last executing test programs: 55m36.262041549s ago: executing program 32 (id=1303): syz_open_dev$evdev(0x0, 0x40, 0xb0080) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 52m47.761752784s ago: executing program 33 (id=2652): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) tkill(r0, 0x7) 52m40.507102367s ago: executing program 34 (id=2698): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 52m38.498117999s ago: executing program 35 (id=2711): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x8000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 52m24.041023896s ago: executing program 36 (id=2790): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, 0x0) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f00000001c0)) 50m30.01352308s ago: executing program 37 (id=3550): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0xc0046686, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 49m32.623011939s ago: executing program 9 (id=3863): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = syz_io_uring_setup(0x4a60, &(0x7f0000000080)={0x0, 0x20000000, 0x10100, 0xfffffffe, 0x35e}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x28, 0x6000, @fd_index=0xd, 0x0, 0x0, 0x0, 0x12, 0x16c0d753d8aca0eb, {0x2}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 49m32.08432396s ago: executing program 9 (id=3868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) unshare(0x24060400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x10007, 0x3, r3}) 49m31.715776158s ago: executing program 9 (id=3871): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x80000000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 49m31.068607358s ago: executing program 9 (id=3875): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 49m30.038257506s ago: executing program 9 (id=3883): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 49m29.732355395s ago: executing program 9 (id=3885): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) close(0x3) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 49m29.064883787s ago: executing program 38 (id=3885): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) close(0x3) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) 47m13.425515348s ago: executing program 8 (id=4564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x680601, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/udp\x00') pread64(r2, &(0x7f0000001600)=""/4103, 0x1007, 0x99) 47m10.627516143s ago: executing program 8 (id=4576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 47m7.131589744s ago: executing program 8 (id=4584): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x200004, 0x804, 0x4, 0xf, 0x120000, 0x7f, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0xffff1000, 0x141210}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x92, 0x8, 0x5, 0x0, 0x0, 0x6, 0x1, 0x5c, 0x9, 0x9, 0x3, 0x20, 0x0, 0x80000000, 0x7, 0x1, 0x8, 0x53, 0x0, '\x00', 0x8, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47m5.979778695s ago: executing program 8 (id=4595): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 47m4.874949474s ago: executing program 8 (id=4602): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x5c}}, 0x0) 47m4.238972368s ago: executing program 8 (id=4607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, {0xfffa, 0x6}, {}, {0xfff8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3, 0x20000000, 0x8, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 47m3.452697905s ago: executing program 39 (id=4607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, {0xfffa, 0x6}, {}, {0xfff8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x3, 0x20000000, 0x8, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 46m55.525019196s ago: executing program 4 (id=4642): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x20, 0x11}, 0x0, 0x0}) 46m53.253650394s ago: executing program 4 (id=4648): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 46m52.983709219s ago: executing program 4 (id=4649): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 46m50.622274822s ago: executing program 4 (id=4656): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 46m49.425527006s ago: executing program 4 (id=4662): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r1) close(r2) 46m48.785257998s ago: executing program 4 (id=4665): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)=ANY=[@ANYBLOB="01000000060000000080000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x80}}, 0x0) close(0x3) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 46m48.009010313s ago: executing program 40 (id=4665): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)=ANY=[@ANYBLOB="01000000060000000080000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="01000000290b0000ffffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0100004001"], 0x80}}, 0x0) close(0x3) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x9, @dev, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {@remote}, {@dev}, {}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 41m33.249583172s ago: executing program 3 (id=5914): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x400000000001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 41m31.547156655s ago: executing program 3 (id=5920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x48000002, {0x0, 0x0, 0x0, r5, {0x6, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 41m31.05109827s ago: executing program 3 (id=5924): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000030000000000001"], 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) 41m30.738604202s ago: executing program 3 (id=5927): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 41m29.726306279s ago: executing program 3 (id=5931): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 41m29.143612108s ago: executing program 3 (id=5935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001f000000060001000000000008000500", @ANYRES32=r5], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 41m28.681556222s ago: executing program 41 (id=5935): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000110f00090000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002800128009000100766c616e00000000180002800c0002001b0000001f000000060001000000000008000500", @ANYRES32=r5], 0x58}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c000000100003040200"/20, @ANYRES32=0x0, @ANYBLOB="20c90400810100001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 33m40.34737087s ago: executing program 0 (id=7458): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10681, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 33m40.054715031s ago: executing program 0 (id=7459): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x4000)=nil) syz_clone3(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8494e0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0xb, 0x400000, 0x4d1c, 0x2, 0x3, 0x3ff, 0x0, 0x0, 0x100, 0x4}}, 0x50) 33m38.56540927s ago: executing program 0 (id=7463): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0x8000, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4b, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x4000, 0x5, 0x4, 0x3, 0x4, 0x6, 0x1, 0x6, 0x9, 0x3, 0x15bb, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x7, 0x1, 0x1, 0x5, 0xd091, 0x3e, 0x7, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x9, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x200c7, 0xf9, 0xd, 0x2bf, 0x6c9, 0x10000007, 0xfffffffc, 0x3, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x0, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f5, 0x0, 0x2, 0x80, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0xffffffff, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0xf5fd, 0x0, 0x5, 0xfffffffa, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x6c8712a, 0x5, 0xad, 0x4, 0x5, 0x20000005, 0x800, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x6, 0xc4, 0x120000, 0xbe, 0x9, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0x1fc, 0x6, 0x6, 0x8, 0x57b, 0x101, 0x10000, 0x6, 0x7fff, 0xfffd, 0x4, 0x20002, 0x5, 0x1, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xca, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9600, 0xa, 0x2, 0x4, 0x40000006, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x7, 0xfffffffe, 0x6, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 33m38.352986133s ago: executing program 0 (id=7464): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 33m37.218326234s ago: executing program 0 (id=7469): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="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", 0x3b0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) 33m36.883207341s ago: executing program 0 (id=7471): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) 33m35.603265579s ago: executing program 42 (id=7471): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0}, 0x0) 30.763648091s ago: executing program 6 (id=11456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x54d00000) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = mq_open(&(0x7f0000000040)='!selinuxsel\xad\"\x0e\xabx\xb8\xc9\xa8x\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) lseek(0xffffffffffffffff, 0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x5d) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 26.260614446s ago: executing program 6 (id=11462): clock_settime(0x100000000000b00, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1000, 0x0, 0xfffffffffffffffc, 0x6, 0x2, 0x6}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) r4 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r4, 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc04c560f, &(0x7f00000002c0)=@mmap={0x7f, 0xa, 0x4, 0x4000, 0x9, {0x77359400}, {0x5, 0x0, 0x7, 0x2, 0x9, 0x7, "c6ce5046"}, 0x9, 0x1, {}, 0x2}) mmap(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4, 0x50, r5, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x800000000004, @tid=r6}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x38ab, &(0x7f0000000140)={0x0, 0x0, 0x8}, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 25.154568406s ago: executing program 1 (id=11465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @loopback, 0x2}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x24000000, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x330, 0x178, 0x490, 0x230, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000c00}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r7 = socket$kcm(0x10, 0x2, 0x0) eventfd2(0x0, 0x0) r8 = syz_io_uring_setup(0x21e1e, &(0x7f0000000200)={0x0, 0x9c7a, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x800, 0x0, 0x0, 0x26}) io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x20000023896) 22.967184722s ago: executing program 2 (id=11467): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x50, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x8, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) write$UHID_INPUT(r5, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 22.4309751s ago: executing program 5 (id=11468): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r5}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x2, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22.371669239s ago: executing program 1 (id=11469): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(r1, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}, r5}}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00') sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="4b8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 21.40868116s ago: executing program 6 (id=11473): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) stat64(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_targets\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xee2, 0x0, 0x8, 0x76ed}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r3, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x300}) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x20104c2, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1000109, &(0x7f0000000400)={0x0, 0x43d4, 0x400, 0x3, 0x3e1}, &(0x7f00000003c0), 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000140)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a201"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r5, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x3, 0x31dc}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) write$binfmt_script(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="8d293c2bb124e82c9e", 0x9}, {&(0x7f0000000200)="95816273c23df5a0d86a58a2099899d87492523c8d9d9e447389fac3dac5c5888eb7a802bc6c55181bf6585306d1a559b2be5cb1e34fe77bb02191712488396cdc4ecbb4043d4914f63d65b68400626011fc72889772e26e5e6d8ffd9299320078e75d4d41de176358b88cfc6a35f3f8568b9345907e88e0ba75fadca4", 0x7d}, {0x0}, {&(0x7f0000000340)="7fc3383d3384fc24c5ba447e4c27bec3527519d3497f8b11860b84e567037eea2e7236ae06456a34ff13c618b9b37e8a58101da0f275938d9882712244583b722797a1b13988e4965809635276fa3576ecf7f1c51ee969c1b4aa60ba66516e1afbd47f805d8e25e15f3b9394d0b030e21103e223", 