5145] Bluetooth: hci1: command tx timeout [ 1070.305151][T16708] bond0: (slave netdevsim0): Releasing backup interface [ 1070.315996][T16708] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.327418][T16708] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1070.388273][T18436] chnl_net:caif_netlink_parms(): no params data found [ 1070.544557][T18436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.551796][T18436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.559029][T18436] bridge_slave_0: entered allmulticast mode [ 1070.566327][T18436] bridge_slave_0: entered promiscuous mode [ 1070.577771][T18436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.586145][T18436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.594676][T18436] bridge_slave_1: entered allmulticast mode [ 1070.602471][T18436] bridge_slave_1: entered promiscuous mode [ 1070.657789][T18436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.669998][T18436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.709554][ T5912] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1070.781241][T18436] team0: Port device team_slave_0 added [ 1070.792184][T18436] team0: Port device team_slave_1 added [ 1070.851989][T18436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.858940][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.907034][ T5912] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 1070.915306][ T5912] usb 8-1: config 0 has no interface number 0 [ 1070.929522][ T5912] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.944746][T18436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.958111][ T5912] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.970417][ T5912] usb 8-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1070.974460][T18436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.986854][T18436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.999601][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.023165][T18436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.054569][ T5912] usb 8-1: config 0 descriptor?? [ 1071.166708][T18436] hsr_slave_0: entered promiscuous mode [ 1071.176090][T18436] hsr_slave_1: entered promiscuous mode [ 1071.209633][T18436] debugfs: 'hsr0' already exists in 'hsr' [ 1071.224332][T18436] Cannot create hsr debugfs directory [ 1071.400421][T16708] bridge_slave_1: left allmulticast mode [ 1071.410196][T16708] bridge_slave_1: left promiscuous mode [ 1071.418339][T16708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.445236][T16708] bridge_slave_0: left allmulticast mode [ 1071.469602][T16708] bridge_slave_0: left promiscuous mode [ 1071.479692][T16708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.511156][ T5912] uclogic 0003:28BD:0905.001C: Interface probing failed: -22 [ 1071.528221][ T5912] uclogic 0003:28BD:0905.001C: interface is invalid, ignoring [ 1071.712585][T16708] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1071.719328][ T797] usb 8-1: USB disconnect, device number 4 [ 1071.722212][T16708] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 8a:32:11:60:8a:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1071.846759][T16708] gretap0 (unregistering): left promiscuous mode [ 1071.881061][T16708] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1071.903305][T16708] bond5 (unregistering): (slave gretap2): Releasing active interface [ 1071.920491][T16708] bond4 (unregistering): (slave geneve2): Releasing active interface [ 1072.062985][T16708] bond6 (unregistering): (slave bridge2): Releasing active interface [ 1072.165411][T16708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1072.216786][T16708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1072.253715][T16708] bond0 (unregistering): Released all slaves [ 1072.329703][ T5145] Bluetooth: hci1: command tx timeout [ 1072.356966][T16708] bond1 (unregistering): Released all slaves [ 1072.435659][T16708] bond2 (unregistering): (slave batadv2): Releasing active interface [ 1072.444344][T16708] batadv2: left promiscuous mode [ 1072.462889][T16708] bond2 (unregistering): Released all slaves [ 1072.523783][T16708] bond3 (unregistering): (slave veth3): Releasing active interface [ 1072.563733][T16708] bond3 (unregistering): Released all slaves [ 1072.634267][T16708] bond4 (unregistering): Released all slaves [ 1072.656721][T16708] bond5 (unregistering): Released all slaves [ 1072.725189][T16708] bond6 (unregistering): Released all slaves [ 1072.827218][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1073.281961][T16708] tipc: Disabling bearer [ 1073.329661][T16708] tipc: Left network mode [ 1073.793051][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3429'. [ 