last executing test programs: 56m34.619706565s ago: executing program 32 (id=143): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f00000006c0)=""/4101, 0x103e, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56m34.528150488s ago: executing program 33 (id=146): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x1, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x3, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x10000005, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3], [0x4004, 0x4, 0x5, 0x8000, 0x493e, 0x8, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x5, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 56m16.196162899s ago: executing program 34 (id=244): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 53m55.411573246s ago: executing program 3 (id=1244): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r4, 0x0, 0x0, r5], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 53m55.221692358s ago: executing program 3 (id=1246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x1, 0x1005}}) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 53m54.99896222s ago: executing program 3 (id=1249): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 53m53.87581619s ago: executing program 3 (id=1267): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 53m53.681355133s ago: executing program 3 (id=1270): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xc2, 0x16, 0x88, 0x10, 0x5ac, 0x245, 0xcf45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x80, 0x0, [{{0x9, 0x4, 0xbe, 0x6, 0x0, 0x3, 0xa8, 0x2, 0x7a}}]}}]}}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 53m52.879560638s ago: executing program 3 (id=1273): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='w', 0x1}], 0x1, 0x1) 53m52.166520844s ago: executing program 35 (id=1273): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)='w', 0x1}], 0x1, 0x1) 52m53.032004898s ago: executing program 4 (id=1735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000440)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x0, 0x0, "cf5cfd05078df662"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c811}, 0x414) 52m52.852027439s ago: executing program 4 (id=1736): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 52m52.784139573s ago: executing program 4 (id=1737): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) 52m52.363741405s ago: executing program 4 (id=1739): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x24020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 52m51.384279991s ago: executing program 4 (id=1745): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x24) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r1) 52m48.796852306s ago: executing program 4 (id=1758): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 52m48.352929859s ago: executing program 36 (id=1758): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r0, 0x0, 0x0) 52m27.051066964s ago: executing program 8 (id=1845): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 52m26.818275001s ago: executing program 8 (id=1846): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 52m26.651332449s ago: executing program 8 (id=1849): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875", 0xec}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb2", 0x1e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a8685", 0x1e}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6", 0xa5}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 52m26.355704687s ago: executing program 8 (id=1852): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 52m26.147955542s ago: executing program 8 (id=1855): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000ff", 0x43}], 0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) 52m25.569469488s ago: executing program 8 (id=1861): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000300)=0x5) 52m24.535130868s ago: executing program 37 (id=1861): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000300)=0x5) 52m6.273868962s ago: executing program 7 (id=1939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 52m4.367730017s ago: executing program 7 (id=1942): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) 52m3.166014705s ago: executing program 7 (id=1945): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) 52m2.077955304s ago: executing program 7 (id=1949): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 52m1.034519721s ago: executing program 7 (id=1955): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xc0080, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x50, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}, {0x6, 0x583a6546, 0x1, 0x0, '/'}]}, 0x0, 0x0, 0x0, 0x0}) 52m0.737885571s ago: executing program 7 (id=1958): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r2 = syz_io_uring_setup(0xeeb, &(0x7f0000000780)={0x0, 0x8000, 0x10100, 0x0, 0x3c8}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r1, 0x73b, &(0x7f0000000500)=[{&(0x7f0000000240)=""/157, 0x9d}], 0x1, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_uring_enter(r2, 0x567, 0xa9ea, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 51m59.941201072s ago: executing program 38 (id=1958): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r2 = syz_io_uring_setup(0xeeb, &(0x7f0000000780)={0x0, 0x8000, 0x10100, 0x0, 0x3c8}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r1, 0x73b, &(0x7f0000000500)=[{&(0x7f0000000240)=""/157, 0x9d}], 0x1, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) io_uring_enter(r2, 0x567, 0xa9ea, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 48m2.510584067s ago: executing program 1 (id=2986): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x102, 0x20000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x18, 0x0, 0x0, 0x800}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004071}, 0x0) 48m0.779363936s ago: executing program 1 (id=2993): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) lseek(r3, 0x0, 0x4) write$RDMA_USER_CM_CMD_GET_EVENT(r2, 0x0, 0x0) 47m59.742281669s ago: executing program 1 (id=2998): bind$rds(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 47m58.435068811s ago: executing program 1 (id=3004): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 47m57.461147654s ago: executing program 1 (id=3009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x65, 0x183000, 0x12345}) io_uring_enter(r2, 0x47f6, 0x40, 0x2, 0x0, 0x0) 47m56.151872369s ago: executing program 1 (id=3012): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 47m54.926984799s ago: executing program 39 (id=3012): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 14.899160435s ago: executing program 5 (id=9141): inotify_init() r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, r2, 0x0) fanotify_init(0x200, 0x40800) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0xa, {}, {0x5, 0x8, 0xc1, 0x6b, 0x9, 0x2, "84653375"}, 0xffb, 0x2, {0x0}}) unshare(0xa020480) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.711862199s ago: executing program 5 (id=9150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000980)={'veth1_to_bridge\x00', &(0x7f0000000940)=@ethtool_rxfh_indir={0x39}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x17, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7ff, 0xa, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x9, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x10e, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x92a3, 0x4, 0x1, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000004, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xca, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1000, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x1, 0x3d, 0x5, 0x9, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x6, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0x9, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x856, 0x2], [0x7, 0x6, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x1, 0x8, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x8001, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x3d9, 0x6, 0x0, 0x5, 0xce7, 0x1, 0x2, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x6ad, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0xb, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x4, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1a, 0x200, 0xffff3441, 0x2]}, 0x45c) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000080)={0x0, 0x20000201, 0x40, 0x0, 0x2, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0], 0x0, 0x8, 0x6, 0x2}) listen(r5, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f00000000c0)={0x80002011}) shutdown(r5, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000001400)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x20}, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000001480)="0e", 0x1}], 0x1}}], 0x1, 0x20000011) shutdown(r10, 0x1) getsockopt$bt_hci(r10, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000008c0)={'macvlan1\x00'}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000100)={0x30, r9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) 10.692350791s ago: executing program 6 (id=9154): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) pwrite64(r0, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41cb0f6c783efd616c41a12ecc83b3c0fe64985caababc5d9d4ea437f5d1658a3435a10d038a78a8fb306d", 0x3d, 0x9) 10.263725913s ago: executing program 6 (id=9157): syz_usb_connect(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYRESDEC=0x0], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x3c, 0x4) fsetxattr(0xffffffffffffffff, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000027c0), 0x1, 0x0) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000", @ANYBLOB="0400"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) 9.688659465s ago: executing program 5 (id=9158): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4b, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, 0x0) listen(r0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000002c0)=""/139, &(0x7f0000000100)=0x8b) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x6c, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x78, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setreuid(r6, r8) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x9f, 0x600100) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064d1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, [@migrate={0x50, 0x11, [{@in=@loopback, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in6=@private1}}]}, 0xbc}}, 0x0) 7.109253196s ago: executing program 2 (id=9163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}, @IFLA_GTP_FD1={0x8}]}}}]}, 0x40}}, 0x0) 7.108554273s ago: executing program 9 (id=9164): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x3e, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x4, "9b2f"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 6.779126026s ago: executing program 2 (id=9165): r0 = gettid() r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcb0, 0x4, 0x800}, 0x0) request_key(0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$pid(0x1, 0x0, 0x4007) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mremap(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f000007d000/0x4000)=nil) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r1, 0xc0185500, &(0x7f0000000500)=@urb_type_iso={0x0, {0x5}, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x0, 0x0, [{0xb5, 0x3, 0x4}]}) r5 = fcntl$getown(r1, 0x9) ptrace$getenv(0x4201, r5, 0x0, &(0x7f00000000c0)) syz_open_procfs(r0, &(0x7f00000000c0)='auxv\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x0, 0x3, 0x0, 0x2, 0x4}}) syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2) 5.686898359s ago: executing program 6 (id=9166): pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000010004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2}, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x50, r11, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x809) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) 4.881230117s ago: executing program 9 (id=9167): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x400e802, 0x1, 0x7, 0xfff}}) 4.824829364s ago: executing program 9 (id=9168): syz_emit_ethernet(0x82, &(0x7f0000000380)={@random="cf599d3baed5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f200", 0x4c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x6, 0x0, 0x8, 0x0, [@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x7f}]}], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1000, 0x0, 0x7}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 4.744074794s ago: executing program 9 (id=9169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) 4.536715165s ago: executing program 5 (id=9170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) 4.387604755s ago: executing program 9 (id=9171): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x3e, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x4, "9b2f"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 4.17183271s ago: executing program 5 (id=9172): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, 0x0, 0x5, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="e8924d7e487f87896c4757aeac19473cb480701164015d0b71178d32752d9afc8d86a35708a45844dd13b4a91c932e5cc6671f86c2cc98e91b2cc185a069b3cfc27d68a58d383322f7c78ce72003f9db394340b322bcd796ed8d42f90b9c6bb21014f5f56396bf6afc540031f78f24b0426d366725b93f7bd7bbd97c3e2e1df4ebb39ff6757ea7794953a8b54d3e56fb58bf3c03c02a7e7a9f151d239446bb43e919728f341f7620513c606a402b90aeb874478b626c938bed60583d65495bb7fd0e974ea836de981fb59ca40208469d75f9ff33f398d02e7f", 0xd9}, {&(0x7f0000000400)}], 0x2, 0x7, 0x7, 0x4) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff00000000000000"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000640)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x7, @empty, 0x3}}]}, 0x110) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) 3.358286223s ago: executing program 0 (id=9173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000040c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.238747938s ago: executing program 6 (id=9174): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 2.994550496s ago: executing program 0 (id=9175): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), 0x20) 2.993829545s ago: executing program 6 (id=9176): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000091}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.99194975s ago: executing program 2 (id=9177): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, 0x0) 2.743493157s ago: executing program 2 (id=9178): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "88634d58"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "6eee7e00"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @cipso={0x86, 0x3e, 0x0, [{0x5, 0x11, "61853379342bf9bc837101084905ae"}, {0x2, 0x4, "9b2f"}, {0x7, 0x6, "29d6b434"}, {0x2, 0x9, "4107220cb4ea41"}, {0x2, 0x8, "5c99b53f102e"}, {0x1, 0xc, "434c36e509a5c1062086"}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) 2.696119149s ago: executing program 0 (id=9179): syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @local}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @noop]}}, @time_exceeded={0x2b, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x2, 0x0, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x22}}}}}}}, 0x0) 2.420146297s ago: executing program 0 (id=9180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 1.97675551s ago: executing program 0 (id=9181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c0016"], 0x38}, 0x1, 0x0, 0x0, 0x4409c}, 0x10) 1.651789882s ago: executing program 0 (id=9182): r0 = dup(0xffffffffffffffff) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x101100, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r1, 0x3b71, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0xffff030c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xc, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000380)='pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100", 0xba) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x7c, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x50000}, 0x40000) r6 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x40045730, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002400823d0bc47000fcffffff0100000008", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r0, 0x2000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 1.567893878s ago: executing program 9 (id=9183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007311320000000000166400000000010095007400000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) pread64(r3, &(0x7f0000000400)=""/154, 0x9a, 0x51) pipe2$watch_queue(0x0, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x288, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x24c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x2b0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) keyctl$negate(0xd, 0x0, 0x8, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) 236.951122ms ago: executing program 2 (id=9184): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5e8, 0x2) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) 173.494206ms ago: executing program 5 (id=9185): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0xb, 0x301, 0x0, 0x0, {0xa}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x802}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) read(r1, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1}) tkill(r0, 0x7) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x20014055) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}]}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x59313000) syz_open_dev$vcsu(0x0, 0x0, 0x440200) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004440)=""/5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) 28.00127ms ago: executing program 2 (id=9186): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}}, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240308000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403"], 0x0) 0s ago: executing program 6 (id=9187): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x2c}}) kernel console output (not intermixed with test programs): -71 [ 3222.813348][ T9304] ath6kl: Failed to init ath6kl core: -71 [ 3222.888939][ T30] audit: type=1326 audit(1752150723.790:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3222.894522][ T9304] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3222.981902][ T9304] usb 7-1: USB disconnect, device number 104 [ 3223.206059][ T30] audit: type=1326 audit(1752150723.870:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3223.397790][ T30] audit: type=1326 audit(1752150723.870:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3224.344708][ T30] audit: type=1326 audit(1752150723.870:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3224.476372][ T30] audit: type=1326 audit(1752150723.900:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3224.504648][ T30] audit: type=1326 audit(1752150723.900:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3224.533271][ T30] audit: type=1326 audit(1752150723.900:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3224.556896][ T30] audit: type=1326 audit(1752150723.900:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3224.604478][ T30] audit: type=1326 audit(1752150723.900:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14505 comm="syz.5.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3225.126406][T14537] syz_tun: entered allmulticast mode [ 3225.733669][T14529] syz_tun: left allmulticast mode [ 3226.633876][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8673'. [ 3226.657708][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8673'. [ 3226.864935][T14554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3226.892339][T14554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3226.940779][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8674'. [ 3229.059940][T14573] sctp: [Deprecated]: syz.6.8677 (pid 14573) Use of int in maxseg socket option. [ 3229.059940][T14573] Use struct sctp_assoc_value instead [ 3229.080588][T14573] netlink: 'syz.6.8677': attribute type 10 has an invalid length. [ 3230.145864][T14586] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 3231.101185][T14568] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3232.344571][T13367] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 3232.354601][T25161] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3232.542206][T13367] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3233.198213][T25161] usb 3-1: config 0 has no interfaces? [ 3233.209349][T25161] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3233.223168][T25161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3233.231588][T13367] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3233.243683][T25161] usb 3-1: Product: syz [ 3233.253416][T25161] usb 3-1: Manufacturer: syz [ 3233.258410][T13367] usb 10-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 3233.269869][T25161] usb 3-1: SerialNumber: syz [ 3233.293695][T13367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3233.320362][T25161] usb 3-1: config 0 descriptor?? [ 3233.395116][T13367] usb 10-1: config 0 descriptor?? [ 3233.827633][T14609] netlink: 'syz.2.8683': attribute type 2 has an invalid length. [ 3233.840192][T13367] usbhid 10-1:0.0: can't add hid device: -71 [ 3233.847186][T13367] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3233.873379][T13367] usb 10-1: USB disconnect, device number 92 [ 3233.890112][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8685'. [ 3233.922340][T25161] usb 3-1: USB disconnect, device number 112 [ 3234.150385][T14635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8685'. [ 3235.052182][T14644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8689'. [ 3236.624694][T13367] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 3236.914831][T13367] usb 10-1: Using ep0 maxpacket: 16 [ 3236.936897][T13367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3236.952713][T13367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3236.962987][T13367] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 3236.973122][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 3236.973139][ T30] audit: type=1326 audit(1752150738.200:6605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.002564][T13367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3237.015341][T13367] usb 10-1: config 0 descriptor?? [ 3237.057325][ T30] audit: type=1326 audit(1752150738.240:6606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.084449][ T30] audit: type=1326 audit(1752150738.250:6607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.107799][ T30] audit: type=1326 audit(1752150738.250:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.130857][ T30] audit: type=1326 audit(1752150738.250:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.284520][ T30] audit: type=1326 audit(1752150738.250:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.308364][ T30] audit: type=1326 audit(1752150738.250:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.331943][ T30] audit: type=1326 audit(1752150738.250:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.354981][ T30] audit: type=1326 audit(1752150738.250:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.397757][ T30] audit: type=1326 audit(1752150738.250:6614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14666 comm="syz.2.8694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3237.612134][T13367] playstation 0003:054C:05C4.0035: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.9-1/input0 [ 3237.799019][T13367] playstation 0003:054C:05C4.0035: Invalid byte count transferred, expected 16 got 0 [ 3237.851925][T13367] playstation 0003:054C:05C4.0035: Failed to retrieve DualShock4 pairing info: -22 [ 3237.871535][T13367] playstation 0003:054C:05C4.0035: Failed to get MAC address from DualShock4 [ 3237.891126][T13367] playstation 0003:054C:05C4.0035: Failed to create dualshock4. [ 3237.912229][T13367] playstation 0003:054C:05C4.0035: probe with driver playstation failed with error -22 [ 3238.028335][T25161] usb 10-1: USB disconnect, device number 93 [ 3238.769167][T14711] netlink: 'syz.6.8697': attribute type 3 has an invalid length. [ 3238.804680][T14711] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8697'. [ 3238.863138][T14713] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8697'. [ 3238.873101][T14713] unsupported nlmsg_type 40 [ 3239.264408][T14716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3239.274244][T14716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3239.586926][ T5642] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 3239.843860][ T5642] usb 10-1: config 0 has no interfaces? [ 3239.870978][ T5642] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3239.880654][ T5642] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3239.894534][ T5642] usb 10-1: Product: syz [ 3239.915762][ T5642] usb 10-1: Manufacturer: syz [ 3239.940651][ T5642] usb 10-1: SerialNumber: syz [ 3239.959519][ T5642] usb 10-1: config 0 descriptor?? [ 3240.270131][T14712] netlink: 'syz.9.8699': attribute type 12 has an invalid length. [ 3240.304205][T14712] netlink: 9472 bytes leftover after parsing attributes in process `syz.9.8699'. [ 3241.884421][T13367] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3242.012058][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 3242.012075][ T30] audit: type=1326 audit(1752150743.230:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3242.050738][ T9304] usb 10-1: USB disconnect, device number 94 [ 3242.086795][ T30] audit: type=1326 audit(1752150743.230:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3242.115016][T13367] usb 3-1: Using ep0 maxpacket: 32 [ 3242.145526][T13367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3242.168480][T13367] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3242.266084][T13367] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3242.279611][T13367] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 3242.289269][T13367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3242.304407][ T30] audit: type=1326 audit(1752150743.230:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3242.328624][T13367] usb 3-1: config 0 descriptor?? [ 3242.639528][ T30] audit: type=1326 audit(1752150743.230:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3242.662484][T14746] netlink: 548 bytes leftover after parsing attributes in process `syz.5.8705'. [ 3242.713765][ T30] audit: type=1326 audit(1752150743.230:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3242.762556][T13367] hid (null): global environment stack underflow [ 3242.912185][T13367] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0036/input/input118 [ 3242.936463][ T30] audit: type=1326 audit(1752150743.230:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3243.010196][ T30] audit: type=1326 audit(1752150743.230:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3243.059762][T13367] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0036/input/input119 [ 3243.083198][ T30] audit: type=1326 audit(1752150743.230:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3243.333572][ T30] audit: type=1326 audit(1752150743.230:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3243.376354][T13367] kye 0003:0458:5011.0036: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 3243.680919][ T30] audit: type=1326 audit(1752150743.230:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14730 comm="syz.0.8703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3243.703404][ C0] vkms_vblank_simulate: vblank timer overrun [ 3243.734698][ T2229] usb 7-1: new full-speed USB device number 105 using dummy_hcd [ 3243.900744][ T2229] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3243.912273][ T2229] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3243.930718][ T2229] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 3243.941500][ T2229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3243.952174][ T2229] usb 7-1: Product: syz [ 3243.969092][ T2229] usb 7-1: Manufacturer: syz [ 3243.992304][ T2229] usb 7-1: SerialNumber: syz [ 3244.016491][ T2229] usb 7-1: config 0 descriptor?? [ 3244.129056][ C1] kye 0003:0458:5011.0036: usb_submit_urb(ctrl) failed: -1 [ 3244.322923][T14763] xt_hashlimit: size too large, truncated to 1048576 [ 3244.979919][T13367] usb 3-1: USB disconnect, device number 113 [ 3245.289526][T14785] fuse: Bad value for 'fd' [ 3246.067129][T13367] usb 7-1: USB disconnect, device number 105 [ 3248.414249][ T5642] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3248.444403][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 3248.444423][ T30] audit: type=1326 audit(1752150749.640:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3248.477461][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3248.487316][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3248.544836][ T30] audit: type=1326 audit(1752150749.640:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3248.567360][ C0] vkms_vblank_simulate: vblank timer overrun [ 3248.634755][ T30] audit: type=1326 audit(1752150749.650:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3248.769991][ T5642] usb 3-1: config 0 has no interfaces? [ 3248.785371][ T30] audit: type=1326 audit(1752150749.650:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3248.809139][ T5642] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3248.819883][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3248.838295][ T5642] usb 3-1: Product: syz [ 3248.845435][ T5642] usb 3-1: Manufacturer: syz [ 3248.857816][ T5642] usb 3-1: SerialNumber: syz [ 3248.873931][ T30] audit: type=1326 audit(1752150749.650:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3248.899039][ T5642] usb 3-1: config 0 descriptor?? [ 3248.938362][ T30] audit: type=1326 audit(1752150749.650:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3248.997888][ T30] audit: type=1326 audit(1752150749.650:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3249.020324][ C0] vkms_vblank_simulate: vblank timer overrun [ 3249.068471][ T30] audit: type=1326 audit(1752150749.650:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3249.103376][ T30] audit: type=1326 audit(1752150749.650:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3249.130977][T14820] netlink: 'syz.2.8714': attribute type 12 has an invalid length. [ 3249.141161][T14820] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.8714'. [ 3249.156678][ T30] audit: type=1326 audit(1752150749.650:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.5.8715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3250.975267][T13367] usb 3-1: USB disconnect, device number 114 [ 3251.598454][ T5642] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3251.758575][ T5642] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3251.783742][ T5642] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3251.800037][ T5642] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3251.838198][ T5642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3251.954473][T25161] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 3252.794597][T25161] usb 7-1: Using ep0 maxpacket: 16 [ 3254.929657][ T5642] usb 3-1: USB disconnect, device number 115 [ 3254.950246][T14843] delete_channel: no stack [ 3255.567702][T14884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3255.645622][T14884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3256.012271][T25161] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3256.021191][T25161] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3256.068497][T25161] usb 7-1: can't read configurations, error -71 [ 3256.420176][T14905] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3256.505804][T14902] libceph: resolve '4..' (ret=-3): failed [ 3256.515405][T14906] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3256.541270][T14906] x_tables: duplicate underflow at hook 3 [ 3257.731162][T14913] IPVS: Error connecting to the multicast addr [ 3258.341785][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 3258.341803][ T30] audit: type=1326 audit(1752150759.530:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3258.468866][ T30] audit: type=1326 audit(1752150759.530:6770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3258.580506][ T30] audit: type=1326 audit(1752150759.530:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3258.887426][ T30] audit: type=1326 audit(1752150759.530:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3258.974667][T13367] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 3259.180829][ T30] audit: type=1326 audit(1752150759.530:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3259.270053][T13367] usb 7-1: config 0 has no interfaces? [ 3259.300031][T13367] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3259.309516][T13367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.328364][T13367] usb 7-1: Product: syz [ 3259.333482][T13367] usb 7-1: Manufacturer: syz [ 3259.338321][T13367] usb 7-1: SerialNumber: syz [ 3259.349117][T13367] usb 7-1: config 0 descriptor?? [ 3259.387293][ T30] audit: type=1326 audit(1752150759.530:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3259.410511][T25161] usb 10-1: new full-speed USB device number 95 using dummy_hcd [ 3259.504863][ T30] audit: type=1326 audit(1752150759.530:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3259.634489][T14922] pimreg: entered allmulticast mode [ 3259.762152][T14935] @: renamed from vlan0 [ 3259.860214][T14935] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8734'. [ 3259.873556][T14935] 0ªX¹¦D: renamed from gretap0 [ 3259.889979][T14935] 0ªX¹¦D: entered allmulticast mode [ 3259.912860][T14935] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 3259.951681][T25161] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3260.036928][T25161] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3260.046396][T25161] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3260.057793][ T30] audit: type=1326 audit(1752150759.530:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3260.105793][T25161] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3260.147819][T25161] usb 10-1: config 0 descriptor?? [ 3260.547411][T25161] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3260.555710][T25161] dvb-usb: bulk message failed: -22 (3/0) [ 3260.567080][ T30] audit: type=1326 audit(1752150759.530:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3260.589580][ C0] vkms_vblank_simulate: vblank timer overrun [ 3260.605291][T25161] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3260.614810][ T30] audit: type=1326 audit(1752150759.530:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14915 comm="syz.0.8731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3260.637137][ C0] vkms_vblank_simulate: vblank timer overrun [ 3260.643743][T25161] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3260.674652][T25161] usb 10-1: media controller created [ 3260.681242][T25161] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3261.055803][T25161] dvb-usb: bulk message failed: -22 (6/0) [ 3261.064676][T25161] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3261.117268][T14927] netlink: 'syz.9.8733': attribute type 13 has an invalid length. [ 3261.209308][T14927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3261.221197][T14927] 8021q: adding VLAN 0 to HW filter on device team0 [ 3261.346022][T14927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3261.381851][T25161] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input120 [ 3261.430504][T25161] dvb-usb: schedule remote query interval to 150 msecs. [ 3261.484993][T25161] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3261.568822][T25159] usb 7-1: USB disconnect, device number 108 [ 3261.644073][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3261.713750][T25161] dvb-usb: error while querying for an remote control event. [ 3261.916309][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3261.943998][T25161] dvb-usb: error while querying for an remote control event. [ 3262.301720][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3262.336852][T25161] dvb-usb: error while querying for an remote control event. [ 3262.524377][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3262.530155][T25161] dvb-usb: error while querying for an remote control event. [ 3262.591460][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8738'. [ 3262.609296][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8738'. [ 3262.709831][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3262.716879][T25161] dvb-usb: error while querying for an remote control event. [ 3262.944652][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3262.953888][T25161] dvb-usb: error while querying for an remote control event. [ 3263.287570][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8738'. [ 3263.299696][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8738'. [ 3263.428089][T14952] IPv6: sit1: Disabled Multicast RS [ 3263.435171][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3263.442622][T25161] dvb-usb: error while querying for an remote control event. [ 3263.679800][T25161] dvb-usb: bulk message failed: -22 (1/0) [ 3263.687531][T25161] dvb-usb: error while querying for an remote control event. [ 3263.703562][ T9304] usb 10-1: USB disconnect, device number 95 [ 3263.841261][ T9304] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3264.297983][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8740'. [ 3264.310021][T14973] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 3264.318513][T14973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3265.032237][T14983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8743'. [ 3265.558330][T14993] Lens A: ================= START STATUS ================= [ 3265.594912][T14993] Lens A: Focus, Absolute: 0 [ 3265.599662][T14993] Lens A: ================== END STATUS ================== [ 3265.837303][T14993] futex_wake_op: syz.5.8743 tries to shift op by 32; fix this program [ 3265.904895][T15000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8741'. [ 3266.329076][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.337127][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3267.293013][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 3267.293034][ T30] audit: type=1326 audit(1752150768.470:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.564069][ T30] audit: type=1326 audit(1752150768.470:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.594783][ T30] audit: type=1326 audit(1752150768.480:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.620307][ T30] audit: type=1326 audit(1752150768.480:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.648258][ T30] audit: type=1326 audit(1752150768.480:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.683288][ T30] audit: type=1326 audit(1752150768.500:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.752791][ T30] audit: type=1326 audit(1752150768.500:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3267.785421][T25159] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 3267.964580][ T30] audit: type=1326 audit(1752150768.500:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3268.007552][T25159] usb 7-1: Using ep0 maxpacket: 16 [ 3268.027243][ T30] audit: type=1326 audit(1752150768.500:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3268.068337][ T30] audit: type=1326 audit(1752150768.510:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15015 comm="syz.0.8746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3268.730621][T15040] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 3270.793544][T25159] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3270.802446][T25159] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3270.884608][T25159] usb 7-1: can't read configurations, error -71 [ 3274.243491][T15105] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8752'. [ 3275.879033][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 3275.879046][ T30] audit: type=1326 audit(1752150777.090:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3276.105065][T25159] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 3276.368350][T25159] usb 10-1: Using ep0 maxpacket: 16 [ 3276.396178][ T30] audit: type=1326 audit(1752150777.090:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3276.415497][T15131] input: syz0 as /devices/virtual/input/input121 [ 3276.510178][ T30] audit: type=1326 audit(1752150777.090:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3276.561352][T15131] SET target dimension over the limit! [ 3276.710001][ T30] audit: type=1326 audit(1752150777.090:6884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3276.898466][ T30] audit: type=1326 audit(1752150777.090:6885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3277.119387][ T30] audit: type=1326 audit(1752150777.090:6886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3277.156314][ T30] audit: type=1326 audit(1752150777.090:6887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3277.178774][ C0] vkms_vblank_simulate: vblank timer overrun [ 3277.204194][ T30] audit: type=1326 audit(1752150777.090:6888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3277.226718][ C0] vkms_vblank_simulate: vblank timer overrun [ 3277.398668][ T30] audit: type=1326 audit(1752150777.090:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3277.888438][ T30] audit: type=1326 audit(1752150777.090:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.9.8763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3278.188637][T15141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3278.198204][T15141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3278.753663][T25159] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3278.762745][T25159] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3278.798309][T25159] usb 10-1: can't read configurations, error -71 [ 3281.386900][T15186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3281.396605][ T5642] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3281.718399][T15186] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3281.757914][ T5642] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3281.779315][ T5642] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3281.810413][ T5642] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3281.840300][ T5642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3282.604407][T15202] tipc: Failed to remove unknown binding: 66,1,1/3294908754:913758195/913758197 [ 3282.613694][T15202] tipc: Failed to remove unknown binding: 66,1,1/3294908754:913758195/913758197 [ 3283.581641][T15207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3283.598938][T15207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3283.892164][T15207] delete_channel: no stack [ 3284.594050][ T9304] usb 3-1: USB disconnect, device number 116 [ 3284.612287][T15178] delete_channel: no stack [ 3284.906788][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 3284.906806][ T30] audit: type=1326 audit(1752150786.120:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3284.935482][ C1] vkms_vblank_simulate: vblank timer overrun [ 3285.061357][ T30] audit: type=1326 audit(1752150786.120:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3285.116471][ T30] audit: type=1326 audit(1752150786.120:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3285.138845][ C1] vkms_vblank_simulate: vblank timer overrun [ 3285.300574][ T30] audit: type=1326 audit(1752150786.120:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3285.323055][ C1] vkms_vblank_simulate: vblank timer overrun [ 3285.482117][ T30] audit: type=1326 audit(1752150786.120:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3285.600951][T15233] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8779'. [ 3285.874317][ T30] audit: type=1326 audit(1752150786.120:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3285.933630][T15239] netlink: 'syz.5.8782': attribute type 20 has an invalid length. [ 3286.086340][ T30] audit: type=1326 audit(1752150786.120:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3286.160984][ T30] audit: type=1326 audit(1752150786.130:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3286.445946][ T30] audit: type=1326 audit(1752150786.130:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3286.585597][ T30] audit: type=1326 audit(1752150786.130:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15211 comm="syz.6.