0x74}, {&(0x7f00000003c0)="4544a49d9aa613bb1b2d7dee8f888f3f289f1ecb69677fbfea8dab990e31a3e30253ad510460550d8b67da8d06dfa901bd32a0c442e996c78feb9716bda96664dee4134ec4bf17bf6dc88b9c77dc262c019743575149eed64a55bb010a9102f5101d9d6402a54edccee666abea72b2a407dbc978e74cc4b4fe7b2e0c340d84fc628d111a9cff057d85702874aef5a5a484b3e4e2dfa7de03703cdef34e93f8b8633e58", 0xa3}, {&(0x7f0000000480)="581267886301e8f3dd08be19a314110fa32f2f0e179fd550fcc200b562878956af5357f4b1b227388c4d0820eabffec0e29daefb225a7c76fe11724d010c1fbfcc13516d444bf796c3421b80105c43094ecd1e3c8d45a40996fb022f2bf098d21ac5262077b967232303b541b62d350d89811a89bd7a8028ba8fb80ffd6c0c477ee317a319a70343259c3a8ee7f2e182e836c80162b63115534ef0664344cba22552a87a9e3f0e3808d565d139df98e9cdad71b2d93aa2cb16e38529feac03cecdc53f091c33ce7983355e39c2514ffc19a20aba8ab6810c23d9e323e2e14f7d032c068e907f8b5c10d28bd9d03c5a41", 0xf0}, {&(0x7f0000000580)="0176c111c9ca73e4902c1a831fab731a4e29bdb1a1b1d44bedd32f2596b4315b21c65d31fef1e4bcb927a21cd141403eaa47602820dd6908a1e82dcb5988b0e0a2ac6c4ecb20f80a007c61c8b1c7571c71335f8e007323d62d927f58477e8f65c78618947722d4c92704f5c3478738fc91723b4cea74cafa16f643aa4b50a51e363e17acdcb7b19b37b3d9718d48fba9b12a6eb3090d50e8c17350e3077df5cf0e94dfc6ecade651e4eea15933f103329c80e2", 0xb3}], 0x7) 17.775004437s ago: executing program 1 (id=11475): r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x163343, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000100)={@rand_addr=0x64010102, @local, 0x1, "6ad9ab92d677d260db0361fa18c86786414663d7ea0113c3c6c4eecde57a54d2", 0x6, 0x80000000, 0x800, 0x4}, 0x3c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r3, 0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "db19ff47"}]}}, 0x0}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f00000000c0)={0x6, 0x4, 0x6, 0x2, 0x1d, "47cb8991b0af252e6f41c5410503b8273639df"}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) 17.768786723s ago: executing program 2 (id=11476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f00000001c0)=@ethernet={0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000280)=""/128, 0x80}, 0x1}, {{&(0x7f0000000340)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/74, 0x4a}, 0x5}, {{&(0x7f0000000d80)=@rc={0x1f, @none}, 0x80, 0x0}, 0x2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 17.381162372s ago: executing program 5 (id=11478): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xd1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7c3d}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xcc}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8080) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getuid() ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='setgroups\x00') writev(r8, &(0x7f00000006c0)=[{0x0, 0x2}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x20008820) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8000) syz_open_dev$dri(&(0x7f0000000000), 0x4, 0xc0000) close(0x3) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000740)) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/bpf', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x810, 0xffffffffffffffff, 0xe2d64000) mkdirat$cgroup(r9, &(0x7f0000000080)='syz0\x00', 0x1ff) 15.253227767s ago: executing program 6 (id=11480): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x5, 0x141101) dup(r2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r3, 0x2) close(r3) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b100000000010203010902240001010330050904000801030101000921ff00010122b00b09058103100002ba0742"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}}, 0x1080) r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x2400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc0045540, &(0x7f0000000100)=0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='vlan1\x00', 0x10) 14.801076756s ago: executing program 5 (id=11482): socket(0x10, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xf5a1, 0x1f, 0x1a}, [@mdlm={0x15, 0x24, 0x12, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xb}}}}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB]}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000002c0)={@local, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0xcf, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000040000000000"]}, 0x85) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$pokeuser(0x6, r4, 0x112, 0x40000089) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) 12.112332839s ago: executing program 7 (id=11485): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="058b222862"], 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r4 = memfd_secret(0x0) unshare(0x40000000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f00000001c0)={0x100, 0x8, {}, {0x0}, 0x2, 0x80000001}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 10.812017491s ago: executing program 2 (id=11486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000003c0)={0x8005, r4, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) link(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff47, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x20000800) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) 10.220983197s ago: executing program 1 (id=11487): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="058b222862"], 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r4 = memfd_secret(0x0) unshare(0x40000000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f00000001c0)={0x100, 0x8, {}, {0x0}, 0x2, 0x80000001}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 9.778981966s ago: executing program 6 (id=11488): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(r3, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0) 9.771935981s ago: executing program 5 (id=11489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x9, 0x0, 0xb}, 0x0) epoll_create(0x101) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 8.929010099s ago: executing program 7 (id=11490): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff]}) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000700), 0x4) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x11, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=ANY=[]}, 0x50) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) close_range(r2, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 7.611694074s ago: executing program 2 (id=11491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100b, 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x9, 0x0, 0xb}, 0x0) epoll_create(0x101) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) recvfrom(r4, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 6.425582887s ago: executing program 5 (id=11492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000080)={0x3, 0x4000}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3, 0x0, 0x7fff, 0xfffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f0000004080)="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", 0x2000, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x9, {0x4, 0x5, 0x0, {0x3, 0x6, 0x1, 0x2, 0x5, 0x7, 0x10, 0xff, 0x8001, 0x4000, 0xaf7, 0x0, 0x0, 0x2ad, 0x80}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x100003}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}) syz_io_uring_setup(0x414b, &(0x7f0000000300)={0x0, 0x2, 0x10100, 0x3, 0x3b0}, &(0x7f00000002c0), &(0x7f0000000400)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r6, &(0x7f0000000080)=""/196, 0xc4, 0x3) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xb4a}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 6.049698173s ago: executing program 2 (id=11493): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000340)=0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000014e, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x85) ptrace(0x10, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$pokeuser(0x6, 0x0, 0x112, 0x40000089) syz_open_procfs(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', &(0x7f00000000c0)={[&(0x7f00000001c0)='&\x00']}, &(0x7f00000005c0)={[&(0x7f0000000240)='\x00', &(0x7f0000000300)='net/netstat\x00', &(0x7f0000000380)='/dev/fb0\x00', &(0x7f00000003c0)='\x00', 0x0, 0x0, &(0x7f0000000580)='(!\x00']}) 5.794947268s ago: executing program 7 (id=11494): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f00000001c0)=@ethernet={0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000280)=""/128, 0x80}, 0x1}, {{&(0x7f0000000340)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/74, 0x4a}, 0x5}, {{&(0x7f0000000d80)=@rc={0x1f, @none}, 0x80, 0x0}, 0x2}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) 5.577498087s ago: executing program 1 (id=11495): getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280), &(0x7f0000000340)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x801, 0x9) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80000) bind$packet(r8, &(0x7f00000000c0)={0x11, 0xf5, r2, 0x1, 0x4}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0x80015b18, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) 4.642524527s ago: executing program 7 (id=11496): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x50, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc010643a, &(0x7f0000000000)={0x4000000, 0x6, 0xe}) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @window={0x3, 0x7, 0x53a}, @sack_perm, @window={0x3, 0x1, 0x8000}, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.473730211s ago: executing program 6 (id=11497): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) dup(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x17, 0xd0, 0xf5, 0x20, 0x421, 0x6901, 0x2d1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6a, 0x2, 0x0, 0x2, 0xfe, 0x18}}]}}]}}, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @loopback, 0x380000}, 0x1c) r5 = epoll_create1(0x80000) epoll_pwait(r5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x5, 0x82, &(0x7f0000000000)={[0xffffffffffff8143]}, 0x8) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r6, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r6, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fchown(r7, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r8, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0xc0) pread64(r0, &(0x7f00000002c0)=""/186, 0xba, 0x6) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x1, 0x2, 0x36315247, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x7, 0x2, 0x7}}) 2.413501965s ago: executing program 7 (id=11498): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[], 0x50) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) r4 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100)='0', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000008000000050000000200000002500200", @ANYRES32=r3, @ANYBLOB="ff0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000020000000e0000000000000000"], 0x50) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x92}, @local, 0x6, 0x2, 0xb, 0x400}) sendto$inet6(r2, 0x0, 0x36, 0xfff5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x1c) fcntl$getownex(r2, 0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000540)={0x0, 0x1, 0xb, 0x8}) write$binfmt_script(r1, &(0x7f0000000200), 0xfffffd9d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f00000001c0)={0x0, 0x0, 0x3012}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) setfsuid(0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0xba01}, 0x0) 2.264911108s ago: executing program 5 (id=11499): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) syz_open_dev$vim2m(&(0x7f0000000040), 0x81, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc04c565d, &(0x7f0000000100)=@userptr={0x401, 0x2, 0x4, 0x10, 0x3, {}, {0x0, 0x0, 0x8, 0x6, 0x1, 0x60, "53bac45a"}, 0x6, 0x2, {0x0}, 0x8}) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x7) r3 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/time_for_children\x00') r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='limits\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054) r5 = socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_RMID(0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) renameat2(r4, &(0x7f0000000380)='./cgroup\x00', r4, &(0x7f00000003c0)='./mnt\x00', 0x5) ioctl$BTRFS_IOC_RM_DEV(r3, 0x8004b709, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000980)={0x18, &(0x7f00000000c0)={0x40, 0x16, 0x3, '\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000002540)=0x2) 2.226545858s ago: executing program 7 (id=11500): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x2000775) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x6, 0x8, 0x54, 0xff, 0x2}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="058b222862"], 0x1, [{0x0, 0x0}]}) mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x3}) r4 = memfd_secret(0x0) unshare(0x40000000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f00000001c0)={0x100, 0x8, {}, {0x0}, 0x2, 0x80000001}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, r5, 