1073.914475][T18494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.956354][T18494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.029175][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3429'. [ 1074.060455][T18436] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1074.103389][T18436] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1074.153359][T18436] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1074.175472][ T29] audit: type=1326 audit(1772850675.039:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.240737][ T29] audit: type=1326 audit(1772850675.039:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.264961][ T29] audit: type=1326 audit(1772850675.039:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.323688][T16708] hsr_slave_0: left promiscuous mode [ 1074.331612][T16708] hsr_slave_1: left promiscuous mode [ 1074.372421][T16708] veth1_macvtap: left promiscuous mode [ 1074.379676][ T29] audit: type=1326 audit(1772850675.039:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.409702][ T5145] Bluetooth: hci1: command tx timeout [ 1074.411122][T16708] veth0_macvtap: left promiscuous mode [ 1074.454997][ T29] audit: type=1326 audit(1772850675.039:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.548415][ T29] audit: type=1326 audit(1772850675.039:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.637393][ T29] audit: type=1326 audit(1772850675.049:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1074.730059][ T29] audit: type=1326 audit(1772850675.049:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18497 comm="syz.7.3431" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f14f6c code=0x7ffc0000 [ 1075.149504][T18209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1075.161677][T18209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1075.169723][T18209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1075.178818][T18209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1075.186709][T18209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1075.568704][T18436] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1076.274540][T18436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.441391][T18436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.479717][T16708] IPVS: stop unused estimator thread 0... [ 1076.489670][ T5145] Bluetooth: hci1: command tx timeout [ 1076.500377][T18512] chnl_net:caif_netlink_parms(): no params data found [ 1076.563806][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.570947][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.804115][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.811688][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.974945][T18551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.000647][T18551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.081576][T18512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.119231][T18512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.135050][T18512] bridge_slave_0: entered allmulticast mode [ 1077.169784][T18512] bridge_slave_0: entered promiscuous mode [ 1077.185643][T18512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.217762][T18512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.219914][ T5145] Bluetooth: hci4: command tx timeout [ 1077.242042][T18512] bridge_slave_1: entered allmulticast mode [ 1077.280092][T18512] bridge_slave_1: entered promiscuous mode [ 1077.437860][T18512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.518883][T18512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.675221][T18512] team0: Port device team_slave_0 added [ 1077.732528][T18512] team0: Port device team_slave_1 added [ 1077.753695][T18436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1077.861968][T18512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.913957][T18512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.977762][T18512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.034023][T18512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.045642][T18512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.118178][T18512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.364419][T18512] hsr_slave_0: entered promiscuous mode [ 1078.393256][T18512] hsr_slave_1: entered promiscuous mode [ 1078.432852][T18512] debugfs: 'hsr0' already exists in 'hsr' [ 1078.449064][T18512] Cannot create hsr debugfs directory [ 1078.463205][T18436] veth0_vlan: entered promiscuous mode [ 1078.527642][T18436] veth1_vlan: entered promiscuous mode [ 1078.869746][T18436] veth0_macvtap: entered promiscuous mode [ 1078.920085][T18436] veth1_macvtap: entered promiscuous mode [ 1079.054200][T18436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.218233][T18436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1079.292218][ T5145] Bluetooth: hci4: command tx timeout [ 