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27b38e929 code=0x7ffc0000 [ 3288.315220][T25161] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 3288.564452][T25161] usb 10-1: Using ep0 maxpacket: 16 [ 3289.615443][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8790'. [ 3289.962015][T15280] batadv_slave_0: entered promiscuous mode [ 3291.056579][T25161] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3291.089474][T25161] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3291.164380][T25161] usb 10-1: can't read configurations, error -71 [ 3291.262852][T15288] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8791'. [ 3291.447076][T15295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8792'. [ 3291.630679][T15298] netlink: 348 bytes leftover after parsing attributes in process `syz.2.8793'. [ 3291.640200][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 3291.640214][ T30] audit: type=1326 audit(1752150792.830:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3291.669128][ C0] vkms_vblank_simulate: vblank timer overrun [ 3291.714448][ T30] audit: type=1326 audit(1752150792.830:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3291.744830][ T30] audit: type=1326 audit(1752150792.830:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3291.767509][ C0] vkms_vblank_simulate: vblank timer overrun [ 3291.959232][ T30] audit: type=1326 audit(1752150792.830:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3291.994226][ T30] audit: type=1326 audit(1752150792.830:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f685af8d290 code=0x7ffc0000 [ 3292.017075][ C0] vkms_vblank_simulate: vblank timer overrun [ 3292.029493][ T30] audit: type=1326 audit(1752150792.840:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3292.051932][ C0] vkms_vblank_simulate: vblank timer overrun [ 3292.063070][ T30] audit: type=1326 audit(1752150792.840:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3292.085658][ C0] vkms_vblank_simulate: vblank timer overrun [ 3292.098963][ T30] audit: type=1326 audit(1752150792.840:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3292.124716][ T30] audit: type=1326 audit(1752150792.850:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3292.147293][ C0] vkms_vblank_simulate: vblank timer overrun [ 3292.288895][ T30] audit: type=1326 audit(1752150792.850:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15292 comm="syz.2.8793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3294.674968][ T9304] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3294.883620][ T9304] usb 3-1: Using ep0 maxpacket: 8 [ 3294.943204][ T9304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3295.101668][ T9304] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3295.170161][ T9304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3295.198054][ T9304] usb 3-1: config 0 descriptor?? [ 3295.342844][T15339] netlink: 156 bytes leftover after parsing attributes in process `syz.9.8801'. [ 3295.536607][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8800'. [ 3295.563253][T15338] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 3295.626672][ T9304] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3297.729142][T25161] usb 3-1: USB disconnect, device number 117 [ 3297.808345][T15353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3298.054657][ T5642] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 3298.457535][T15363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8805'. [ 3298.529826][ T5642] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3298.602292][ T5642] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3298.766219][ T5642] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3298.864672][ T5642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3298.883823][ T5642] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3299.521011][ T5642] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3299.541574][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8805'. [ 3299.977402][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8805'. [ 3301.203461][ T5642] usb 7-1: USB disconnect, device number 111 [ 3301.600474][T15394] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8809'. [ 3301.642129][T15395] tipc: Enabling of bearer rejected, already enabled [ 3301.726740][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8819'. [ 3301.788536][T15396] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3305.394424][ T9304] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3305.414406][ T5642] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 3305.558623][ T9304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3305.618429][ T9304] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3305.658774][ T9304] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3305.710348][ T5642] usb 10-1: config 0 has no interfaces? [ 3305.752062][ T9304] usb 3-1: config 1 has no interface number 1 [ 3305.761040][ T5642] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3305.770340][ T5642] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.781082][ T5642] usb 10-1: Product: syz [ 3305.785528][ T5642] usb 10-1: Manufacturer: syz [ 3305.790376][ T5642] usb 10-1: SerialNumber: syz [ 3305.798206][ T5642] usb 10-1: config 0 descriptor?? [ 3305.833352][ T9304] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3305.931232][ T9304] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3305.940607][ T9304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3305.950485][ T9304] usb 3-1: Product: syz [ 3305.955945][ T9304] usb 3-1: Manufacturer: syz [ 3305.960901][ T9304] usb 3-1: SerialNumber: syz [ 3306.142330][T15436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3306.152828][T15436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3306.201748][T15432] netlink: 'syz.2.8817': attribute type 1 has an invalid length. [ 3306.466424][T15432] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3306.532192][T15435] bond8: (slave gretap0): making interface the new active one [ 3306.573620][T15435] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 3306.699712][ T9304] usb 3-1: USB disconnect, device number 118 [ 3308.051230][T15470] input: syz1 as /devices/virtual/input/input122 [ 3308.146752][ T5642] usb 10-1: USB disconnect, device number 100 [ 3308.435079][T15476] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 3309.427776][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8828'. [ 3309.909573][ T5642] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 3310.252815][ T5642] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3310.269152][ T5642] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3310.305606][ T5642] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 3310.316529][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3310.334723][ T5642] usb 3-1: Product: syz [ 3310.347024][ T5642] usb 3-1: Manufacturer: syz [ 3310.465004][ T5642] usb 3-1: SerialNumber: syz [ 3310.486926][ T5642] usb 3-1: config 0 descriptor?? [ 3310.735259][T15484] xt_hashlimit: size too large, truncated to 1048576 [ 3311.832293][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8832'. [ 3311.872059][T15511] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 3311.890597][T15511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3312.580421][T15522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3312.628881][T15522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.328792][T25161] usb 3-1: USB disconnect, device number 119 [ 3313.916520][T15539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8839'. [ 3313.928762][T15539] misc userio: No port type given on /dev/userio [ 3313.938515][T15539] misc userio: The device must be registered before sending interrupts [ 3313.968719][T15539] netlink: 'syz.2.8839': attribute type 1 has an invalid length. [ 3314.126965][T15539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 3314.161089][T15541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3314.170759][T15541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3314.182449][T15541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3314.330094][T15541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3314.383533][T15541] bond9: (slave geneve3): making interface the new active one [ 3314.399359][T15541] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 3314.834216][T15542] bond9: entered promiscuous mode [ 3314.883051][T15542] geneve3: entered promiscuous mode [ 3316.140685][T15566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.149910][T15566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.601152][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8844'. [ 3316.610642][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8844'. [ 3316.619828][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8844'. [ 3319.194536][ T5642] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3319.438827][ T5642] usb 3-1: config 0 has no interfaces? [ 3319.544945][ T5642] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3319.560996][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.596894][ T5642] usb 3-1: Product: syz [ 3319.601082][ T5642] usb 3-1: Manufacturer: syz [ 3319.687242][ T5642] usb 3-1: SerialNumber: syz [ 3319.757306][ T5642] usb 3-1: config 0 descriptor?? [ 3319.991724][T15598] input: syz0 as /devices/virtual/input/input125 [ 3320.123382][T15606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8848'. [ 3320.123419][T15606] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8848'. [ 3320.123461][T15606] netlink: 216 bytes leftover after parsing attributes in process `syz.2.8848'. [ 3320.123477][T15606] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 3320.126588][T15606] input: syz1 as /devices/virtual/input/input124 [ 3320.517876][T15613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3320.531911][T15613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3320.571672][T15613] netlink: 'syz.5.8851': attribute type 12 has an invalid length. [ 3320.598511][T15613] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.8851'. [ 3322.501438][ T9304] usb 3-1: USB disconnect, device number 120 [ 3323.339026][T25159] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 3323.538831][T25159] usb 7-1: config 0 has no interfaces? [ 3323.557399][T25159] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3323.566785][T25159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3323.575524][T25159] usb 7-1: Product: syz [ 3323.579869][T25159] usb 7-1: Manufacturer: syz [ 3323.585089][T25159] usb 7-1: SerialNumber: syz [ 3323.682648][T25159] usb 7-1: config 0 descriptor?? [ 3324.136056][T15636] tls_set_device_offload_rx: netdev not found [ 3324.381086][T15654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3324.395343][ T5642] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 3324.397665][T15654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3324.607662][ T5642] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3324.623716][ T5642] usb 10-1: config 0 interface 0 has no altsetting 0 [ 3324.642709][ T5642] usb 10-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 3324.683153][ T5642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3324.736204][ T5642] usb 10-1: config 0 descriptor?? [ 3325.170037][ T5642] magicmouse 0003:05AC:0269.0037: unknown main item tag 0x0 [ 3325.180983][ T5642] magicmouse 0003:05AC:0269.0037: unknown main item tag 0x0 [ 3325.189168][ T5642] magicmouse 0003:05AC:0269.0037: unknown main item tag 0x0 [ 3325.220037][ T5642] magicmouse 0003:05AC:0269.0037: unknown main item tag 0x0 [ 3325.284723][ T5642] magicmouse 0003:05AC:0269.0037: unknown main item tag 0x0 [ 3325.432282][ T5642] magicmouse 0003:05AC:0269.0037: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.9-1/input0 [ 3325.525484][ T5642] usb 10-1: USB disconnect, device number 101 [ 3325.741113][T15661] fido_id[15661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 3326.509292][ T9304] usb 7-1: USB disconnect, device number 112 [ 3327.532124][T15651] delete_channel: no stack [ 3327.814851][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.824444][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.926657][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3327.935661][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3328.638022][T15695] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8865'. [ 3329.033614][T15702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8866'. [ 3329.069198][T15702] netlink: 'syz.2.8866': attribute type 10 has an invalid length. [ 3329.078455][T15702] veth1_vlan: entered allmulticast mode [ 3331.568776][T15733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3331.658852][T15733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3332.589144][T15742] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8872'. [ 3332.683636][T15744] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 3332.690227][T15744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3332.699074][T15744] vhci_hcd vhci_hcd.0: Device attached [ 3332.878116][T25159] vhci_hcd: vhci_device speed not set [ 3332.984462][T25159] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 3333.066460][T15752] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8873'. [ 3334.021284][T15745] vhci_hcd: connection reset by peer [ 3334.094408][ T7161] vhci_hcd: stop threads [ 3334.102823][ T7161] vhci_hcd: release socket [ 3334.133468][ T7161] vhci_hcd: disconnect device [ 3334.142998][T15752] @ (unregistering): left promiscuous mode [ 3335.498577][T15781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3335.508464][T15781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3335.523071][T15781] netlink: 'syz.5.8878': attribute type 12 has an invalid length. [ 3335.543558][T15781] netlink: 9472 bytes leftover after parsing attributes in process `syz.5.8878'. [ 3335.787399][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8879'. [ 3335.798256][T15788] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 3335.807633][T15788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3336.282664][T15789] syz.9.8880 (15789): drop_caches: 2 [ 3338.152513][T25159] vhci_hcd: vhci_device speed not set [ 3338.804423][ T9304] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 3338.971823][T15809] syz.2.8884: attempt to access beyond end of device [ 3338.971823][T15809] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3339.006369][ T9304] usb 10-1: Using ep0 maxpacket: 16 [ 3339.137401][T15816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3339.146778][T15816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3339.291027][ T9304] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3339.407897][ T9304] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 3339.423080][ T9304] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3339.446023][ T9304] usb 10-1: Product: syz [ 3339.450415][ T9304] usb 10-1: Manufacturer: syz [ 3339.607378][ T9304] usb 10-1: SerialNumber: syz [ 3339.646916][T13367] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 3339.809497][ T9304] usb 10-1: config 0 descriptor?? [ 3339.887083][ T9304] hub 10-1:0.0: bad descriptor, ignoring hub [ 3339.907638][T13367] usb 7-1: config 0 has no interfaces? [ 3339.915881][ T9304] hub 10-1:0.0: probe with driver hub failed with error -5 [ 3340.080206][T13367] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3340.139781][T13367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3340.201764][T13367] usb 7-1: Product: syz [ 3340.218296][T13367] usb 7-1: Manufacturer: syz [ 3340.255095][T13367] usb 7-1: SerialNumber: syz [ 3340.379090][T13367] usb 7-1: config 0 descriptor?? [ 3340.712184][T15818] input: syz1 as /devices/virtual/input/input126 [ 3341.145466][T25159] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3341.363772][T13367] usb 10-1: USB disconnect, device number 102 [ 3341.574743][T25159] usb 3-1: config 0 has no interfaces? [ 3341.628884][T15833] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3341.700785][T25159] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3341.746087][T25159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3341.819711][T25159] usb 3-1: Product: syz [ 3341.894331][T25159] usb 3-1: Manufacturer: syz [ 3342.023739][T25159] usb 3-1: SerialNumber: syz [ 3342.173488][T13367] usb 7-1: USB disconnect, device number 113 [ 3342.559029][T25159] usb 3-1: config 0 descriptor?? [ 3342.809583][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3342.819669][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3343.514458][ T5642] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 3343.694432][ T5642] usb 10-1: Using ep0 maxpacket: 16 [ 3343.728735][ T5642] usb 10-1: config 0 has no interfaces? [ 3343.735560][ T5642] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 3343.871341][ T5642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3343.951184][ T5642] usb 10-1: config 0 descriptor?? [ 3345.018840][T13367] usb 3-1: USB disconnect, device number 121 [ 3345.356947][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3345.397407][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3346.510863][ T5642] usb 10-1: USB disconnect, device number 103 [ 