0x0) write$binfmt_elf64(r1, &(0x7f0000000980)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.989353677s ago: executing program 1 (id=11501): socket$nl_generic(0x10, 0x3, 0x10) r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) read$proc_mixer(r0, &(0x7f0000000040)=""/9, 0x9) listen(r6, 0x0) r7 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xaa44, 0x13900, 0x0, 0x8}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r6, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$KDGETLED(r0, 0x4b31, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$rds(0x15, 0x5, 0x0) 0s ago: executing program 2 (id=11502): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000280), &(0x7f0000000340)=0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80000000000014e, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x85) ptrace(0x10, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$pokeuser(0x6, 0x0, 0x112, 0x40000089) syz_open_procfs(0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) execve(&(0x7f0000000140)='./file2\x00', &(0x7f00000000c0)={[&(0x7f0000000180)='&\x00', 0x0]}, 0x0) kernel console output (not intermixed with test programs): 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3255.974355][T10817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3255.984517][T10817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3256.843555][T14080] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 3257.008836][T10817] usb 6-1: GET_CAPABILITIES returned 0 [ 3257.014685][T10817] usbtmc 6-1:16.0: can't read capabilities [ 3257.634957][T14080] usb 3-1: config 0 has no interfaces? [ 3257.704729][T14080] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3257.729044][T14080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3257.793395][T14080] usb 3-1: Product: syz [ 3257.850920][T14080] usb 3-1: Manufacturer: syz [ 3257.919818][T14080] usb 3-1: SerialNumber: syz [ 3258.227564][T14080] usb 3-1: config 0 descriptor?? [ 3258.487254][T10817] usb 6-1: USB disconnect, device number 105 [ 3259.304166][T10817] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3259.330928][T14044] usb 3-1: USB disconnect, device number 99 [ 3259.457191][T10817] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=ba.c5 [ 3259.479069][T10817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3259.522457][T10817] usb 6-1: Product: syz [ 3259.584447][T10817] usb 6-1: Manufacturer: syz [ 3259.591014][T10817] usb 6-1: SerialNumber: syz [ 3259.674950][T10817] usb 6-1: config 0 descriptor?? [ 3259.806936][T10817] comedi comedi0: Wrong number of endpoints [ 3259.813378][T10817] ni6501 6-1:0.0: driver 'ni6501' failed to auto-configure device. [ 3259.928965][T14044] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3259.959663][T10817] usb 6-1: USB disconnect, device number 106 [ 3260.264421][T14080] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3260.534759][T14080] usb 2-1: Using ep0 maxpacket: 16 [ 3260.553029][T14080] usb 2-1: config 4 has an invalid interface number: 176 but max is 0 [ 3260.562380][T14080] usb 2-1: config 4 has no interface number 0 [ 3260.572186][T14080] usb 2-1: config 4 interface 176 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 3260.588144][T14080] usb 2-1: config 4 interface 176 has no altsetting 0 [ 3260.601277][T14080] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=5a.8b [ 3260.618700][T14080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3260.628760][T14080] usb 2-1: Product: syz [ 3260.638312][T14080] usb 2-1: Manufacturer: syz [ 3260.643067][T14080] usb 2-1: SerialNumber: syz [ 3260.678337][T16338] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 3260.713502][T14044] usb 3-1: Using ep0 maxpacket: 16 [ 3261.128372][T14080] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3261.274935][T16338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10990'. [ 3261.428449][T16350] binder: BINDER_SET_CONTEXT_MGR already set [ 3261.434720][T16350] binder: 16349:16350 ioctl 4018620d 80000040 returned -16 [ 3262.793509][ T7964] usb 2-1: Failed to submit usb control message: -110 [ 3262.800953][ T7964] usb 2-1: unable to send the bmi data to the device: -110 [ 3262.836603][ T7964] usb 2-1: unable to get target info from device [ 3262.845127][ T7964] usb 2-1: could not get target info (-110) [ 3262.853402][ T7964] usb 2-1: could not probe fw (-110) [ 3263.208615][T16363] program syz.5.10986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3263.524269][T14072] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3263.611396][T10817] usb 2-1: USB disconnect, device number 46 [ 3263.658012][T14044] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3263.678911][T14044] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3263.725498][T14044] usb 3-1: can't read configurations, error -71 [ 3263.731975][T14072] usb 6-1: Using ep0 maxpacket: 8 [ 3263.769284][T14072] usb 6-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 3263.820943][T14072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3263.972557][T14072] usb 6-1: Product: syz [ 3263.984290][T14072] usb 6-1: Manufacturer: syz [ 3263.989020][T14072] usb 6-1: SerialNumber: syz [ 3263.997647][T14072] usb 6-1: config 0 descriptor?? [ 3264.139709][T16372] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3264.409771][T16363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3264.733627][T14044] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3265.063869][T14044] usb 3-1: Using ep0 maxpacket: 8 [ 3265.084170][T16363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3265.151319][T14044] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3265.218185][T14044] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3265.608928][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10991'. [ 3265.768392][T14044] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3265.917338][T14044] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3266.224901][T14072] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3266.261277][T14072] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 3266.283312][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.290463][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.337078][T14044] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3266.346579][T14044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3266.440551][T16398] tipc: Enabling of bearer rejected, failed to enable media [ 3266.575214][T14044] usb 3-1: GET_CAPABILITIES returned 0 [ 3266.834407][T14072] usb 6-1: USB disconnect, device number 107 [ 3266.968227][T16144] udevd[16144]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3267.094743][T14044] usbtmc 3-1:16.0: can't read capabilities [ 3268.065288][T14072] usb 3-1: USB disconnect, device number 101 [ 3277.311980][T16479] input: syz0 as /devices/virtual/input/input203 [ 3280.023590][T10817] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3280.251331][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 3280.475881][T10817] usb 2-1: device descriptor read/64, error -32 [ 3280.824099][T10817] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3281.343516][T10817] usb 2-1: Using ep0 maxpacket: 16 [ 3282.216328][T10817] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3282.314924][T10817] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3282.425584][T10817] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3283.036094][T16514] binder: 16509:16514 ioctl 4018620d 0 returned -22 [ 3283.244993][T16514] binder: 16509:16514 ioctl c0306201 0 returned -14 [ 3284.645319][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11014'. [ 3284.718428][T16514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11014'. [ 3284.922077][T16509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3286.052682][T10817] usb 2-1: string descriptor 0 read error: -71 [ 3286.069248][T10817] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3286.150760][T10817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3286.188934][T10817] usb 2-1: can't set config #1, error -71 [ 3286.197833][T10817] usb 2-1: USB disconnect, device number 48 [ 3293.107052][T14072] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3293.334230][T14072] usb 6-1: Using ep0 maxpacket: 8 [ 3293.368623][T14072] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3293.975647][T14072] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3293.997554][T14072] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3294.008578][T14072] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3294.025754][T14072] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3294.035874][T14072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3294.669351][T14072] usb 6-1: GET_CAPABILITIES returned 0 [ 3295.353574][T14072] usbtmc 6-1:16.0: can't read capabilities [ 3295.954695][T10817] usb 6-1: USB disconnect, device number 108 [ 3297.523691][T14072] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 3297.704039][T14072] usb 6-1: Using ep0 maxpacket: 8 [ 3297.752919][T14072] usb 6-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3297.806753][T14072] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3297.928466][T14072] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3298.039978][T14072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3299.403637][T10817] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 3299.891303][T10817] usb 7-1: config 0 has no interfaces? [ 3300.024277][T10817] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3300.033373][T10817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3300.073621][T10817] usb 7-1: Product: syz [ 3300.077848][T10817] usb 7-1: Manufacturer: syz [ 3300.116449][T10817] usb 7-1: SerialNumber: syz [ 3300.305833][T10817] usb 7-1: config 0 descriptor?? [ 3301.944155][T10817] usb 6-1: USB disconnect, device number 109 [ 3303.090478][T10817] usb 7-1: USB disconnect, device number 38 [ 3304.003808][T16670] input: syz0 as /devices/virtual/input/input204 [ 3305.503593][T10817] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3306.494619][T10817] usb 2-1: config 0 has no interfaces? [ 3306.716906][T10817] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3306.804931][T10817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.814844][T10817] usb 2-1: Product: syz [ 3306.821929][T10817] usb 2-1: Manufacturer: syz [ 3306.852001][T10817] usb 2-1: SerialNumber: syz [ 3306.864023][T10817] usb 2-1: config 0 descriptor?? [ 3307.447931][ T30] audit: type=1326 audit(1747205967.503:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16688 comm="syz.6.11046" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 3308.534642][T14044] usb 2-1: USB disconnect, device number 49 [ 3308.813522][T10817] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3309.724472][T10817] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 3309.760802][T10817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3309.867130][T10817] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3309.955446][T10817] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3310.039689][T10817] usb 3-1: Product: syz [ 3310.062587][T10817] usb 3-1: Manufacturer: syz [ 3310.068613][T10817] usb 3-1: SerialNumber: syz [ 3310.147544][T10817] usb 3-1: config 0 descriptor?? [ 3310.325719][T10817] usb 3-1: selecting invalid altsetting 0 [ 3310.394345][T14044] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 3310.883722][T14044] usb 2-1: Using ep0 maxpacket: 8 [ 3310.895407][T14044] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3310.913207][T14044] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3310.930001][T14044] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3310.939324][T14044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.484054][T14072] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 3311.714269][T14072] usb 6-1: Using ep0 maxpacket: 8 [ 3311.721437][T14072] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3311.741559][T14072] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3311.960594][T14072] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3311.974430][T14072] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3311.988636][T14072] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3311.998732][T14072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.253039][T14071] usb 3-1: USB disconnect, device number 102 [ 3312.394515][T14072] usb 6-1: GET_CAPABILITIES returned 0 [ 3312.400088][T14072] usbtmc 6-1:16.0: can't read capabilities [ 3312.563858][T14044] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 3312.582830][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11050'. [ 3312.823663][T14044] usb 7-1: Using ep0 maxpacket: 16 [ 3312.882150][T14044] usb 7-1: descriptor type invalid, skip [ 3313.405840][T14044] usb 7-1: config 1 has an invalid descriptor of length 148, skipping remainder of the config [ 3313.459495][T14044] usb 7-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3313.686599][T14044] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3313.701957][T14044] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3313.904785][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.912818][T14044] usb 