1079.337027][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.384493][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.428475][T18512] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1079.473877][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.503472][ T58] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.554356][T18512] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1079.682376][T18512] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1079.829306][T18512] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1080.158165][ C1] ICMPv6: NA: f6:39:be:0a:8f:26 advertised our address fe80::f439:beff:fe0a:8f26 on bond6! [ 1080.327999][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.360412][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.564884][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1080.599552][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.659299][T18512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.761669][T18512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.805786][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.813002][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.898589][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.905815][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.147322][T18512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.342296][T18512] veth0_vlan: entered promiscuous mode [ 1081.373932][ T5145] Bluetooth: hci4: command tx timeout [ 1081.411283][T18512] veth1_vlan: entered promiscuous mode [ 1081.472614][T18622] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 1081.555458][T18512] veth0_macvtap: entered promiscuous mode [ 1081.575688][T18512] veth1_macvtap: entered promiscuous mode [ 1081.666525][T18512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.717933][T18512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.779830][ T5937] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1081.804932][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.835079][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.882688][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.918476][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.967644][ T5937] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.009272][ T5937] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1082.031181][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.164952][ T5937] usb 9-1: config 0 descriptor?? [ 1082.228759][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.255976][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.286732][ T5937] pwc: Askey VC010 type 2 USB webcam detected. [ 1082.437293][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.479577][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.622717][ T5937] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1082.639732][ T797] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1082.649042][ T5937] pwc: recv_control_msg error -32 req 02 val 2700 [ 1082.688790][ T5937] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1082.709074][ T5937] pwc: recv_control_msg error -32 req 04 val 1000 [ 1082.740601][ T5937] pwc: recv_control_msg error -32 req 04 val 1300 [ 1082.763885][ T5937] pwc: recv_control_msg error -32 req 04 val 1400 [ 1082.794938][ T5937] pwc: recv_control_msg error -32 req 02 val 2000 [ 1082.808120][ T5937] pwc: recv_control_msg error -32 req 02 val 2100 [ 1082.834788][ T5937] pwc: recv_control_msg error -32 req 04 val 1500 [ 1082.847391][ T797] usb 8-1: Using ep0 maxpacket: 32 [ 1082.860842][ T5937] pwc: recv_control_msg error -32 req 02 val 2500 [ 1082.880722][ T797] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1082.900784][ T5937] pwc: recv_control_msg error -32 req 02 val 2400 [ 1082.910334][ T5937] pwc: recv_control_msg error -32 req 02 val 2600 [ 1082.920080][ T5937] pwc: recv_control_msg error -32 req 02 val 2900 [ 1082.979034][ T5937] pwc: recv_control_msg error -32 req 02 val 2800 [ 1082.985737][ T797] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1083.001653][ T5937] pwc: recv_control_msg error -71 req 04 val 1100 [ 1083.014788][ T797] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1083.040740][ T5937] pwc: recv_control_msg error -71 req 04 val 1200 [ 1083.057447][ T797] usb 8-1: Product: syz [ 1083.075957][ T5937] pwc: Registered as video103. [ 1083.089516][ T797] usb 8-1: Manufacturer: syz [ 1083.124040][ T797] usb 8-1: SerialNumber: syz [ 1083.161645][ T797] usb 8-1: config 0 descriptor?? [ 1083.168371][ T5937] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input64 [ 1083.239096][T18632] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1083.263046][ T5937] usb 9-1: USB disconnect, device number 2 [ 1083.299936][ T797] hub 8-1:0.0: bad descriptor, ignoring hub [ 1083.360045][ T797] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1083.454316][ T5145] Bluetooth: hci4: command tx timeout [ 1083.768212][T18645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.802473][T18645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.919006][T18643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.926488][T18643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.964834][T18645] trusted_key: encrypted_key: hex blob is missing [ 1083.984783][T18645] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3448'. [ 1084.029548][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3448'. [ 1084.135380][T18643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.168887][T18643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.342463][ T146] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.380878][ T1156] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.396964][ T1156] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.449867][ T1156] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.843549][ T5145] Bluetooth: hci3: Invalid connection link type handle 0x00c9 [ 1085.053629][T18661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.081044][T18661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.201615][T18688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.232508][T18688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.843019][ T797] usb 8-1: USB disconnect, device number 5 [ 1089.800293][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3466'. [ 1089.986563][T18717] bridge_slave_1: default FDB implementation only supports local addresses [ 1094.890165][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3480'. [ 1095.496233][T18816] netlink: 'syz.1.3479': attribute type 31 has an invalid length. [ 1097.106070][T18854] SET target dimension over the limit! [ 1097.902126][T18864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3486'. [ 1097.993962][T18864] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3486'. [ 1099.449575][T18633] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1099.611902][T18633] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.637912][T18633] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1099.667529][T18633] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.703385][T18633] usb 10-1: config 0 descriptor?? [ 1099.720619][T18633] pwc: Askey VC010 type 2 USB webcam detected. [ 1100.129012][T18633] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1100.171048][T18633] pwc: recv_control_msg error -32 req 02 val 2700 [ 1100.186150][T18633] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1100.219920][T18633] pwc: recv_control_msg error -32 req 04 val 1000 [ 1100.238074][T18633] pwc: recv_control_msg error -32 req 04 val 1300 [ 1100.256792][T18633] pwc: recv_control_msg error -32 req 04 val 1400 [ 1100.271705][T18633] pwc: recv_control_msg error -32 req 02 val 2000 [ 1100.279208][T18633] pwc: recv_control_msg error -32 req 02 val 2100 [ 1100.287658][T18633] pwc: recv_control_msg error -32 req 04 val 1500 [ 1100.309734][T18633] pwc: recv_control_msg error -32 req 02 val 2500 [ 1100.333791][T18633] pwc: recv_control_msg error -32 req 02 val 2400 [ 1100.366139][T18633] pwc: recv_control_msg error -32 req 02 val 2600 [ 1100.406429][T18633] pwc: recv_control_msg error -32 req 02 val 2900 [ 1100.656763][T18633] pwc: recv_control_msg error -71 req 04 val 1100 [ 1100.700461][T18633] pwc: recv_control_msg error -71 req 04 val 1200 [ 1100.745596][T18633] pwc: Registered as video103. [ 1100.813802][T18633] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input65 [ 1100.955935][T18633] usb 10-1: USB disconnect, device number 2 [ 1101.787746][T18899] netlink: 'syz.9.3496': attribute type 31 has an invalid length. [ 1102.409586][ T1156] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.530706][T18925] fuse: root generation should be zero [ 1104.542407][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3512'. [ 1105.449829][ T5874] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1105.615396][ T5874] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1105.624157][ T5874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.635724][ T5874] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1105.645412][ T5874] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1105.654600][ T5874] usb 10-1: Manufacturer: syz [ 1105.663469][ T5874] usb 10-1: config 0 descriptor?? [ 1105.739508][ T5874] rc_core: IR keymap rc-hauppauge not found [ 1105.746980][ T5874] Registered IR keymap rc-empty [ 1105.768278][ T5874] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1105.785752][ T5874] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input66 [ 