3346.596969][T15876] syz.6.8898: attempt to access beyond end of device [ 3346.596969][T15876] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3347.034121][T15883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3347.043966][T15883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3347.264602][ T5642] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 3347.459936][ T5642] usb 10-1: config 0 has no interfaces? [ 3347.470755][ T5642] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3347.530071][ T5642] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3347.560624][ T5642] usb 10-1: Product: syz [ 3347.685474][ T5642] usb 10-1: Manufacturer: syz [ 3347.711604][ T5642] usb 10-1: SerialNumber: syz [ 3347.762318][ T5642] usb 10-1: config 0 descriptor?? [ 3348.195085][T15884] input: syz1 as /devices/virtual/input/input127 [ 3349.565451][T15904] syz.6.8913: attempt to access beyond end of device [ 3349.565451][T15904] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3350.034348][T25161] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3350.358771][T25161] usb 3-1: Using ep0 maxpacket: 8 [ 3350.478159][T15912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3350.490761][T15912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3350.534119][T25161] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 3350.554736][T25161] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3350.591120][ T5642] usb 10-1: USB disconnect, device number 104 [ 3350.677506][T25161] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 3350.915182][T25161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3350.926785][T25161] usb 3-1: Product: syz [ 3350.936261][T25161] usb 3-1: Manufacturer: syz [ 3350.980231][T25161] usb 3-1: SerialNumber: syz [ 3351.107043][T15919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3351.128405][T25161] usb 3-1: config 0 descriptor?? [ 3351.159329][T25161] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 3351.364522][T25161] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 3351.372458][T25161] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 3351.424348][T25161] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 3353.435471][T15910] delete_channel: no stack [ 3353.815640][T15951] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3354.153478][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8911'. [ 3355.389662][T25159] usb 3-1: USB disconnect, device number 122 [ 3356.036152][T15972] team_slave_0: left promiscuous mode [ 3356.048480][T15972] team0: Port device team_slave_0 removed [ 3356.101043][T15972] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 3356.101363][T15973] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8916'. [ 3356.137933][T15971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8915'. [ 3357.428726][T15988] syz.0.8919: attempt to access beyond end of device [ 3357.428726][T15988] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3357.576454][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3357.585061][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 3357.585082][ T30] audit: type=1326 audit(1752150858.790:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3357.585145][ T30] audit: type=1326 audit(1752150858.790:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3357.685929][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3357.872788][ T30] audit: type=1326 audit(1752150858.790:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3357.909585][ T30] audit: type=1326 audit(1752150858.790:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3357.935174][ T30] audit: type=1326 audit(1752150858.790:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3358.067099][ T30] audit: type=1326 audit(1752150858.790:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3358.192628][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8921'. [ 3358.569921][ T30] audit: type=1326 audit(1752150858.790:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3358.753979][ T30] audit: type=1326 audit(1752150858.790:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3358.910606][ T30] audit: type=1326 audit(1752150858.790:7029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3358.925397][T25159] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 3358.973391][ T30] audit: type=1326 audit(1752150858.790:7030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15989 comm="syz.5.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f50d4b8e929 code=0x7ffc0000 [ 3359.062249][T15994] delete_channel: no stack [ 3359.259959][T25159] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3359.280900][T25159] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3359.301404][T25159] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3359.321470][T25159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3360.752405][T16022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3361.697261][T16026] pim6reg: entered allmulticast mode [ 3361.708232][T16026] pim6reg: left allmulticast mode [ 3361.989628][T25159] usb 7-1: USB disconnect, device number 114 [ 3361.996326][T16002] delete_channel: no stack [ 3362.449642][T16033] syz.6.8928: attempt to access beyond end of device [ 3362.449642][T16033] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3363.017731][T16044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3363.043637][T16044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3363.201602][T16044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3363.211435][T16048] input: syz0 as /devices/virtual/input/input128 [ 3364.025141][T25161] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 3364.197612][T25161] usb 10-1: config 0 has no interfaces? [ 3364.209610][T25161] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3364.384376][T25161] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3364.413520][T25161] usb 10-1: Product: syz [ 3364.422974][T25161] usb 10-1: Manufacturer: syz [ 3364.428397][T25161] usb 10-1: SerialNumber: syz [ 3364.456271][T25161] usb 10-1: config 0 descriptor?? [ 3364.770465][T16051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3364.790057][T16051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3364.809711][T16051] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8932'. [ 3365.092827][T16069] syz.0.8934: attempt to access beyond end of device [ 3365.092827][T16069] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3365.669386][T16067] netlink: 'syz.6.8935': attribute type 20 has an invalid length. [ 3366.490191][T13367] usb 10-1: USB disconnect, device number 105 [ 3366.501195][T16082] Cannot find add_set index 0 as target [ 3366.804541][T25161] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 3366.985429][T25161] usb 3-1: Using ep0 maxpacket: 8 [ 3366.994498][T25159] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 3367.159057][T25159] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3367.173915][T25159] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3367.190656][T25159] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3367.215784][T25159] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3367.352787][T13367] usb 7-1: new full-speed USB device number 115 using dummy_hcd [ 3367.583319][T25161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3367.622762][T25161] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3367.666300][T13367] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3367.685843][T13367] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3367.728386][T13367] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3367.746964][T25161] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3367.773768][T25161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3367.831217][T25161] usb 3-1: config 0 descriptor?? [ 3367.880793][T13367] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 3367.954847][T13367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3368.155429][T13367] usb 7-1: config 0 descriptor?? [ 3368.492040][T16107] usb usb8: usbfs: process 16107 (syz.5.8941) did not claim interface 0 before use [ 3368.723012][T16089] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8939'. [ 3368.738178][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8939'. [ 3369.290635][T13367] usbhid 7-1:0.0: can't add hid device: -71 [ 3369.305084][T13367] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3369.326839][T13367] usb 7-1: USB disconnect, device number 115 [ 3369.927711][T16082] could not allocate digest TFM handle poly1305-simd [ 3370.041719][T25161] usb 10-1: USB disconnect, device number 106 [ 3370.048518][T16085] delete_channel: no stack [ 3370.514378][T25159] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 3370.595296][T16124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8944'. [ 3370.773115][T25159] usb 10-1: config 0 has no interfaces? [ 3370.813192][T25159] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3370.826520][T25159] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3370.836282][T25159] usb 10-1: Product: syz [ 3370.840921][T25159] usb 10-1: Manufacturer: syz [ 3370.863728][T13367] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 3370.922514][T25159] usb 10-1: SerialNumber: syz [ 3370.960646][T25159] usb 10-1: config 0 descriptor?? [ 3371.364499][T13367] usb 7-1: Using ep0 maxpacket: 16 [ 3372.050441][T25161] usb 3-1: USB disconnect, device number 123 [ 3373.930656][ T9304] usb 10-1: USB disconnect, device number 107 [ 3374.078171][T13367] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3374.093870][T13367] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3374.162115][T13367] usb 7-1: can't read configurations, error -71 [ 3374.675698][T16157] sctp: [Deprecated]: syz.6.8950 (pid 16157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3374.675698][T16157] Use struct sctp_sack_info instead [ 3375.043380][T13367] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 3375.051498][T25161] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 3375.211638][T13367] usb 7-1: config index 0 descriptor too short (expected 8192, got 441) [ 3375.227555][T13367] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3375.249922][T13367] usb 7-1: config 0 has no interfaces? [ 3375.263143][T13367] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 3375.374426][T25161] usb 10-1: Using ep0 maxpacket: 8 [ 3375.395383][T13367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3375.442106][T25161] usb 10-1: config 6 has an invalid interface number: 2 but max is 0 [ 3375.495793][T25161] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 3375.531432][T13367] usb 7-1: config 0 descriptor?? [ 3375.554263][T25161] usb 10-1: config 6 has no interface number 0 [ 3375.587424][T25161] usb 10-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3375.785053][ T5642] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 3375.826864][T25161] usb 10-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 3375.904363][T25161] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3375.912683][T25161] usb 10-1: Product: syz [ 3375.949733][T25161] usb 10-1: Manufacturer: syz [ 3375.961699][T25161] usb 10-1: SerialNumber: syz [ 3376.160398][ T5642] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3376.173792][T25161] hso 10-1:6.2: Failed to find INT IN ep [ 3376.192755][ T5642] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3376.220978][ T5642] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3376.240819][ T5642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3376.779892][T16177] xt_hashlimit: max too large, truncated to 1048576 [ 3376.787238][T16177] xt_bpf: check failed: parse error [ 3377.992834][ T9304] usb 10-1: USB disconnect, device number 108 [ 3378.668787][T13367] usb 7-1: string descriptor 0 read error: -71 [ 3378.828367][T13367] usb 7-1: USB disconnect, device number 117 [ 3380.383368][T16211] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 3380.920995][T16164] delete_channel: no stack [ 3380.928048][T25161] usb 3-1: USB disconnect, device number 124 [ 3382.217707][T16223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3382.228529][T16223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3383.795709][T16239] syzkaller0: entered promiscuous mode [ 3383.843719][T16239] syzkaller0: entered allmulticast mode [ 3384.584458][T25161] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 3385.218390][T25161] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3385.320271][T25161] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3385.405051][T25161] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3385.414150][T25161] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3386.434312][ T5642] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 3386.622429][ T5642] usb 3-1: config 0 has no interfaces? [ 3386.737063][ T5642] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3386.746442][ T5642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3386.788301][ T5642] usb 3-1: Product: syz [ 3386.794063][ T5642] usb 3-1: Manufacturer: syz [ 3386.803032][ T5642] usb 3-1: SerialNumber: syz [ 3386.852433][ T5642] usb 3-1: config 0 descriptor?? [ 3387.101909][T16268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8968'. [ 3388.779069][T16253] delete_channel: no stack [ 3388.974406][ T9304] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 3389.218985][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.228889][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.306575][ T9304] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3389.358881][ T9304] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3389.399484][ T9304] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3389.543523][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 3389.543541][ T30] audit: type=1326 audit(1752150890.750:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3389.589241][ T9304] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3389.604545][ T30] audit: type=1326 audit(1752150890.750:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3389.860662][ T30] audit: type=1326 audit(1752150890.750:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.083250][ T30] audit: type=1326 audit(1752150890.760:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.105879][ C0] vkms_vblank_simulate: vblank timer overrun [ 3390.154324][ T30] audit: type=1326 audit(1752150890.760:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.236395][ T9304] usb 3-1: USB disconnect, device number 125 [ 3390.319446][ T30] audit: type=1326 audit(1752150890.760:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.415935][ T30] audit: type=1326 audit(1752150890.760:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.438247][ C0] vkms_vblank_simulate: vblank timer overrun [ 3390.447314][ T30] audit: type=1326 audit(1752150890.940:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.469754][ C0] vkms_vblank_simulate: vblank timer overrun [ 3390.480782][ T30] audit: type=1326 audit(1752150890.940:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3390.503250][ C0] vkms_vblank_simulate: vblank timer overrun [ 3390.519924][ T30] audit: type=1326 audit(1752150890.970:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.0.8971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3392.967592][ T5642] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 3393.192519][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 3393.199723][ T5642] usb 3-1: no configurations [ 3393.205301][ T5642] usb 