7-1: Product: syz [ 3313.920948][T14044] usb 7-1: Manufacturer: syz [ 3313.925771][T14044] usb 7-1: SerialNumber: syz [ 3313.937670][T14072] usb 2-1: USB disconnect, device number 50 [ 3314.234492][T14071] usb 6-1: USB disconnect, device number 110 [ 3314.293579][T10817] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3314.430247][T16744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3314.451868][T16744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3314.484692][T10817] usb 3-1: Using ep0 maxpacket: 8 [ 3314.496237][T10817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3314.605538][T10817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3315.714755][T10817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3315.945013][T10817] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3315.958211][T10817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3315.967319][T10817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3316.109292][T10817] usb 3-1: can't set config #16, error -71 [ 3316.149764][T10817] usb 3-1: USB disconnect, device number 103 [ 3316.646243][T14044] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 3316.667423][T14044] usb 7-1: USB disconnect, device number 39 [ 3317.299363][T14072] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 3317.570867][T14072] usb 2-1: Using ep0 maxpacket: 32 [ 3317.955685][T14072] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3318.020798][T14072] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3318.773339][T14072] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3318.832138][T14072] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3318.953542][T14072] usb 2-1: Product: syz [ 3318.957790][T14072] usb 2-1: Manufacturer: syz [ 3318.967665][T14072] usb 2-1: SerialNumber: syz [ 3318.995104][T14072] usb 2-1: config 0 descriptor?? [ 3319.102431][T16791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11063'. [ 3319.583630][T14044] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3319.923666][T14044] usb 6-1: Using ep0 maxpacket: 8 [ 3319.953367][T16788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3320.001573][T16788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3321.013539][T10817] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 3321.115390][T14072] usb 2-1: USB disconnect, device number 51 [ 3321.254515][T10817] usb 7-1: Using ep0 maxpacket: 32 [ 3321.270566][T10817] usb 7-1: config 8 has an invalid interface number: 72 but max is 0 [ 3321.278976][T10817] usb 7-1: config 8 has no interface number 0 [ 3321.285180][T10817] usb 7-1: config 8 interface 72 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 3321.297268][T10817] usb 7-1: config 8 interface 72 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 3321.317972][T10817] usb 7-1: config 8 interface 72 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 3321.438546][T10817] usb 7-1: config 8 interface 72 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3321.454213][T14071] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3321.529653][T10817] usb 7-1: config 8 interface 72 has no altsetting 0 [ 3321.644260][T14071] usb 3-1: Using ep0 maxpacket: 8 [ 3321.687871][T14071] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 3321.688402][T10817] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 3321.707268][T14071] usb 3-1: config 2 has no interface number 0 [ 3321.778224][T10817] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3321.778235][T14071] usb 3-1: config 2 interface 31 has no altsetting 0 [ 3321.778268][T10817] usb 7-1: Product: syz [ 3321.842190][T14071] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3321.863773][T10817] usb 7-1: Manufacturer: syz [ 3321.912252][T14071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3321.930049][T10817] usb 7-1: SerialNumber: syz [ 3321.993724][T16706] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 3322.035341][T14071] usb 3-1: Product: syz [ 3322.084200][T14071] usb 3-1: Manufacturer: syz [ 3322.089850][T14044] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3322.274210][T14071] usb 3-1: SerialNumber: syz [ 3322.287822][T16797] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 3322.394285][T16706] usb 2-1: Using ep0 maxpacket: 16 [ 3322.444216][T14044] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3322.464161][T14044] usb 6-1: can't read configurations, error -71 [ 3322.685820][T16797] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 3322.955424][T14071] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 3323.316991][T16706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3323.464589][T16706] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3324.023783][T16706] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3324.324312][T14071] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3324.382345][T16706] usb 2-1: string descriptor 0 read error: -22 [ 3324.389114][T16706] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3324.399536][T16706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.430362][T10817] smsc75xx v1.0.0 [ 3325.438533][T10817] smsc75xx 7-1:8.72 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 3325.757797][T10817] smsc75xx 7-1:8.72: probe with driver smsc75xx failed with error -71 [ 3325.904050][T14071] usb 6-1: Using ep0 maxpacket: 8 [ 3326.004369][T14071] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3326.054914][T14071] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3326.119691][T14071] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3326.161596][T14072] usb 3-1: USB disconnect, device number 104 [ 3326.163945][T10817] usb 7-1: USB disconnect, device number 40 [ 3326.202041][T14071] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3326.395806][T14071] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3326.405242][T14071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3326.463378][T14071] usb 6-1: can't set config #16, error -71 [ 3326.475158][T14071] usb 6-1: USB disconnect, device number 113 [ 3327.400997][T16830] ALSA: mixer_oss: invalid OSS volume 'PHO' [ 3327.550961][T16706] usbhid 2-1:1.0: can't add hid device: -71 [ 3327.575531][T16706] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 3327.711936][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.719119][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.779261][T16706] usb 2-1: USB disconnect, device number 52 [ 3328.493573][T16706] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 3328.560548][T16859] netlink: 'syz.7.11076': attribute type 4 has an invalid length. [ 3328.572051][T16859] netlink: 152 bytes leftover after parsing attributes in process `syz.7.11076'. [ 3328.585179][T16859] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 3328.879539][T16866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11077'. [ 3329.244248][T16706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3329.781910][T16706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3329.823274][T16706] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3329.833855][T16706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3329.882770][T16706] usb 2-1: config 0 descriptor?? [ 3329.904280][T16706] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3329.916565][T16706] dvb-usb: bulk message failed: -22 (3/0) [ 3330.069126][T16706] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3330.100809][T16706] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3330.112839][T16706] usb 2-1: media controller created [ 3330.119765][T16706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3330.146438][T16706] dvb-usb: bulk message failed: -22 (6/0) [ 3330.175568][T16871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 3330.190201][T16706] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3330.217298][T16706] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input205 [ 3330.260391][T16706] dvb-usb: schedule remote query interval to 150 msecs. [ 3330.269481][T16706] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3330.423582][T16706] dvb-usb: bulk message failed: -22 (1/0) [ 3330.561147][T16706] dvb-usb: error while querying for an remote control event. [ 3330.577727][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11074'. [ 3330.724150][T16706] dvb-usb: bulk message failed: -22 (1/0) [ 3330.730832][T16706] dvb-usb: error while querying for an remote control event. [ 3330.815828][T16875] xfrm1: entered promiscuous mode [ 3330.841319][T16875] xfrm1: entered allmulticast mode [ 3330.888026][T14072] usb 2-1: USB disconnect, device number 53 [ 3331.084472][T14072] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3331.488475][T16889] netlink: 'syz.6.11079': attribute type 20 has an invalid length. [ 3333.573598][T16706] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3333.993886][T16706] usb 2-1: Using ep0 maxpacket: 8 [ 3334.193286][T16706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3334.204081][T16706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3334.230726][T16706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3334.251472][T16706] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3334.283611][T16706] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3334.303061][T16706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3334.333567][T14044] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 3334.613637][T14044] usb 7-1: Using ep0 maxpacket: 16 [ 3334.762391][T16706] usb 2-1: GET_CAPABILITIES returned 0 [ 3334.808400][T16706] usbtmc 2-1:16.0: can't read capabilities [ 3334.945108][T14044] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3335.268801][T14044] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3335.441756][T14044] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3336.048446][T14044] usb 7-1: string descriptor 0 read error: -22 [ 3336.369673][T14044] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3336.379207][T16706] usb 2-1: USB disconnect, device number 54 [ 3336.674465][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3338.853752][T14044] usb 7-1: can't set config #1, error -71 [ 3338.924178][T14044] usb 7-1: USB disconnect, device number 41 [ 3339.142232][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11093'. [ 3340.844333][T14072] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 3341.646237][T14072] usb 6-1: Using ep0 maxpacket: 16 [ 3341.754187][T14072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3342.698393][T14072] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3342.912045][T14072] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3343.494297][T14071] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3343.675473][T14071] usb 3-1: Using ep0 maxpacket: 8 [ 3343.876506][T14071] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3343.894151][T14071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3343.905375][T14071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3343.916572][T14071] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3343.930895][T14071] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3343.941180][T14071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3344.331875][T14072] usb 6-1: string descriptor 0 read error: -71 [ 3344.378867][T14071] usb 3-1: GET_CAPABILITIES returned 0 [ 3344.427478][T14072] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3344.445602][T14071] usbtmc 3-1:16.0: can't read capabilities [ 3344.462054][T14072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.515297][T14072] usb 6-1: can't set config #1, error -71 [ 3344.607371][T14072] usb 6-1: USB disconnect, device number 114 [ 3344.865806][T17019] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3345.988779][T14071] usb 3-1: USB disconnect, device number 105 [ 3346.036337][T17024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3347.564058][T14071] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 3348.244129][T14071] usb 7-1: Using ep0 maxpacket: 8 [ 3348.476771][T14071] usb 7-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3348.494272][T14071] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3348.508239][T14071] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3348.518334][T14071] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3349.104191][T14071] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3349.309565][T14071] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3349.320862][T14071] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3349.341190][T14071] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3349.364592][T14071] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3349.384300][T14071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3349.993247][T14071] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3350.066628][T14071] usb 2-1: invalid MIDI out EP 0 [ 3350.405777][T16725] udevd[16725]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3350.510156][T14071] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3350.757092][T14072] usb 