1105.974058][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1105.986312][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.002309][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.848186][T18955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.872965][T18955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.261071][ T5874] usb 10-1: USB disconnect, device number 3 [ 1108.463110][T18963] netlink: 'syz.8.3510': attribute type 4 has an invalid length. [ 1108.560994][ T29] audit: type=1400 audit(1772850709.429:569): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=18957 comm="syz.8.3510" [ 1108.655197][T18966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3511'. [ 1108.688646][T18966] netlink: 72 bytes leftover after parsing attributes in process `syz.9.3511'. [ 1110.198975][T18977] bridge0: port 3(macvtap1) entered blocking state [ 1110.212953][T18977] bridge0: port 3(macvtap1) entered disabled state [ 1110.225039][T18977] macvtap1: entered allmulticast mode [ 1110.237979][T18977] bridge0: entered allmulticast mode [ 1110.268961][T18977] macvtap1: left allmulticast mode [ 1110.276775][T18977] bridge0: left allmulticast mode [ 1110.600051][ T1662] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1110.821665][ T1662] usb 9-1: config 0 has no interfaces? [ 1110.845582][ T1662] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1110.888526][ T1662] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.962583][ T1662] usb 9-1: config 0 descriptor?? [ 1112.729845][ T5874] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1112.909973][ T5874] usb 8-1: Using ep0 maxpacket: 32 [ 1112.921616][ T5874] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1112.943040][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.981534][ T5874] usb 8-1: config 0 has no interface number 0 [ 1113.008158][ T5874] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.051325][ T5874] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1113.069696][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.092728][ T5874] usb 8-1: Product: syz [ 1113.109600][ T5874] usb 8-1: Manufacturer: syz [ 1113.114237][ T5874] usb 8-1: SerialNumber: syz [ 1113.155495][ T5874] usb 8-1: config 0 descriptor?? [ 1113.182460][ T5874] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 1113.197212][ T5822] usb 9-1: USB disconnect, device number 3 [ 1113.233796][ T5874] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 1113.391178][ T5874] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1113.595319][ T5874] radio-raremono 8-1:0.35: V4L2 device registered as radio48 [ 1114.025679][ T797] usb 8-1: USB disconnect, device number 6 [ 1114.053230][ T797] radio-raremono 8-1:0.35: Thanko's Raremono disconnected [ 1114.751577][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3522'. [ 1115.854732][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.863274][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.575233][T19113] pim6reg: entered allmulticast mode [ 1125.419514][ T5874] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1125.592253][ T5874] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1125.646693][ T5874] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1125.657368][ T29] audit: type=1326 audit(1772850726.519:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1125.757025][ T5874] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.779138][ T5874] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1125.795883][ T29] audit: type=1326 audit(1772850726.519:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1125.818895][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1125.859676][ T29] audit: type=1326 audit(1772850726.559:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1125.882173][ T29] audit: type=1326 audit(1772850726.559:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1125.888292][ T5874] usb 9-1: Product: syz [ 1125.982917][ T29] audit: type=1326 audit(1772850726.559:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1126.002889][ T5874] usb 9-1: Manufacturer: syz [ 1126.039727][ T5874] usb 9-1: SerialNumber: syz [ 1126.123800][ T29] audit: type=1326 audit(1772850726.569:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1126.225491][ T29] audit: type=1326 audit(1772850726.569:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1126.367332][ T29] audit: type=1326 audit(1772850726.569:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1126.391294][ T5874] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1126.438984][ T29] audit: type=1326 audit(1772850726.569:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1126.467210][ T29] audit: type=1326 audit(1772850726.569:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.6.3551" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 1127.035894][ T797] usb 9-1: USB disconnect, device number 