3-1: can't read configurations, error -22 [ 3393.382365][ T5642] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 3393.668365][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 3393.676803][ T5642] usb 3-1: no configurations [ 3393.681579][ T5642] usb 3-1: can't read configurations, error -22 [ 3393.692119][ T5642] usb usb3-port1: attempt power cycle [ 3394.076593][ T5642] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 3394.102371][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 3394.108129][ T5642] usb 3-1: no configurations [ 3394.112813][ T5642] usb 3-1: can't read configurations, error -22 [ 3394.263413][ T5642] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 3394.290753][ T5642] usb 3-1: Using ep0 maxpacket: 32 [ 3394.297170][ T5642] usb 3-1: no configurations [ 3394.301974][ T5642] usb 3-1: can't read configurations, error -22 [ 3394.309657][ T5642] usb usb3-port1: unable to enumerate USB device [ 3395.650255][T13367] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 3395.755453][ T5642] usb 10-1: USB disconnect, device number 109 [ 3395.765573][T16286] delete_channel: no stack [ 3395.844597][T13367] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 3395.853079][T13367] usb 3-1: config 0 has no interface number 0 [ 3395.864654][T13367] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 3395.897232][T13367] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 3396.105574][T16246] delete_channel: no stack [ 3396.110387][ T9304] usb 7-1: USB disconnect, device number 118 [ 3396.177598][T13367] usb 3-1: config 0 interface 255 has no altsetting 0 [ 3396.184902][T13367] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 3396.242805][T13367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3396.258725][T16317] netlink: 'syz.9.8978': attribute type 4 has an invalid length. [ 3396.295769][T13367] usb 3-1: config 0 descriptor?? [ 3396.311033][T13367] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 3396.471959][T16328] openvswitch: netlink: Missing valid actions attribute. [ 3396.549109][T16328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3396.559278][T16313] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 3396.656384][T16313] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 3396.982620][T16333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3397.014499][ T5642] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 3397.115163][T16333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3397.309143][T25161] usb 3-1: USB disconnect, device number 4 [ 3401.644321][ T5642] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 3401.773169][T16385] netlink: 'syz.9.8987': attribute type 4 has an invalid length. [ 3401.783424][T16385] netlink: 'syz.9.8987': attribute type 4 has an invalid length. [ 3402.260891][ T5642] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3402.294564][ T5642] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3402.303939][ T5642] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3402.440511][ T5642] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3404.137475][T16375] delete_channel: no stack [ 3404.151793][ T5642] usb 7-1: USB disconnect, device number 120 [ 3405.594560][T25161] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 3405.825398][T25161] usb 10-1: Using ep0 maxpacket: 16 [ 3405.841203][T25161] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3405.860525][T25161] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3405.903288][T16412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3405.918650][T16412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3405.948929][T16412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3405.962073][T16412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3406.009455][T25161] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3406.047972][T25161] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3406.062516][T25161] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3406.079189][T25161] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3406.090401][T25161] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3406.124260][T25161] usb 10-1: Manufacturer: syz [ 3406.155490][T25161] usb 10-1: config 0 descriptor?? [ 3406.210216][T16386] delete_channel: no stack [ 3406.425993][T13367] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 3406.718750][T25161] rc_core: IR keymap rc-hauppauge not found [ 3406.724960][T25161] Registered IR keymap rc-empty [ 3406.730136][T13367] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3406.730274][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3406.740354][T13367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3406.869629][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3406.895694][T25161] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 3406.916858][T25161] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input130 [ 3406.962516][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3406.994882][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.014504][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.037882][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.075849][T13367] usb 3-1: Product: syz [ 3407.119624][T13367] usb 3-1: Manufacturer: syz [ 3407.124991][T13367] usb 3-1: SerialNumber: syz [ 3407.130037][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.206100][T13367] usb 3-1: config 0 descriptor?? [ 3407.233408][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.267990][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.295946][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.316223][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.344472][T25161] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 3407.406741][T25161] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3407.421614][T25161] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3407.435106][T13367] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3409.434656][T25159] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 3409.818342][ T9304] usb 10-1: USB disconnect, device number 110 [ 3409.891154][T25159] usb 7-1: config 0 has no interfaces? [ 3409.911287][T25159] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3409.927535][T25159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3410.010919][T25159] usb 7-1: Product: syz [ 3410.019191][T25159] usb 7-1: Manufacturer: syz [ 3410.024032][T25159] usb 7-1: SerialNumber: syz [ 3410.043354][T25159] usb 7-1: config 0 descriptor?? [ 3410.339136][T16436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3410.348906][T16436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3410.524674][ T9304] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 3410.881707][ T9304] usb 10-1: config 0 has no interfaces? [ 3410.902337][ T9304] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3410.921960][ T9304] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3411.049077][ T9304] usb 10-1: Product: syz [ 3411.109147][ T9304] usb 10-1: Manufacturer: syz [ 3411.179546][T13367] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3411.198203][ T9304] usb 10-1: SerialNumber: syz [ 3411.276054][T13367] usb 3-1: USB disconnect, device number 5 [ 3411.318400][ T9304] usb 10-1: config 0 descriptor?? [ 3411.707057][T13367] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 3411.759546][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3411.769624][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3411.897024][T16462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3411.978210][T13367] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 3412.124984][T13367] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3412.156566][T13367] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 3412.188600][T13367] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 3412.220444][T13367] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3412.322110][T13367] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3412.679411][T13367] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3412.724506][T13367] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3412.864979][T13367] usb 3-1: Product: syz [ 3412.869649][T13367] usb 3-1: Manufacturer: syz [ 3412.878983][T13367] usb 3-1: SerialNumber: syz [ 3412.937249][T13367] usb 3-1: config 0 descriptor?? [ 3412.942932][T16457] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3412.964046][T25161] usb 7-1: USB disconnect, device number 121 [ 3412.965490][T13367] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3413.221844][T25161] usb 10-1: USB disconnect, device number 111 [ 3413.241526][T13367] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3413.775814][T16480] bond4: entered promiscuous mode [ 3413.872944][T16457] netlink: 'syz.2.9003': attribute type 1 has an invalid length. [ 3413.999817][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9003'. [ 3414.622817][T16488] 8021q: adding VLAN 0 to HW filter on device bond11 [ 3414.624133][T16488] bond10: (slave bond11): making interface the new active one [ 3414.628986][T16488] bond10: (slave bond11): Enslaving as an active interface with an up link [ 3414.755211][T16490] 8021q: adding VLAN 0 to HW filter on device bond10 [ 3416.095633][ T9304] usb 3-1: USB disconnect, device number 6 [ 3416.117330][ T9304] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 3416.513635][T16508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9011'. [ 3416.525543][T16508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9011'. [ 3416.668606][T16520] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9014'. [ 3416.685210][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3416.703104][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3417.048256][T16531] dlm: Unknown command passed to DLM device : 16 [ 3417.048256][T16531] [ 3417.834912][T25161] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 3418.200281][T25161] usb 3-1: config 0 has no interfaces? [ 3418.220281][T25161] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3418.279182][T25161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3418.384329][T25161] usb 3-1: Product: syz [ 3418.398887][T25161] usb 3-1: Manufacturer: syz [ 3418.411927][T25161] usb 3-1: SerialNumber: syz [ 3418.471064][T25161] usb 3-1: config 0 descriptor?? [ 3418.923450][T16540] program syz.2.9017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3418.966543][T16556] syz.0.9020: attempt to access beyond end of device [ 3418.966543][T16556] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3420.674367][T25161] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 3420.877999][T25161] usb 10-1: config 0 has no interfaces? [ 3420.927734][T25161] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3420.943063][T25161] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3420.998332][ T9304] usb 3-1: USB disconnect, device number 7 [ 3421.171240][T25161] usb 10-1: Product: syz [ 3421.192815][T25161] usb 10-1: Manufacturer: syz [ 3421.208831][T25161] usb 10-1: SerialNumber: syz [ 3421.231287][T25161] usb 10-1: config 0 descriptor?? [ 3421.435287][T16584] netlink: 'syz.5.9021': attribute type 4 has an invalid length. [ 3421.461292][T16567] input: syz0 as /devices/virtual/input/input132 [ 3421.522038][T16585] netlink: 'syz.5.9021': attribute type 4 has an invalid length. [ 3421.733600][T16567] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9022'. [ 3421.892549][T16587] input: syz1 as /devices/virtual/input/input131 [ 3422.774511][T16593] openvswitch: netlink: Key 12 has unexpected len 644 expected 2 [ 3423.569062][ T9304] usb 10-1: USB disconnect, device number 112 [ 3424.016656][T16595] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9028'. [ 3424.108614][T16599] netlink: 44 bytes leftover after parsing attributes in process `syz.9.9028'. [ 3424.154007][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9027'. [ 3424.423081][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9027'. [ 3424.433085][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9027'. [ 3425.057017][T16578] delete_channel: no stack [ 3425.162550][T16621] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 3425.171014][T16621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 3425.188431][T16621] vhci_hcd vhci_hcd.0: Device attached [ 3425.424409][ T9304] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 3425.552577][T16624] netdevsim netdevsim5: Direct firmware load for @ failed with error -2 [ 3425.601489][T16624] netdevsim netdevsim5: Falling back to sysfs fallback for: @ [ 3425.971809][T16622] vhci_hcd: connection reset by peer [ 3426.051825][ T9292] vhci_hcd: stop threads [ 3426.056543][ T9292] vhci_hcd: release socket [ 3426.065077][ T9292] vhci_hcd: disconnect device [ 3426.522449][T16646] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9035'. [ 3427.724449][ T5642] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 3427.896550][ T5642] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3427.911835][ T5642] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3428.010121][ T5642] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3428.020266][ T5642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3428.140370][T16668] syz.2.9039: attempt to access beyond end of device [ 3428.140370][T16668] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3428.615738][T13367] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 3429.049245][T13367] usb 7-1: Using ep0 maxpacket: 16 [ 3429.098642][T13367] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 3429.124820][T13367] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 3429.194589][T13367] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 3429.269587][T13367] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 3429.352825][T13367] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.534417][T13367] usb 7-1: Product: syz [ 3429.547775][T13367] usb 7-1: Manufacturer: syz [ 3429.602849][T13367] usb 7-1: SerialNumber: syz [ 3429.611858][T13367] usb 7-1: config 0 descriptor?? [ 3429.637697][T16673] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 3429.747193][T13367] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 3429.756702][T13367] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 3429.763635][T13367] mcba_usb 7-1:0.0 can0: failed tx_urb -90 [ 3429.770221][T13367] mcba_usb 7-1:0.0 can0: Failed to send cmd (169) [ 3429.778186][T13367] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 3430.774808][ T9304] vhci_hcd: vhci_device speed not set [ 3430.888662][T16694] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3430.971944][T16652] delete_channel: no stack [ 3430.977939][T13367] usb 10-1: USB disconnect, device number 113 [ 3431.378841][T16704] netlink: 'syz.9.9046': attribute type 1 has an invalid length. [ 3431.448811][T16704] bond5: entered promiscuous mode [ 3431.454492][T16704] bond5: entered allmulticast mode [ 3431.461697][T16704] 8021q: adding VLAN 0 to HW filter on device bond5 [ 3431.494925][T16704] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 3431.661612][ T5642] usb 7-1: USB disconnect, device number 122 [ 3431.669719][ T5642] mcba_usb 7-1:0.0 can0: device disconnected [ 3432.006747][T16712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3432.021886][T16712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3433.770841][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9050'. [ 3434.404687][T13367] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 