7-1: USB disconnect, device number 42 [ 3350.873989][T14071] usb 2-1: USB disconnect, device number 55 [ 3350.907236][T17073] qrtr: Invalid version 0 [ 3352.114470][T16706] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 3352.322436][T16706] usb 7-1: Using ep0 maxpacket: 16 [ 3352.563696][T10817] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3352.666718][T16706] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3352.674603][T14044] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3352.917113][T10817] usb 6-1: Using ep0 maxpacket: 8 [ 3353.053890][T14044] usb 3-1: Using ep0 maxpacket: 16 [ 3353.124237][T16706] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3353.138020][T16706] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3353.145624][T10817] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3353.158818][T10817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3353.304570][T10817] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3353.339842][T10817] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3353.472130][T10817] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3353.481451][T10817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3353.523570][T14048] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 3353.644768][T14044] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3353.714486][T14044] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3353.742549][T14044] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3353.755442][T16706] usb 7-1: string descriptor 0 read error: -22 [ 3353.761865][T16706] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3353.772545][T16706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3353.873969][T10817] usb 6-1: GET_CAPABILITIES returned 0 [ 3353.903758][T14048] usb 2-1: Using ep0 maxpacket: 16 [ 3353.996596][T10817] usbtmc 6-1:16.0: can't read capabilities [ 3354.020435][T14044] usb 3-1: string descriptor 0 read error: -22 [ 3354.026989][T14044] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3354.335025][T14048] usb 2-1: config 0 has no interfaces? [ 3354.631237][T14044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.867694][T14048] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3354.968645][T14048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3354.977401][T14048] usb 2-1: Product: syz [ 3354.981629][T14048] usb 2-1: Manufacturer: syz [ 3354.986663][T14048] usb 2-1: SerialNumber: syz [ 3355.317380][T14071] usb 6-1: USB disconnect, device number 115 [ 3355.409061][T14048] usb 2-1: config 0 descriptor?? [ 3357.085984][T14044] usbhid 3-1:1.0: can't add hid device: -71 [ 3357.092423][T14044] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 3357.148718][T14044] usb 3-1: USB disconnect, device number 106 [ 3357.385141][T14044] usb 2-1: USB disconnect, device number 56 [ 3357.642606][T16706] usbhid 7-1:1.0: can't add hid device: -71 [ 3357.649393][T16706] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 3357.664296][T16706] usb 7-1: USB disconnect, device number 43 [ 3362.374194][T14071] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 3362.554486][T14071] usb 7-1: config 0 has no interfaces? [ 3362.572795][T14071] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3362.582532][T14071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.591640][T14071] usb 7-1: Product: syz [ 3362.596582][T14071] usb 7-1: Manufacturer: syz [ 3362.601200][T14071] usb 7-1: SerialNumber: syz [ 3362.666088][T14071] usb 7-1: config 0 descriptor?? [ 3363.284311][T14071] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 3363.471230][T14071] usb 2-1: Using ep0 maxpacket: 8 [ 3363.529534][T14071] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3363.529569][T14071] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3363.529597][T14071] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3363.529623][T14071] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3363.529670][T14071] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3363.529696][T14071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3363.855054][T14071] usb 2-1: GET_CAPABILITIES returned 0 [ 3363.861686][T14071] usbtmc 2-1:16.0: can't read capabilities [ 3364.143536][T14044] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3365.183580][T14044] usb 3-1: Using ep0 maxpacket: 16 [ 3365.475975][T14044] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3365.620059][T14044] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3365.726973][T14044] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3365.749839][T16706] usb 2-1: USB disconnect, device number 57 [ 3366.123216][T14044] usb 3-1: string descriptor 0 read error: -22 [ 3366.173002][T14044] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3366.182498][T14071] usb 7-1: USB disconnect, device number 44 [ 3366.461983][T14044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3367.006759][T14071] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 3367.171058][T16706] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 3367.294369][T14071] usb 7-1: Using ep0 maxpacket: 32 [ 3367.312746][T14071] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3367.574070][T16706] usb 6-1: Using ep0 maxpacket: 16 [ 3367.590311][T14071] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3368.383241][T14044] usb 3-1: can't set config #1, error -71 [ 3368.447535][T14071] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 3368.457431][T14071] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 3368.467354][T14071] usb 7-1: Product: syz [ 3368.481961][T14044] usb 3-1: USB disconnect, device number 107 [ 3368.505303][T16706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3368.547957][T14071] usb 7-1: Manufacturer: syz [ 3369.774810][T14071] usb 7-1: SerialNumber: syz [ 3369.782749][T14071] usb 7-1: config 0 descriptor?? [ 3370.226039][T14071] usb 7-1: can't set config #0, error -71 [ 3370.583973][T14071] usb 7-1: USB disconnect, device number 45 [ 3371.834042][T16706] usb 6-1: unable to read config index 0 descriptor/all [ 3371.844131][T16706] usb 6-1: can't read configurations, error -71 [ 3374.730927][T17249] dvmrp0: entered allmulticast mode [ 3379.424573][T14048] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 3379.495920][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11154'. [ 3379.673492][T14048] usb 2-1: Using ep0 maxpacket: 16 [ 3379.767485][T17299] input: syz0 as /devices/virtual/input/input207 [ 3379.827318][T17300] hub 9-0:1.0: USB hub found [ 3379.832546][T17300] hub 9-0:1.0: 1 port detected [ 3380.025903][T14048] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3380.042346][T14048] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3380.061266][T14048] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3380.083293][T14048] usb 2-1: string descriptor 0 read error: -22 [ 3380.089993][T14048] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3380.099824][T14048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3382.188798][T17307] xt_connbytes: Forcing CT accounting to be enabled [ 3382.196042][T17307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3384.614440][T14071] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3384.823749][T14048] usbhid 2-1:1.0: can't add hid device: -71 [ 3384.829823][T14048] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 3384.845364][T14071] usb 3-1: Using ep0 maxpacket: 8 [ 3384.858439][T14048] usb 2-1: USB disconnect, device number 58 [ 3385.084999][T14071] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3385.095798][T14071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3385.130087][T14071] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3385.179772][T14071] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3385.306094][T14044] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 3385.312367][T17336] ALSA: mixer_oss: invalid OSS volume 'T' [ 3385.348594][T17336] netlink: 'syz.5.11161': attribute type 11 has an invalid length. [ 3385.398188][T14071] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3385.489389][T14071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3385.505668][T14044] usb 7-1: config 0 has no interfaces? [ 3385.571095][T14071] usb 3-1: can't set config #16, error -71 [ 3385.586987][T14044] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3385.596919][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3385.606505][T14044] usb 7-1: Product: syz [ 3385.610952][T14044] usb 7-1: Manufacturer: syz [ 3385.615988][T14072] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 3385.616560][T14044] usb 7-1: SerialNumber: syz [ 3385.624852][T14071] usb 3-1: USB disconnect, device number 108 [ 3385.635532][T14044] usb 7-1: config 0 descriptor?? [ 3385.824135][T14072] usb 2-1: Using ep0 maxpacket: 16 [ 3385.959625][T14072] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3385.971319][T14072] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3385.985015][T14072] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3386.161860][T14072] usb 2-1: string descriptor 0 read error: -22 [ 3386.219512][T14072] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3386.348878][T14072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3388.407153][T14072] usbhid 2-1:1.0: can't add hid device: -71 [ 3388.421254][T14072] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 3388.497227][T14072] usb 2-1: USB disconnect, device number 59 [ 3388.607849][T14048] usb 7-1: USB disconnect, device number 46 [ 3389.157647][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.170140][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3391.639320][T17389] netlink: 'syz.7.11170': attribute type 6 has an invalid length. [ 3397.274225][T14080] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 3397.792900][T14080] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3397.832207][T14080] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 3397.924151][T14080] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3397.945049][T14080] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3397.967833][T14080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3398.101492][T14080] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3398.141098][T14080] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3398.372456][T16736] udevd[16736]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3398.556356][T16706] usb 6-1: USB disconnect, device number 118 [ 3398.566553][T17437] delete_channel: no stack [ 3401.248607][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11197'. [ 3401.714180][T17475] misc userio: The device must be registered before sending interrupts [ 3404.103659][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11188'. [ 3405.564095][T14080] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 3405.874298][T14080] usb 6-1: Using ep0 maxpacket: 16 [ 3405.970909][T14080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3405.994404][T17503] netlink: 72 bytes leftover after parsing attributes in process `syz.7.11191'. [ 3406.457896][T14080] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3406.991920][T14080] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3407.405315][T14080] usb 6-1: string descriptor 0 read error: -22 [ 3407.412218][T14080] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3407.453276][T14080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3408.024381][T16706] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3408.218344][T16706] usb 3-1: Using ep0 maxpacket: 16 [ 3408.640397][T16706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3408.653825][T16706] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3408.668181][T16706] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3408.691998][T16706] usb 3-1: string descriptor 0 read error: -22 [ 3408.702567][T16706] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3408.717693][T16706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.916533][T14080] usbhid 6-1:1.0: can't add hid device: -71 [ 3409.922612][T14080] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3410.019003][T14080] usb 6-1: USB disconnect, device number 119 [ 3410.128285][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11198'. [ 3411.534938][T17540] xt_ipcomp: unknown flags 12 [ 3411.619310][T16706] usbhid 3-1:1.0: can't add hid device: -71 [ 3411.884377][T16706] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 3411.976450][T14048] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 3411.995198][T16706] usb 3-1: USB disconnect, device number 109 [ 3412.223512][T14048] usb 7-1: Using ep0 maxpacket: 8 [ 3412.553322][T14048] usb 7-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3412.827152][T14048] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3413.183693][T14048] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3413.193150][T14048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3415.806422][T17566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11205'. [ 