4 [ 1127.076566][ T797] usblp0: removed [ 1127.569513][ T5874] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1127.732684][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.796643][ T5874] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1127.842375][ T5874] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1127.877834][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.902444][ T5874] usb 8-1: Product: syz [ 1127.924499][ T5874] usb 8-1: Manufacturer: syz [ 1127.938904][ T5874] usb 8-1: SerialNumber: syz [ 1127.967053][ T5874] usb 8-1: config 0 descriptor?? [ 1128.036177][ T5874] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1128.088331][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1128.174666][ T5874] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1128.220191][ T5874] usb 8-1: media controller created [ 1128.293961][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1128.517678][ T5874] DVB: Unable to find symbol tda10046_attach() [ 1128.534865][ T5874] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1128.565549][ T5874] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1129.011122][T19144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.057903][T19144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.120425][T19175] netlink: 'syz.9.3558': attribute type 4 has an invalid length. [ 1129.711372][ T5874] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1129.789967][ T5874] usb 8-1: USB disconnect, device number 7 [ 1131.099639][ T5937] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1131.214575][T19187] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1131.267631][T19187] netdevsim netdevsim7: Direct firmware load for  failed with error -2 [ 1131.280783][T19187] netdevsim netdevsim7: Falling back to sysfs fallback for:  [ 1131.295736][ T5937] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1131.323145][ T5937] usb 10-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.344144][ T5937] usb 10-1: config 251 has 0 interfaces, different from the descriptor's value: 2 [ 1131.376016][ T5937] usb 10-1: New USB device found, idVendor=2040, idProduct=7050, bcdDevice=ea.b7 [ 1131.385342][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.411957][ T5937] usb 10-1: Product: syz [ 1131.422953][ T5937] usb 10-1: Manufacturer: syz [ 1131.432789][ T5937] usb 10-1: SerialNumber: syz [ 1132.049509][ T5822] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1132.219749][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.231959][ T5822] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1132.242988][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.266708][ T5822] usb 2-1: config 0 descriptor?? [ 1132.280785][ T5822] pwc: Askey VC010 type 2 USB webcam detected. [ 1132.435908][ T5937] usb 10-1: USB disconnect, device number 4 [ 1132.750517][ T5822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1132.770151][ T5822] pwc: recv_control_msg error -32 req 02 val 2700 [ 1132.787853][ T5822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1132.802475][ T5822] pwc: recv_control_msg error -32 req 04 val 1000 [ 1132.814293][ T5822] pwc: recv_control_msg error -32 req 04 val 1300 [ 1132.822184][ T5822] pwc: recv_control_msg error -32 req 04 val 1400 [ 1132.829992][ T5822] pwc: recv_control_msg error -32 req 02 val 2000 [ 1132.837637][ T5822] pwc: recv_control_msg error -32 req 02 val 2100 [ 1132.845972][ T5822] pwc: recv_control_msg error -32 req 04 val 1500 [ 1132.853641][ T5822] pwc: recv_control_msg error -32 req 02 val 2500 [ 1132.862217][ T5822] pwc: recv_control_msg error -32 req 02 val 2400 [ 1132.927835][ T5822] pwc: recv_control_msg error -32 req 02 val 2600 [ 1132.937091][ T5822] pwc: recv_control_msg error -32 req 02 val 2900 [ 1133.145824][ T5822] pwc: recv_control_msg error -71 req 04 val 1100 [ 1133.155771][ T5822] pwc: recv_control_msg error -71 req 04 val 1200 [ 1133.179677][ T5822] pwc: Registered as video103. [ 1133.186828][ T5822] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 1133.230231][ T5822] usb 2-1: USB disconnect, device number 83 [ 1133.250655][T19204] syzkaller0: entered promiscuous mode [ 1133.256179][T19204] syzkaller0: entered allmulticast mode [ 1133.352233][T19204] tipc: Started in network mode [ 1133.359746][T19204] tipc: Node identity 1a9f5dbcf6e8, cluster identity 4711 [ 1133.368002][T19204] tipc: Enabled bearer , priority 0 [ 1133.398229][T19203] tipc: Resetting bearer [ 1133.452929][T19203] tipc: Disabling bearer [ 1134.266816][T19223] blktrace: Concurrent blktraces are not allowed on sg0 [ 1134.409635][T16483] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1134.639518][ T1662] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1134.745394][T19231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.756499][T19231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.805519][ T1662] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.822451][ T1662] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1134.864083][ T1662] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.892509][ T1662] usb 8-1: config 0 descriptor?? [ 1134.908492][ T1662] pwc: Askey VC010 type 2 USB webcam detected. [ 1135.235874][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1135.235893][ T29] audit: type=1326 audit(1772850736.109:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.270605][ T29] audit: type=1326 audit(1772850736.139:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.296248][ T29] audit: type=1326 audit(1772850736.169:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.320034][ T1662] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1135.327438][ T1662] pwc: recv_control_msg error -32 req 02 val 2700 [ 1135.336779][ T29] audit: type=1326 audit(1772850736.169:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.361497][ T1662] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1135.369031][ T1662] pwc: recv_control_msg error -32 req 04 val 1000 [ 1135.378596][ T29] audit: type=1326 audit(1772850736.169:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.405349][ T1662] pwc: recv_control_msg error -32 req 04 val 1300 [ 1135.412605][ T29] audit: type=1326 audit(1772850736.179:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.434861][ T1662] pwc: recv_control_msg error -32 req 04 val 1400 [ 1135.443950][ T1662] pwc: recv_control_msg error -32 req 02 val 2000 [ 1135.451787][ T29] audit: type=1326 audit(1772850736.179:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.474295][ T1662] pwc: recv_control_msg error -32 req 02 val 2100 [ 1135.483938][ T1662] pwc: recv_control_msg error -32 req 04 val 1500 [ 1135.491657][ T1662] pwc: recv_control_msg error -32 req 02 val 2500 [ 1135.498826][ T29] audit: type=1326 audit(1772850736.179:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.523061][ T1662] pwc: recv_control_msg error -32 req 02 val 2400 [ 1135.530475][ T1662] pwc: recv_control_msg error -32 req 02 val 2600 [ 1135.537656][ T1662] pwc: recv_control_msg error -32 req 02 val 2900 [ 1135.548258][ T29] audit: type=1326 audit(1772850736.179:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.577876][ T29] audit: type=1326 audit(1772850736.179:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19238 comm="syz.1.3575" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1135.747412][ T1662] pwc: recv_control_msg error -71 req 04 val 1100 [ 1135.757522][ T1662] pwc: recv_control_msg error -71 req 04 val 1200 [ 1135.793217][ T1662] pwc: Registered as video103. [ 1135.827757][ T1662] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input68 [ 1135.893409][ T1662] usb 8-1: USB disconnect, device number 8 [ 1136.469646][ T1662] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1136.521562][T16708] ------------[ cut here ]------------ [ 1136.527041][T16708] conntrack cleanup blocked for 60s [ 1136.527053][T16708] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:10/16708 [ 1136.545213][T16708] Modules linked in: [ 1136.549392][T16708] CPU: 1 UID: 0 PID: 16708 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.560912][T16708] Tainted: [L]=SOFTLOCKUP [ 1136.565220][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.575527][T16708] Workqueue: netns cleanup_net [ 1136.580858][T16708] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1136.587690][T16708] Code: 08 48 89 df e8 7d 09 66 f8 4c 8b 3b 49 39 df 74 69 e8 30 c6 fb f7 45 31 e4 e9 8e fe ff ff e8 23 c6 fb f7 48 8d 3d cc fe 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1136.607374][T16708] RSP: 0018:ffffc90003b478d0 EFLAGS: 00010293 [ 1136.613677][T16708] RAX: ffffffff89c9d34d RBX: ffffc90003b47a70 RCX: ffff888028703d00 [ 1136.613690][ T5874] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1136.621740][T16708] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020d220 [ 1136.621800][T16708] RBP: 0000000000000005 R08: ffff88805c116003 R09: 1ffff1100b822c00 [ 1136.621813][T16708] R10: dffffc0000000000 R11: ffffed100b822c01 R12: 0000000000000001 [ 1136.621828][T16708] R13: dffffc0000000000 R14: 0000000100014612 R15: 0000000100014613 [ 1136.621841][T16708] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 1136.621857][T16708] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.621871][T16708] CR2: 000000008003e018 CR3: 00000000390fe000 CR4: 00000000003526f0 [ 1136.621889][T16708] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1136.621901][T16708] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1136.621914][T16708] Call Trace: [ 1136.621993][T16708] [ 