3434.641960][T16754] syz.0.9052 (16754): drop_caches: 2 [ 3434.992039][T13367] usb 3-1: config 0 has no interfaces? [ 3435.014858][T13367] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3435.024069][T13367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3435.039302][T13367] usb 3-1: Product: syz [ 3435.052030][T13367] usb 3-1: Manufacturer: syz [ 3435.159673][T13367] usb 3-1: SerialNumber: syz [ 3435.183150][T13367] usb 3-1: config 0 descriptor?? [ 3435.354315][ T5642] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 3435.561951][ T5642] usb 10-1: Using ep0 maxpacket: 16 [ 3437.815347][T28628] usb 3-1: USB disconnect, device number 8 [ 3437.915855][ T5642] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3437.934568][T25161] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 3437.950157][ T5642] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3437.974943][ T5642] usb 10-1: can't read configurations, error -71 [ 3438.126714][T25161] usb 7-1: config 0 has no interfaces? [ 3438.147977][T25161] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3438.168868][T25161] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3438.221568][T16793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3438.230986][T16793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3438.249947][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9059'. [ 3438.259221][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9059'. [ 3438.314385][T25161] usb 7-1: Product: syz [ 3438.322810][T25161] usb 7-1: Manufacturer: syz [ 3438.328960][T25161] usb 7-1: SerialNumber: syz [ 3438.427243][T25161] usb 7-1: config 0 descriptor?? [ 3438.704921][T16782] netlink: 'syz.6.9056': attribute type 12 has an invalid length. [ 3438.712760][T16782] netlink: 9472 bytes leftover after parsing attributes in process `syz.6.9056'. [ 3438.835236][ T5642] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 3438.878376][T16803] hsr0: entered promiscuous mode [ 3438.887136][T16803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9060'. [ 3438.907059][T16803] hsr_slave_0: left promiscuous mode [ 3438.915895][T16803] hsr_slave_1: left promiscuous mode [ 3439.010452][T16797] syz.2.9057 (16797): drop_caches: 2 [ 3439.044510][ T5642] usb 10-1: Using ep0 maxpacket: 16 [ 3439.057716][ T5642] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 3439.067114][ T5642] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 3439.076305][ T5642] usb 10-1: SerialNumber: syz [ 3439.084943][T16803] hsr0 (unregistering): left promiscuous mode [ 3439.098154][ T5642] usb 10-1: config 0 descriptor?? [ 3439.121780][T16797] syz.2.9057 (16797): drop_caches: 2 [ 3439.125596][ T5642] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 3439.162751][ T5642] usb 10-1: Detected FT232A [ 3439.185834][ T5642] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3439.201226][T16797] netlink: 'syz.2.9057': attribute type 7 has an invalid length. [ 3439.275305][T16797] : entered promiscuous mode [ 3440.066611][T16811] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3440.364474][T25161] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 3440.582064][T25161] usb 3-1: Using ep0 maxpacket: 32 [ 3440.632149][ T5642] usb 7-1: USB disconnect, device number 123 [ 3440.658064][T25161] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 3440.696489][T25161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3441.172492][T25161] usb 3-1: config 0 descriptor?? [ 3441.435722][T25161] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 3441.940624][T28628] usb 10-1: USB disconnect, device number 115 [ 3441.950289][T25161] gspca_vc032x: reg_r err -110 [ 3441.961795][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3441.977189][T28628] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3442.064468][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.084550][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.091415][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.101309][T28628] ftdi_sio 10-1:0.0: device disconnected [ 3442.118784][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.153821][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.172645][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.218613][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.234434][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.259792][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.285798][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.316127][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.387933][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.394518][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.403470][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.413501][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.429928][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.481153][T25161] gspca_vc032x: I2c Bus Busy Wait 00 [ 3442.500319][T25161] gspca_vc032x: Unknown sensor... [ 3442.544643][T25161] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 3442.881073][T16838] syz.6.9065 (16838): drop_caches: 2 [ 3443.104360][ T9304] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 3443.300620][ T9304] usb 10-1: config 0 has no interfaces? [ 3443.327534][ T9304] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3443.380601][ T9304] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3443.399984][ T9304] usb 10-1: Product: syz [ 3443.437991][ T9304] usb 10-1: Manufacturer: syz [ 3443.459494][ T9304] usb 10-1: SerialNumber: syz [ 3443.492700][ T9304] usb 10-1: config 0 descriptor?? [ 3443.695790][ T9304] usb 3-1: USB disconnect, device number 9 [ 3443.786547][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9067'. [ 3443.796024][T16835] netlink: 48 bytes leftover after parsing attributes in process `syz.9.9067'. [ 3444.174712][T13367] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 3444.875562][T13367] usb 3-1: config 0 has no interfaces? [ 3444.898794][T13367] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3444.922016][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3444.931917][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3444.946931][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3444.956040][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3444.996200][T13367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3445.042520][T13367] usb 3-1: Product: syz [ 3445.047416][T13367] usb 3-1: Manufacturer: syz [ 3445.052128][T13367] usb 3-1: SerialNumber: syz [ 3445.118639][T13367] usb 3-1: config 0 descriptor?? [ 3445.331463][T16845] netlink: 'syz.2.9068': attribute type 12 has an invalid length. [ 3445.341587][T16845] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.9068'. [ 3446.723051][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 3446.723068][ T30] audit: type=1326 audit(1752150947.940:7097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3446.868076][T25161] usb 10-1: USB disconnect, device number 116 [ 3446.920331][T28628] usb 3-1: USB disconnect, device number 10 [ 3446.957293][ T30] audit: type=1326 audit(1752150947.950:7098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3446.995334][ T30] audit: type=1326 audit(1752150947.950:7099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3447.121124][ T30] audit: type=1326 audit(1752150947.950:7100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3447.285273][ T30] audit: type=1326 audit(1752150947.950:7101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3447.434016][ T30] audit: type=1326 audit(1752150948.000:7102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3447.569652][ T30] audit: type=1326 audit(1752150948.000:7103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16865 comm="syz.0.9073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3447.864846][T16885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3448.325591][T16882] sctp: [Deprecated]: syz.9.9074 (pid 16882) Use of int in maxseg socket option. [ 3448.325591][T16882] Use struct sctp_assoc_value instead [ 3448.630349][T16898] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3449.288939][ T30] audit: type=1326 audit(1752150950.510:7104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.2.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3449.334895][ T30] audit: type=1326 audit(1752150950.510:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.2.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3449.584342][ T9304] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 3449.619843][ T30] audit: type=1326 audit(1752150950.760:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16905 comm="syz.2.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f685af8e929 code=0x7ffc0000 [ 3449.992247][ T9304] usb 3-1: Using ep0 maxpacket: 16 [ 3450.660899][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.667357][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.934411][T25161] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 3450.989790][T16930] netlink: 'syz.5.9083': attribute type 3 has an invalid length. [ 3451.106881][T25161] usb 10-1: config 0 has no interfaces? [ 3451.118625][T25161] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3451.204457][T25161] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3451.271183][T16934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3451.281929][T16934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3451.404835][T25161] usb 10-1: Product: syz [ 3451.421810][T25161] usb 10-1: Manufacturer: syz [ 3451.426878][T25161] usb 10-1: SerialNumber: syz [ 3451.570778][T25161] usb 10-1: config 0 descriptor?? [ 3451.838475][T16924] netlink: 'syz.9.9082': attribute type 12 has an invalid length. [ 3451.851914][T16924] netlink: 9472 bytes leftover after parsing attributes in process `syz.9.9082'. [ 3452.153423][ T9304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3452.182519][ T9304] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3452.201949][ T9304] usb 3-1: can't read configurations, error -71 [ 3453.578767][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9084'. [ 3453.587943][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9084'. [ 3453.658531][T13367] usb 10-1: USB disconnect, device number 117 [ 3454.322904][T16956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3454.332376][T16956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3455.211040][T16965] syz.6.9089: attempt to access beyond end of device [ 3455.211040][T16965] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3456.189339][T16981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9092'. [ 3456.623303][T16986] syz.6.9093: attempt to access beyond end of device [ 3456.623303][T16986] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3457.458259][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 3457.458276][ T30] audit: type=1326 audit(1752150958.650:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3457.498265][ T30] audit: type=1326 audit(1752150958.650:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3457.619610][ T30] audit: type=1326 audit(1752150958.650:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3457.683395][ T30] audit: type=1326 audit(1752150958.650:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3457.767808][ T30] audit: type=1326 audit(1752150958.650:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3457.932823][ T30] audit: type=1326 audit(1752150958.650:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3458.011426][ T30] audit: type=1326 audit(1752150958.650:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3458.034199][ C1] vkms_vblank_simulate: vblank timer overrun [ 3458.170544][T17002] netlink: 'syz.5.9095': attribute type 4 has an invalid length. [ 3458.205578][ T30] audit: type=1326 audit(1752150958.650:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3458.229268][ T30] audit: type=1326 audit(1752150958.650:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3458.251709][ C1] vkms_vblank_simulate: vblank timer overrun [ 3458.522097][ T30] audit: type=1326 audit(1752150958.650:7139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16990 comm="syz.0.9094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb2aa98e929 code=0x7ffc0000 [ 3458.616370][T17009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3458.640015][T17009] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9098'. [ 3458.794510][ T9304] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 3459.009098][ T9304] usb 3-1: config 0 has no interfaces? [ 3459.016853][ T9304] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3459.026617][ T9304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3459.055726][ T9304] usb 3-1: Product: syz [ 3459.061511][ T9304] usb 3-1: Manufacturer: syz [ 3459.068411][ T9304] usb 3-1: SerialNumber: syz [ 3459.083761][ T9304] usb 3-1: config 0 descriptor?? [ 3459.149490][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9099'. [ 3459.331442][T17007] netlink: 'syz.2.9097': attribute type 12 has an invalid length. [ 3459.339655][T17007] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.9097'. [ 3459.463697][T17023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3459.690306][T17027] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9100'. [ 3459.730233][T17027] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 3461.251977][T28628] usb 3-1: USB disconnect, device number 13 [ 3461.894358][T28628] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 3462.004927][T13367] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 3462.245897][T13367] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3462.273471][T13367] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3462.411050][T28628] usb 10-1: config 0 has no interfaces? [ 3462.457153][T28628] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3462.457523][T13367] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3462.524702][T28628] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3462.526859][T13367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3462.551540][T28628] usb 10-1: Product: syz [ 3462.571862][T28628] usb 10-1: Manufacturer: syz [ 3462.625402][T28628] usb 10-1: SerialNumber: syz [ 3462.637057][T17049] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3462.647334][T13367] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3462.780554][T28628] usb 10-1: config 0 descriptor?? [ 3464.513733][T17073] overlayfs: missing 'lowerdir' [ 3464.816846][T28628] usb 10-1: USB disconnect, device number 118 [ 3464.883669][T17079] netlink: 'syz.5.9111': attribute type 21 has an invalid length. [ 3464.893676][T17079] netlink: 'syz.5.9111': attribute type 6 has an invalid length. [ 3464.903312][T17079] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9111'. [ 3464.947866][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 3464.947884][ T30] audit: type=1326 audit(1752150966.170:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.009567][ T30] audit: type=1326 audit(1752150966.230:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.071238][ T30] audit: type=1326 audit(1752150966.230:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.114277][ T30] audit: type=1326 audit(1752150966.230:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.164619][T28628] usb 3-1: USB disconnect, device number 14 [ 3465.192620][ T30] audit: type=1326 audit(1752150966.230:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.215237][ C1] vkms_vblank_simulate: vblank timer overrun [ 3465.248642][ T30] audit: type=1326 audit(1752150966.230:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.276649][T13367] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 3465.303783][ T30] audit: type=1326 audit(1752150966.230:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.359280][ T30] audit: type=1326 audit(1752150966.230:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.381793][ C1] vkms_vblank_simulate: vblank timer overrun [ 3465.389643][ T30] audit: type=1326 audit(1752150966.230:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.414618][ T30] audit: type=1326 audit(1752150966.230:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17077 comm="syz.9.9112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54a58e929 code=0x7ffc0000 [ 3465.437057][ C1] vkms_vblank_simulate: vblank timer overrun [ 3465.486030][T13367] usb 10-1: Using ep0 maxpacket: 16 [ 3465.661710][T17090] tipc: Failed to remove unknown binding: 66,1,1/3294908754:1342049819/1342049821 [ 3465.727303][T17091] tipc: Failed to remove unknown binding: 66,1,1/3294908754:1342049819/1342049821 [ 3465.747996][T17091] tipc: Failed to remove unknown binding: 66,1,1/3294908754:1342049819/1342049821 [ 3465.788068][T17087] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3466.018937][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3466.028451][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3467.011929][T17105] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 3467.744820][T25161] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 3467.899290][T13367] usb 10-1: unable to get BOS descriptor or descriptor too short [ 3467.921491][T13367] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3467.939560][T13367] usb 10-1: can't read configurations, error -71 [ 3467.986664][T25161] usb 7-1: config 0 has no interfaces? [ 3468.001752][T25161] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3468.031542][T25161] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3468.082110][T25161] usb 7-1: Product: syz [ 3468.093777][T25161] usb 7-1: Manufacturer: syz [ 3468.099961][T25161] usb 7-1: SerialNumber: syz [ 3468.110346][T25161] usb 7-1: config 0 descriptor?? [ 3468.325770][T13367] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 3468.357803][T17108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3468.369507][T17108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3468.606595][T13367] usb 10-1: config 0 has no interfaces? [ 3468.616286][T13367] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3468.637731][T13367] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3468.700548][T13367] usb 10-1: Product: syz [ 3468.799688][T13367] usb 10-1: Manufacturer: syz [ 3468.812873][T13367] usb 10-1: SerialNumber: syz [ 3468.849853][T13367] usb 10-1: config 0 descriptor?? [ 3469.084527][T17113] netlink: 'syz.9.9119': attribute type 12 has an invalid length. [ 3469.094708][T17113] netlink: 9472 bytes leftover after parsing attributes in process `syz.9.9119'. [ 3469.734125][T28628] usb 7-1: USB disconnect, device number 124 [ 3469.942216][T17140] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3469.954557][T25161] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 3470.126129][T25161] usb 3-1: Using ep0 maxpacket: 8 [ 3470.136974][T25161] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3470.152053][T25161] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3470.289578][T25161] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3470.322124][T25161] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3470.370645][T17150] syz.5.9129: attempt to access beyond end of device [ 3470.370645][T17150] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3470.664886][T25161] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3470.674152][T25161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3471.436766][T28628] usb 10-1: USB disconnect, device number 120 [ 3471.623354][T25161] usb 3-1: GET_CAPABILITIES returned 0 [ 3471.654347][T25161] usbtmc 3-1:16.0: can't read capabilities [ 3472.234363][T25161] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 3472.368404][T17167] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9132'. [ 3472.465580][T25161] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3472.479175][T25161] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 3472.527747][T25161] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3472.984382][T25161] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3473.102736][T17175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9134'. [ 3473.641342][T17157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3473.801035][T17157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3473.821530][T25161] usb 3-1: USB disconnect, device number 15 [ 3475.498866][T13367] usb 10-1: USB disconnect, device number 121 [ 3476.117086][T17201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3476.435802][T17221] netlink: 'syz.9.9145': attribute type 8 has an invalid length. [ 3476.611968][T17225] netlink: 84 bytes leftover after parsing attributes in process `syz.6.9148'. [ 3477.107613][T25161] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 3477.387944][T25161] usb 3-1: Using ep0 maxpacket: 8 [ 3477.478334][T25161] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3477.488437][T25161] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3477.500282][T25161] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 3477.541737][T25161] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3477.568028][T17235] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 3477.907694][T17239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3478.220293][T25161] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3478.230758][T25161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3478.239900][T25161] usb 3-1: Product: syz [ 3478.244423][T25161] usb 3-1: Manufacturer: syz [ 3478.251373][T25161] usb 3-1: SerialNumber: syz [ 3478.645868][T17227] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3478.690255][T25161] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 3478.761254][T25161] usbtest 3-1:1.0: Linux user mode ISO test driver [ 3478.874399][T25161] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 3479.109647][T25161] usb 3-1: USB disconnect, device number 16 [ 3480.618889][T17268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3480.630125][T17268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3481.074947][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9160'. [ 3481.084903][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9160'. [ 3481.098540][T17278] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9160'. [ 3481.194616][T17279] netlink: 'syz.6.9157': attribute type 4 has an invalid length. [ 3481.448350][T17280] netlink: 'syz.6.9157': attribute type 4 has an invalid length. [ 3482.678099][T17257] delete_channel: no stack [ 3483.082385][T17291] gtp0: entered promiscuous mode [ 3483.088222][T17291] gtp0: entered allmulticast mode [ 3483.239646][T17293] syz.9.9164: attempt to access beyond end of device [ 3483.239646][T17293] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3484.076852][T17299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3484.169953][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 3484.169968][ T30] audit: type=1326 audit(1752150985.390:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17294 comm="syz.2.9165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f685af8e929 code=0x0 [ 3484.509968][ T9304] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 3484.799377][ T9304] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 3484.945119][ T9304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3484.957513][ T9304] usb 3-1: config 0 descriptor?? [ 3486.252600][T17324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3486.263458][T17324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3486.440055][T17326] syz.9.9171: attempt to access beyond end of device [ 3486.440055][T17326] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3486.617920][T17329] bridge5: entered promiscuous mode [ 3486.789243][ T9304] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 3486.801487][ T9304] [drm:udl_init] *ERROR* Selecting channel failed [ 3486.830811][ T9304] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 3486.853368][ T9304] [drm] Initialized udl on minor 2 [ 3486.880628][ T9304] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3486.955545][ T9304] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3486.990679][T13367] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 3487.006142][T13367] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 3487.022726][ T9304] usb 3-1: USB disconnect, device number 17 [ 3487.594729][T17350] syz.2.9178: attempt to access beyond end of device [ 3487.594729][T17350] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3488.123772][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9181'. [ 3489.702747][T17320] delete_channel: no stack [ 3489.912057][T17384] [ 3489.914444][T17384] ============================================ [ 3489.920597][T17384] WARNING: possible recursive locking detected [ 3489.926763][T17384] 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 Not tainted [ 3489.933863][T17384] -------------------------------------------- [ 3489.940006][T17384] syz.6.9187/17384 is trying to acquire lock: [ 3489.946091][T17384] ffff88807adbcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1a20 [ 3489.957330][T17384] [ 3489.957330][T17384] but task is already holding lock: [ 3489.964680][T17384] ffff88807adbcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 3489.974685][T17384] and the lock comparison function returns 0: [ 3489.980739][T17384] [ 3489.980739][T17384] other info that might help us debug this: [ 3489.988872][T17384] Possible unsafe locking scenario: [ 3489.988872][T17384] [ 3489.996305][T17384] CPU0 [ 3489.999652][T17384] ---- [ 3490.002913][T17384] lock(&dev_instance_lock_key#20); [ 3490.008201][T17384] lock(&dev_instance_lock_key#20); [ 3490.013476][T17384] [ 3490.013476][T17384] *** DEADLOCK *** [ 3490.013476][T17384] [ 3490.021629][T17384] May be due to missing lock nesting notation [ 3490.021629][T17384] [ 3490.029954][T17384] 2 locks held by syz.6.9187/17384: [ 3490.035130][T17384] #0: ffffffff8f51d808 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x1990 [ 3490.044081][T17384] #1: ffff88807adbcd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x1990 [ 3490.054341][T17384] [ 3490.054341][T17384] stack backtrace: [ 3490.060234][T17384] CPU: 1 UID: 0 PID: 17384 Comm: syz.6.9187 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) [ 3490.060249][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3490.060262][T17384] Call Trace: [ 3490.060272][T17384] [ 3490.060279][T17384] dump_stack_lvl+0x189/0x250 [ 3490.060299][T17384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3490.060311][T17384] ? __pfx__printk+0x10/0x10 [ 3490.060324][T17384] ? print_lock_name+0xde/0x100 [ 3490.060338][T17384] print_deadlock_bug+0x28b/0x2a0 [ 3490.060352][T17384] validate_chain+0x1a3f/0x2140 [ 3490.060368][T17384] __lock_acquire+0xab9/0xd20 [ 3490.060380][T17384] ? __netdev_update_features+0xcb1/0x1a20 [ 3490.060393][T17384] lock_acquire+0x120/0x360 [ 3490.060402][T17384] ? __netdev_update_features+0xcb1/0x1a20 [ 3490.060417][T17384] __mutex_lock+0x182/0xe80 [ 3490.060429][T17384] ? __netdev_update_features+0xcb1/0x1a20 [ 3490.060441][T17384] ? kasan_save_track+0x4f/0x80 [ 3490.060538][T17384] ? kasan_save_free_info+0x46/0x50 [ 3490.060553][T17384] ? __kasan_slab_free+0x62/0x70 [ 3490.060563][T17384] ? kmem_cache_free+0x18f/0x400 [ 3490.060596][T17384] ? netlink_broadcast_filtered+0x103c/0x1140 [ 3490.060633][T17384] ? ethnl_multicast+0xb6/0x100 [ 3490.060667][T17384] ? ethnl_default_notify+0x7c0/0x990 [ 3490.060678][T17384] ? ethnl_netdev_event+0xe2/0x160 [ 3490.060692][T17384] ? __netdev_update_features+0xcb1/0x1a20 [ 3490.060704][T17384] ? __lock_acquire+0xab9/0xd20 [ 3490.060714][T17384] ? __pfx___mutex_lock+0x10/0x10 [ 3490.060795][T17384] __netdev_update_features+0xcb1/0x1a20 [ 3490.060825][T17384] ? __pfx___netdev_update_features+0x10/0x10 [ 3490.060839][T17384] ? __wake_up_common_lock+0x190/0x1f0 [ 3490.060857][T17384] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 3490.060950][T17384] ? netlink_broadcast_filtered+0x10c6/0x1140 [ 3490.060962][T17384] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 3490.060975][T17384] ? __lock_acquire+0xab9/0xd20 [ 3490.060988][T17384] ? do_raw_spin_lock+0x121/0x290 [ 3490.061002][T17384] netdev_update_features+0x6d/0xe0 [ 3490.061041][T17384] ? __pfx_netdev_update_features+0x10/0x10 [ 3490.061054][T17384] macsec_notify+0x2f5/0x660 [ 3490.061124][T17384] ? __pfx_macsec_notify+0x10/0x10 [ 3490.061137][T17384] notifier_call_chain+0x1b3/0x3e0 [ 3490.061161][T17384] netdev_features_change+0x85/0xc0 [ 3490.061172][T17384] ? __pfx_netdev_features_change+0x10/0x10 [ 3490.061182][T17384] ? security_capable+0x7e/0x2e0 [ 3490.061248][T17384] dev_ethtool+0x1520/0x1990 [ 3490.061264][T17384] ? __pfx_dev_ethtool+0x10/0x10 [ 3490.061281][T17384] ? dev_load+0x21/0x1f0 [ 3490.061317][T17384] dev_ioctl+0x392/0x1150 [ 3490.061327][T17384] sock_do_ioctl+0x22c/0x300 [ 3490.061383][T17384] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3490.061398][T17384] ? __lock_acquire+0xab9/0xd20 [ 3490.061411][T17384] sock_ioctl+0x576/0x790 [ 3490.061427][T17384] ? __pfx_sock_ioctl+0x10/0x10 [ 3490.061441][T17384] ? __fget_files+0x2a/0x420 [ 3490.061480][T17384] ? __fget_files+0x3a0/0x420 [ 3490.061493][T17384] ? __fget_files+0x2a/0x420 [ 3490.061506][T17384] ? bpf_lsm_file_ioctl+0x9/0x20 [ 3490.061545][T17384] ? __pfx_sock_ioctl+0x10/0x10 [ 3490.061559][T17384] __se_sys_ioctl+0xfc/0x170 [ 3490.061609][T17384] do_syscall_64+0xfa/0x3b0 [ 3490.061621][T17384] ? lockdep_hardirqs_on+0x9c/0x150 [ 3490.061637][T17384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3490.061649][T17384] ? clear_bhb_loop+0x60/0xb0 [ 3490.061661][T17384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3490.061675][T17384] RIP: 0033:0x7ff27b38e929 [ 3490.061691][T17384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3490.061701][T17384] RSP: 002b:00007ff27c24e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3490.061715][T17384] RAX: ffffffffffffffda RBX: 00007ff27b5b5fa0 RCX: 00007ff27b38e929 [ 3490.061724][T17384] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 3490.061731][T17384] RBP: 00007ff27b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 3490.061738][T17384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3490.061745][T17384] R13: 0000000000000000 R14: 00007ff27b5b5fa0 R15: 00007ff27b6dfa28 [ 3490.061764][T17384] [ 3490.744254][T25161] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 3490.907917][T25161] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 3490.916205][T25161] usb 3-1: config 0 has no interface number 0 [ 3490.923947][T25161] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 3490.933574][T25161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3490.941658][T25161] usb 3-1: Product: syz [ 3490.945903][T25161] usb 3-1: Manufacturer: syz [ 3490.950643][T25161] usb 3-1: SerialNumber: syz [ 3490.956910][T25161] usb 3-1: config 0 descriptor?? [ 3491.170081][T25161] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 3491.176812][T25161] usb 3-1: No valid video chain found. [ 3491.183868][T25161] usb 3-1: USB disconnect, device number 18