1136.622041][T16708] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1136.714163][T16708] ops_undo_list+0x52b/0x940 [ 1136.718750][T16708] ? __pfx_ops_undo_list+0x10/0x10 [ 1136.723941][T16708] ? idr_destroy+0x218/0x290 [ 1136.728622][T16708] ? do_raw_spin_unlock+0xf5/0x210 [ 1136.733891][T16708] cleanup_net+0x56b/0x800 [ 1136.738342][T16708] ? __pfx_cleanup_net+0x10/0x10 [ 1136.743355][T16708] ? process_scheduled_works+0xa25/0x1830 [ 1136.749128][T16708] ? process_scheduled_works+0xa25/0x1830 [ 1136.754905][T16708] process_scheduled_works+0xb02/0x1830 [ 1136.760514][T16708] ? __pfx_process_scheduled_works+0x10/0x10 [ 1136.766600][T16708] ? assign_work+0x3d5/0x5e0 [ 1136.771244][T16708] worker_thread+0xa50/0xfc0 [ 1136.775837][T16708] kthread+0x388/0x470 [ 1136.780139][T16708] ? __pfx_worker_thread+0x10/0x10 [ 1136.785253][T16708] ? __pfx_kthread+0x10/0x10 [ 1136.790096][T16708] ret_from_fork+0x51e/0xb90 [ 1136.794681][T16708] ? __pfx_ret_from_fork+0x10/0x10 [ 1136.799816][T16708] ? __switch_to+0xc7d/0x1450 [ 1136.804487][T16708] ? __pfx_kthread+0x10/0x10 [ 1136.809063][T16708] ret_from_fork_asm+0x1a/0x30 [ 1136.813938][T16708] [ 1136.817044][T16708] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1136.824316][T16708] CPU: 1 UID: 0 PID: 16708 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.835509][T16708] Tainted: [L]=SOFTLOCKUP [ 1136.839815][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1136.849855][T16708] Workqueue: netns cleanup_net [ 1136.854614][T16708] Call Trace: [ 1136.857874][T16708] [ 1136.860787][T16708] vpanic+0x56c/0xa60 [ 1136.864786][T16708] ? __pfx__printk+0x10/0x10 [ 1136.869353][T16708] ? __pfx_vpanic+0x10/0x10 [ 1136.873838][T16708] ? is_bpf_text_address+0x292/0x2b0 [ 1136.879107][T16708] ? is_bpf_text_address+0x26/0x2b0 [ 1136.884290][T16708] panic+0xc5/0xd0 [ 1136.888002][T16708] ? __pfx_panic+0x10/0x10 [ 1136.892434][T16708] ? ret_from_fork_asm+0x1a/0x30 [ 1136.897362][T16708] __warn+0x315/0x4f0 [ 1136.901326][T16708] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1136.907462][T16708] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1136.913598][T16708] __report_bug+0x29a/0x540 [ 1136.918176][T16708] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1136.924320][T16708] ? __pfx___report_bug+0x10/0x10 [ 1136.929336][T16708] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 1136.935477][T16708] report_bug_entry+0x19a/0x290 [ 1136.940405][T16708] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 1136.946539][T16708] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 1136.952686][T16708] handle_bug+0xce/0x200 [ 1136.957000][T16708] exc_invalid_op+0x1a/0x50 [ 1136.961494][T16708] asm_exc_invalid_op+0x1a/0x20 [ 1136.966374][T16708] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 1136.973126][T16708] Code: 08 48 89 df e8 7d 09 66 f8 4c 8b 3b 49 39 df 74 69 e8 30 c6 fb f7 45 31 e4 e9 8e fe ff ff e8 23 c6 fb f7 48 8d 3d cc fe 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 1136.992722][T16708] RSP: 0018:ffffc90003b478d0 EFLAGS: 00010293 [ 1136.998780][T16708] RAX: ffffffff89c9d34d RBX: ffffc90003b47a70 RCX: ffff888028703d00 [ 1137.006739][T16708] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020d220 [ 1137.014717][T16708] RBP: 0000000000000005 R08: ffff88805c116003 R09: 1ffff1100b822c00 [ 1137.022678][T16708] R10: dffffc0000000000 R11: ffffed100b822c01 R12: 0000000000000001 [ 1137.030659][T16708] R13: dffffc0000000000 R14: 0000000100014612 R15: 0000000100014613 [ 1137.038662][T16708] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 1137.044848][T16708] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 1137.050928][T16708] ops_undo_list+0x52b/0x940 [ 1137.055514][T16708] ? __pfx_ops_undo_list+0x10/0x10 [ 1137.060615][T16708] ? idr_destroy+0x218/0x290 [ 1137.065193][T16708] ? do_raw_spin_unlock+0xf5/0x210 [ 1137.070291][T16708] cleanup_net+0x56b/0x800 [ 1137.074705][T16708] ? __pfx_cleanup_net+0x10/0x10 [ 1137.079634][T16708] ? process_scheduled_works+0xa25/0x1830 [ 1137.085336][T16708] ? process_scheduled_works+0xa25/0x1830 [ 1137.091050][T16708] process_scheduled_works+0xb02/0x1830 [ 1137.096598][T16708] ? __pfx_process_scheduled_works+0x10/0x10 [ 1137.102565][T16708] ? assign_work+0x3d5/0x5e0 [ 1137.107141][T16708] worker_thread+0xa50/0xfc0 [ 1137.111727][T16708] kthread+0x388/0x470 [ 1137.115778][T16708] ? __pfx_worker_thread+0x10/0x10 [ 1137.120870][T16708] ? __pfx_kthread+0x10/0x10 [ 1137.125442][T16708] ret_from_fork+0x51e/0xb90 [ 1137.130023][T16708] ? __pfx_ret_from_fork+0x10/0x10 [ 1137.135123][T16708] ? __switch_to+0xc7d/0x1450 [ 1137.139782][T16708] ? __pfx_kthread+0x10/0x10 [ 1137.144356][T16708] ret_from_fork_asm+0x1a/0x30 [ 1137.149113][T16708] [ 1137.152378][T16708] Kernel Offset: disabled [ 1137.156691][T16708] Rebooting in 86400 seconds..