3415.959020][T14048] usb 7-1: can't set config #1, error -71 [ 3416.028436][T14048] usb 7-1: USB disconnect, device number 47 [ 3418.812962][T17596] syzkaller1: entered promiscuous mode [ 3418.826366][T17596] syzkaller1: entered allmulticast mode [ 3419.024455][T14071] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 3419.192210][T14071] usb 7-1: config 0 has an invalid interface number: 241 but max is 0 [ 3419.201383][T14071] usb 7-1: config 0 has no interface number 0 [ 3419.246629][T14071] usb 7-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 3419.256348][T14071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3419.264867][T14071] usb 7-1: Product: syz [ 3419.269101][T14071] usb 7-1: Manufacturer: syz [ 3419.274302][T14071] usb 7-1: SerialNumber: syz [ 3419.288691][T14071] usb 7-1: config 0 descriptor?? [ 3419.306036][T14071] rndis_host 7-1:0.241: skipping garbage [ 3419.314592][T14071] usb 7-1: bad CDC descriptors [ 3419.618688][T14071] usb 7-1: USB disconnect, device number 48 [ 3420.689750][T17616] netlink: 'syz.5.11216': attribute type 6 has an invalid length. [ 3421.378683][T17628] dvmrp0: entered allmulticast mode [ 3422.473740][T17636] netlink: 'syz.1.11221': attribute type 6 has an invalid length. [ 3425.093545][T14048] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 3425.263739][T14048] usb 7-1: Using ep0 maxpacket: 16 [ 3425.281704][T14048] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3425.360535][T14048] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3425.390125][T14048] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3425.421308][T14048] usb 7-1: string descriptor 0 read error: -22 [ 3425.427798][T14048] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3425.473532][T14044] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 3425.510412][T14048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3425.793456][T14044] usb 6-1: Using ep0 maxpacket: 16 [ 3425.925259][T14044] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3426.026648][T14044] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3426.143001][T14044] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3426.185613][T14044] usb 6-1: string descriptor 0 read error: -22 [ 3426.226199][T14044] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3426.317955][T14044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3428.078275][T14048] usbhid 7-1:1.0: can't add hid device: -71 [ 3428.235821][T14048] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 3428.296191][T14048] usb 7-1: USB disconnect, device number 49 [ 3428.695537][T14044] usbhid 6-1:1.0: can't add hid device: -71 [ 3428.703306][T14044] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3428.732426][T14044] usb 6-1: USB disconnect, device number 120 [ 3428.853467][T14048] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 3429.075019][T17694] netlink: 'syz.1.11234': attribute type 1 has an invalid length. [ 3429.143888][T14048] usb 7-1: not running at top speed; connect to a high speed hub [ 3429.464130][T14048] usb 7-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 3429.478231][T14048] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3429.835658][T14048] usb 7-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 3429.845028][T14048] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3429.853063][T14048] usb 7-1: Product: syz [ 3429.865616][T14048] usb 7-1: Manufacturer: syz [ 3429.870358][T14048] usb 7-1: SerialNumber: syz [ 3430.106045][ T30] audit: type=1326 audit(1747206090.213:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3430.192829][ T30] audit: type=1326 audit(1747206090.273:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3430.266089][T17697] 8021q: adding VLAN 0 to HW filter on device bond8 [ 3430.350781][ T30] audit: type=1326 audit(1747206090.443:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3430.474852][ T30] audit: type=1326 audit(1747206090.443:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3430.734145][ T30] audit: type=1326 audit(1747206090.443:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3430.796349][T17694] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 3430.926420][T17694] bond8: (slave macvlan3): Enslaving as a backup interface with a down link [ 3430.958385][ T30] audit: type=1326 audit(1747206090.443:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3431.124057][ T30] audit: type=1326 audit(1747206090.443:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3431.377974][ T30] audit: type=1326 audit(1747206090.493:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3431.635427][ T30] audit: type=1326 audit(1747206090.493:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3431.721743][ T30] audit: type=1326 audit(1747206090.613:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17693 comm="syz.5.11236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 3432.448733][T14048] usb 7-1: USB disconnect, device number 50 [ 3432.881572][T17700] delete_channel: no stack [ 3435.294282][T14048] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 3435.513465][T14048] usb 6-1: Using ep0 maxpacket: 16 [ 3435.521548][T14048] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3435.530775][T14048] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3435.543865][T14048] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3435.554919][T14048] usb 6-1: string descriptor 0 read error: -22 [ 3435.561242][T14048] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3435.571516][T14048] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3436.299623][T14048] usbhid 6-1:1.0: can't add hid device: -71 [ 3436.327016][T14048] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3436.459440][T14048] usb 6-1: USB disconnect, device number 121 [ 3436.714893][T14071] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3436.726121][T17758] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11248'. [ 3436.736084][T17758] netlink: 268 bytes leftover after parsing attributes in process `syz.7.11248'. [ 3437.724418][T14071] usb 3-1: Using ep0 maxpacket: 16 [ 3437.746151][T14071] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 3437.808639][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11251'. [ 3437.968586][T14071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3437.999339][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11251'. [ 3438.165276][T17778] Cannot find add_set index 0 as target [ 3438.254967][T14071] usb 3-1: config 0 descriptor?? [ 3438.800667][T14071] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 3441.383720][T17799] xt_ipcomp: unknown flags 12 [ 3441.559559][T14071] gspca_sonixj: reg_w1 err -71 [ 3441.774384][T14071] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 3442.425284][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11257'. [ 3442.481645][T14071] usb 3-1: USB disconnect, device number 110 [ 3443.063931][T14072] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 3443.098052][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 3443.234207][T14072] usb 2-1: device descriptor read/64, error -32 [ 3443.364219][T17811] syzkaller1: entered promiscuous mode [ 3443.370426][T17811] syzkaller1: entered allmulticast mode [ 3443.414583][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11257'. [ 3443.484224][T14072] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 3443.934360][T14072] usb 2-1: Using ep0 maxpacket: 16 [ 3443.948431][T14072] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3443.967295][T14072] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3443.980489][T14072] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3444.018511][T14072] usb 2-1: string descriptor 0 read error: -22 [ 3444.027097][T14072] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3444.349376][T14048] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 3444.544711][T14048] usb 7-1: Using ep0 maxpacket: 8 [ 3444.574415][T14048] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3444.590931][T14072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3444.599457][T14048] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3444.619808][T14048] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3444.632257][T14048] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3444.653894][T14048] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3444.663691][T14048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3444.889007][T14048] usb 7-1: GET_CAPABILITIES returned 0 [ 3444.941254][T14048] usbtmc 7-1:16.0: can't read capabilities [ 3445.096077][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11261'. [ 3445.337064][T14080] usb 7-1: USB disconnect, device number 51 [ 3445.382750][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11263'. [ 3445.484831][T14072] usbhid 2-1:1.0: can't add hid device: -71 [ 3445.704949][T14072] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 3445.717296][T14072] usb 2-1: USB disconnect, device number 61 [ 3446.053970][T14048] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3446.844110][T14048] usb 3-1: Using ep0 maxpacket: 8 [ 3447.048631][T14048] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3447.117980][T14048] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3447.187094][T14048] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3447.298373][T14048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3447.337224][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11267'. [ 3447.776889][T14072] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 3448.066302][T14072] usb 6-1: Using ep0 maxpacket: 16 [ 3448.137490][T14072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3448.149569][T14072] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3448.174073][T14072] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3448.191342][T14072] usb 6-1: string descriptor 0 read error: -22 [ 3448.198518][T14072] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3448.209141][T14072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3449.264692][T14080] usb 3-1: USB disconnect, device number 111 [ 3449.358408][T17879] xt_ipcomp: unknown flags 12 [ 3449.786794][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11271'. [ 3449.796644][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11271'. [ 3449.807232][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11271'. [ 3450.480535][T14048] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 3450.765667][T14048] usb 2-1: config 0 has no interfaces? [ 3451.025849][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3451.044262][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.460921][T14048] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3451.559976][T14072] usbhid 6-1:1.0: can't add hid device: -71 [ 3451.569013][T14072] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3451.656233][T14072] usb 6-1: USB disconnect, device number 122 [ 3451.799032][T14048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3452.358289][T14048] usb 2-1: Product: syz [ 3452.556234][T14048] usb 2-1: Manufacturer: syz [ 3452.561002][T14048] usb 2-1: SerialNumber: syz [ 3452.575355][T14048] usb 2-1: config 0 descriptor?? [ 3452.983758][T14072] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 3453.185754][T14072] usb 6-1: Using ep0 maxpacket: 16 [ 3453.211948][T14072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3453.308347][T14072] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3453.354166][T14072] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3453.993081][T14072] usb 6-1: string descriptor 0 read error: -22 [ 3454.106972][T14072] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3454.434593][T14072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3455.455262][T14048] usb 2-1: USB disconnect, device number 62 [ 3456.032680][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 3456.032729][ T30] audit: type=1804 audit(1747206115.983:4031): pid=17931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.11281" name="file0" dev="ramfs" ino=214597 res=1 errno=0 [ 3456.147990][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11280'. [ 3457.337957][T14072] usbhid 6-1:1.0: can't add hid device: -71 [ 3457.404303][T14072] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3457.493008][T14072] usb 6-1: USB disconnect, device number 123 [ 3460.517878][ T30] audit: type=1326 audit(1747206120.623:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.551318][ T30] audit: type=1326 audit(1747206120.623:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.585867][ T30] audit: type=1326 audit(1747206120.643:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.610215][ T30] audit: type=1326 audit(1747206120.643:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.636642][ T30] audit: type=1326 audit(1747206120.643:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.724735][ T30] audit: type=1326 audit(1747206120.643:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.755733][ T30] audit: type=1326 audit(1747206120.643:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.879076][ T30] audit: type=1326 audit(1747206120.643:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3460.944378][ T30] audit: type=1326 audit(1747206120.643:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17982 comm="syz.7.11289" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1539 code=0x7ffc0000 [ 3462.164253][T14072] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3462.444475][T14072] usb 6-1: Using ep0 maxpacket: 16 [ 3462.462702][T14072] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3462.474346][T14072] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3462.489630][T14072] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3462.518740][T14072] usb 6-1: string descriptor 0 read error: -22 [ 3462.529196][T14072] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3462.572911][T14072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3462.784500][T14080] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 3462.984022][T14080] usb 2-1: Using ep0 maxpacket: 16 [ 3462.994777][T14080] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3463.005584][T14080] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3463.023174][T14080] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3463.046275][T14080] usb 2-1: string descriptor 0 read error: -22 [ 3463.064442][T14080] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3463.247900][T14080] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3463.511119][T14072] usbhid 6-1:1.0: can't add hid device: -71 [ 3463.522287][T14072] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3463.545620][T14072] usb 6-1: USB disconnect, device number 124 [ 3464.935805][T14071] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 3465.022430][T18025] netlink: 5 bytes leftover after parsing attributes in process `syz.7.11299'. [ 3465.031600][T18025] netlink: 5 bytes leftover after parsing attributes in process `syz.7.11299'. [ 3465.040630][T18025] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11299'. [ 3465.049877][T18025] netlink: 5 bytes leftover after parsing attributes in process `syz.7.11299'. [ 3465.136986][T18027] usb usb8: usbfs: process 18027 (syz.6.11298) did not claim interface 0 before use [ 3466.384728][T14071] usb 6-1: not running at top speed; connect to a high speed hub [ 3466.615993][T14071] usb 6-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 3466.704081][T14071] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3466.727247][T14080] usbhid 2-1:1.0: can't add hid device: -71 [ 3466.740685][T14071] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 3466.820582][T14071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3466.858640][T14080] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 3466.869724][T14071] usb 6-1: Product: syz [ 3467.195170][T14071] usb 6-1: Manufacturer: syz [ 3467.209185][T14071] usb 6-1: SerialNumber: syz [ 3467.265550][T14080] usb 2-1: USB disconnect, device number 63 [ 3468.803211][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11304'. [ 3470.864155][T16735] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 3470.874577][T14071] usb 6-1: can't set config #1, error -71 [ 3470.918801][T14071] usb 6-1: USB disconnect, device number 125 [ 3471.015828][T16735] usb 3-1: Using ep0 maxpacket: 16 [ 3471.037046][T16735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3471.091012][T16735] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 3471.121847][T16735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3471.141177][T16735] usb 3-1: config 0 descriptor?? [ 3471.386377][T18053] netlink: 'syz.2.11305': attribute type 16 has an invalid length. [ 3471.394803][T18053] netlink: 'syz.2.11305': attribute type 17 has an invalid length. [ 3471.459448][T18053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3471.475053][T14044] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 3471.497147][T18053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3471.743473][T14044] usb 6-1: not running at top speed; connect to a high speed hub [ 3471.753566][T14044] usb 6-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 3471.780452][T14044] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3471.804043][T14048] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 3471.858492][T14044] usb 6-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 3471.861835][T16735] kye 0003:0458:5016.00A8: control desc unexpectedly large [ 3471.880509][T14044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3471.915901][T14044] usb 6-1: Product: syz [ 3471.929172][T14044] usb 6-1: Manufacturer: syz [ 3471.947748][T14044] usb 6-1: SerialNumber: syz [ 3472.054688][T16735] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.00A8/input/input208 [ 3472.488506][T14048] usb 2-1: config 0 has no interfaces? [ 3472.675983][T16735] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.00A8/input/input209 [ 3473.037772][T16735] kye 0003:0458:5016.00A8: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 3473.307668][T16735] usb 3-1: USB disconnect, device number 112 [ 3473.378056][T14048] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3473.852711][T14048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3473.899971][T14048] usb 2-1: Product: syz [ 3473.928178][T14048] usb 2-1: Manufacturer: syz [ 3473.952159][T14048] usb 2-1: SerialNumber: syz [ 3473.981027][T14048] usb 2-1: config 0 descriptor?? [ 3474.001481][T18073] fido_id[18073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 3474.179368][T14044] usb 6-1: USB disconnect, device number 126 [ 3474.498621][T18083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11312'. [ 3474.763519][T14044] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3474.945446][T16735] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 3475.023509][T14044] usb 6-1: Using ep0 maxpacket: 16 [ 3475.031905][T14044] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3475.066170][T14044] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3475.103314][T14044] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3475.114915][T14044] usb 6-1: string descriptor 0 read error: -22 [ 3475.121220][T14044] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3475.130656][T14044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3475.219489][T16735] usb 7-1: Using ep0 maxpacket: 8 [ 3475.254235][T16735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 3475.340045][T16735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3475.478735][T14048] usb 2-1: USB disconnect, device number 64 [ 3475.560190][T16735] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3475.571776][T16735] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 3475.614491][T16735] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 3475.677269][T16735] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3475.677303][T16735] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3475.698785][T16735] usb 7-1: config 0 descriptor?? [ 3475.914013][ T5845] Bluetooth: hci5: urb ffff88805074d600 submission failed (90) [ 3476.460356][T18107] syzkaller1: entered promiscuous mode [ 3476.466151][T18107] syzkaller1: entered allmulticast mode [ 3477.587679][T16735] usb 7-1: USB disconnect, device number 52 [ 3478.293532][T16706] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 3478.348990][T14044] usbhid 6-1:1.0: can't add hid device: -71 [ 3478.393536][T14044] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3478.443996][T14044] usb 6-1: USB disconnect, device number 127 [ 3478.548757][T16706] usb 3-1: Using ep0 maxpacket: 8 [ 3478.605360][T16706] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3478.634687][T16706] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3478.647881][T16706] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3478.657107][T16706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3479.268500][T16706] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 3479.774039][T16706] usb 7-1: Using ep0 maxpacket: 8 [ 3479.810294][T16706] usb 7-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3479.849346][T16706] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3479.899675][T16706] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3479.993960][T16706] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3481.235880][T16735] usb 3-1: USB disconnect, device number 113 [ 3481.814276][T16706] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3481.973563][T14044] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 3482.003539][T16706] usb 2-1: Using ep0 maxpacket: 16 [ 3482.010490][T16706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3482.028231][T16706] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 3482.037804][T16706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3482.051440][T16706] usb 2-1: config 0 descriptor?? [ 3482.158590][T14044] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3482.167627][T14044] usb 6-1: not running at top speed; connect to a high speed hub [ 3482.177875][T14044] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3482.188399][T14044] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 3482.199938][T14044] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 3482.213739][T14044] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3482.223200][T14044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3482.238569][T14044] usb 6-1: Product: syz [ 3482.242810][T14044] usb 6-1: Manufacturer: syz [ 3482.249096][T14044] usb 6-1: SerialNumber: syz [ 3482.284654][T18141] netlink: 'syz.1.11321': attribute type 16 has an invalid length. [ 3482.295304][T18141] netlink: 'syz.1.11321': attribute type 17 has an invalid length. [ 3482.362165][T18141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3482.635132][T14044] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 3482.705467][T18152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11324'. [ 3482.834529][T14044] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 3482.845532][T16706] kye 0003:0458:5016.00A9: control desc unexpectedly large [ 3482.858103][T14044] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 3482.877691][T16706] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.00A9/input/input210 [ 3483.071550][T16706] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.00A9/input/input211 [ 3483.091128][T18156] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11325'. [ 3483.162007][T14044] usb 6-1: USB disconnect, device number 2 [ 3483.312404][T16706] kye 0003:0458:5016.00A9: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 3483.364030][T18159] udevd[18159]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3483.988568][T14080] usb 7-1: USB disconnect, device number 53 [ 3484.024441][T16735] usb 2-1: USB disconnect, device number 65 [ 3485.094233][T14080] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 3485.244952][T14080] usb 7-1: Using ep0 maxpacket: 16 [ 3485.394281][T14080] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3485.462154][T14080] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3485.492763][T14080] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3485.662921][T14080] usb 7-1: string descriptor 0 read error: -22 [ 3485.715225][T14080] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3485.745802][T14080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3488.631465][T18216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11333'. [ 3488.669885][T14080] usbhid 7-1:1.0: can't add hid device: -71 [ 3488.689892][T14080] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 3489.276732][T14080] usb 7-1: USB disconnect, device number 54 [ 3489.769133][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11338'. [ 3490.055197][T18230] netlink: 100 bytes leftover after parsing attributes in process `syz.6.11337'. [ 3491.564129][T14071] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 3491.724280][T14071] usb 2-1: Using ep0 maxpacket: 8 [ 3491.911829][T14071] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3491.927028][T14071] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3491.941233][T14071] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3492.009153][T14071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3492.154016][T14044] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 3492.414863][T14044] usb 3-1: config 0 has no interfaces? [ 3492.424216][T14044] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3492.464283][T14044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3492.523236][T14044] usb 3-1: Product: syz [ 3492.560080][T14044] usb 3-1: Manufacturer: syz [ 3492.586373][T14044] usb 3-1: SerialNumber: syz [ 3492.645535][T14044] usb 3-1: config 0 descriptor?? [ 3493.475916][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11343'. [ 3493.590085][T18261] syzkaller1: entered promiscuous mode [ 3493.596207][T18261] syzkaller1: entered allmulticast mode [ 3493.653644][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11343'. [ 3494.528555][T16706] usb 3-1: USB disconnect, device number 114 [ 3496.010581][T16706] usb 2-1: USB disconnect, device number 66 [ 3497.224167][T14071] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 3497.276144][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 3498.234224][T14071] usb 2-1: device descriptor read/64, error -32 [ 3498.513967][T14071] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 3498.832552][T14071] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3498.867545][T14071] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3498.955074][T14071] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3499.054252][T14071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3499.094882][T14071] usb 2-1: config 0 descriptor?? [ 3499.153464][T16706] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3499.345972][T16706] usb 6-1: Using ep0 maxpacket: 8 [ 3499.441294][T16706] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3499.489401][T16706] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3499.535712][T16706] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3499.561612][T16706] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3499.600826][T16706] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3499.624930][T16706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3499.875115][T16706] usb 6-1: GET_CAPABILITIES returned 0 [ 3499.885756][T16706] usbtmc 6-1:16.0: can't read capabilities [ 3500.085158][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11350'. [ 3500.106434][T14071] usb 6-1: USB disconnect, device number 3 [ 3500.553099][T18309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11353'. [ 3501.774111][T14071] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 3501.895879][T14080] usb 2-1: USB disconnect, device number 68 [ 3501.954070][T14071] usb 7-1: Using ep0 maxpacket: 16 [ 3501.987416][T14071] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3502.035696][T14071] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3502.101463][T14071] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3502.180819][T14071] usb 7-1: string descriptor 0 read error: -22 [ 3502.208317][T14071] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3502.241829][T14071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3503.529736][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11357'. [ 3505.024178][T14071] usbhid 7-1:1.0: can't add hid device: -71 [ 3505.064341][T14071] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 3505.192940][T14071] usb 7-1: USB disconnect, device number 55 [ 3505.896543][T14071] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 3506.068118][T14071] usb 7-1: Using ep0 maxpacket: 16 [ 3506.096413][T14071] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3506.147015][T14071] usb 7-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3506.174369][T14071] usb 7-1: config 1 interface 0 has no altsetting 0 [ 3506.244597][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11361'. [ 3506.311668][T14071] usb 7-1: string descriptor 0 read error: -22 [ 3506.325716][T14071] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3506.382361][T14071] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3506.851319][T18365] netlink: 'syz.7.11362': attribute type 5 has an invalid length. [ 3506.938064][T18355] delete_channel: no stack [ 3507.112236][T18365] ip6erspan0: entered promiscuous mode [ 3509.149405][T16706] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3509.264897][T14071] usbhid 7-1:1.0: can't add hid device: -71 [ 3509.282055][T14071] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 3509.314372][T14080] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3509.327049][T16706] usb 6-1: Using ep0 maxpacket: 8 [ 3509.339986][T16706] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3509.391617][T16706] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3509.414568][T16706] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3509.430600][T16706] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3509.434745][T14071] usb 7-1: USB disconnect, device number 56 [ 3509.474191][T16706] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3509.490366][T16706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3509.516158][T14080] usb 2-1: Using ep0 maxpacket: 8 [ 3509.558109][T14080] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3509.589829][T14080] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3509.638631][T14080] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3509.651279][T14080] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3509.782746][T16706] usb 6-1: GET_CAPABILITIES returned 0 [ 3509.789124][T16706] usbtmc 6-1:16.0: can't read capabilities [ 3509.998536][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11365'. [ 3510.142733][T14071] usb 6-1: USB disconnect, device number 4 [ 3510.224000][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 3510.224020][ T30] audit: type=1800 audit(1747206170.323:4106): pid=18392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.11369" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 3510.893751][T16706] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 3511.054050][T16706] usb 3-1: Using ep0 maxpacket: 16 [ 3511.099027][T16706] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3511.127285][T16706] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3511.205609][T16706] usb 3-1: config 1 interface 0 has no altsetting 0 [ 3511.221968][T16706] usb 3-1: string descriptor 0 read error: -22 [ 3511.228987][T16706] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3511.391175][T16706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3512.152216][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.159927][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.412457][T14044] usb 2-1: USB disconnect, device number 69 [ 3514.150084][T16706] usbhid 3-1:1.0: can't add hid device: -71 [ 3514.163965][T16706] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 3514.214248][T16706] usb 3-1: USB disconnect, device number 115 [ 3514.894333][T18438] netlink: 100 bytes leftover after parsing attributes in process `syz.5.11375'. [ 3516.674317][T14071] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 3517.554077][T14071] usb 6-1: Using ep0 maxpacket: 16 [ 3517.986585][T14044] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 3518.153763][T14044] usb 7-1: Using ep0 maxpacket: 8 [ 3518.171997][T14044] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 3518.180298][T14044] usb 7-1: config 2 has no interface number 0 [ 3518.284290][T14044] usb 7-1: config 2 interface 31 has no altsetting 0 [ 3518.407445][T14044] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3518.453143][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3518.504234][T14044] usb 7-1: Product: syz [ 3518.508553][T14044] usb 7-1: Manufacturer: syz [ 3518.520050][T14044] usb 7-1: SerialNumber: syz [ 3518.558516][T14044] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 3519.301510][T18471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11382'. [ 3519.594270][T18477] loop8: detected capacity change from 0 to 9 [ 3519.697461][T18477] Dev loop8: unable to read RDB block 9 [ 3519.720959][T18477] loop8: unable to read partition table [ 3519.841663][T18477] loop8: partition table beyond EOD, truncated [ 3519.880553][T18477] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 3520.053539][T16706] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 3520.315162][T14071] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3520.764277][T14071] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3520.771925][T14071] usb 6-1: can't read configurations, error -71 [ 3520.833720][T16706] usb 2-1: Using ep0 maxpacket: 8 [ 3520.907777][T16706] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3521.794177][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3521.805985][T16706] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3521.818758][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3522.173964][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3522.195914][T16706] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3522.204343][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3522.223733][T14044] usb 7-1: USB disconnect, device number 57 [ 3522.235990][T16706] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3522.275470][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3522.306231][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3522.330456][T16706] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 3522.339415][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3522.378205][T16706] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3522.579698][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3522.614773][T16706] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3522.626790][T16706] usb 2-1: string descriptor 0 read error: -71 [ 3522.633138][T16706] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3522.643275][T16706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3522.726079][T16706] usb 2-1: can't set config #168, error -71 [ 3522.744286][T16706] usb 2-1: USB disconnect, device number 70 [ 3522.980509][T14044] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 3523.332684][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11391'. [ 3523.783690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3523.793110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3523.801598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3523.813466][T16706] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3523.896703][T14044] usb 7-1: not running at top speed; connect to a high speed hub [ 3523.905191][T10817] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 3523.923220][T14044] usb 7-1: config 1 has an invalid descriptor of length 90, skipping remainder of the config [ 3523.934102][T14044] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 3523.956138][T14044] usb 7-1: New USB device found, idVendor=0535, idProduct=a4a8, bcdDevice= 0.40 [ 3523.965691][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3523.979577][T14044] usb 7-1: Product: syz [ 3523.986110][T14044] usb 7-1: Manufacturer: syz [ 3523.990841][T14044] usb 7-1: SerialNumber: syz [ 3523.995797][T16706] usb 6-1: Using ep0 maxpacket: 8 [ 3524.006494][T16706] usb 6-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3524.017389][T16706] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3524.030683][T16706] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3524.044214][T16706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3524.083826][T10817] usb 3-1: Using ep0 maxpacket: 8 [ 3524.093834][T10817] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3524.104659][T10817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3524.114988][T10817] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3524.125131][T10817] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3524.138287][T10817] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3524.204553][T10817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3524.483557][T10817] usb 3-1: GET_CAPABILITIES returned 0 [ 3524.493975][T10817] usbtmc 3-1:16.0: can't read capabilities [ 3524.674391][T14080] usb 3-1: USB disconnect, device number 116 [ 3526.183787][T14044] usb 7-1: USB disconnect, device number 58 [ 3527.384908][ T7966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3527.394694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3527.630173][T14080] usb 6-1: USB disconnect, device number 7 [ 3528.203994][T14044] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 3528.799029][T14044] usb 3-1: Using ep0 maxpacket: 8 [ 3528.978304][T14044] usb 3-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3529.176445][T14044] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3529.212107][T14044] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3529.223569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3529.231971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3529.240323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3529.248962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3529.278018][T14044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3530.433838][T14044] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 3530.551809][T14080] usb 3-1: USB disconnect, device number 117 [ 3530.609062][T14044] usb 7-1: config 0 has no interfaces? [ 3530.647673][T14044] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3530.782077][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3531.134170][T14071] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3531.639946][T14071] usb 2-1: config 0 has no interfaces? [ 3531.771529][T14044] usb 7-1: Product: syz [ 3531.780285][T14044] usb 7-1: Manufacturer: syz [ 3531.790016][T14044] usb 7-1: SerialNumber: syz [ 3531.807217][T14044] usb 7-1: config 0 descriptor?? [ 3532.726848][T14071] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3532.744079][T14071] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3532.759523][T14071] usb 2-1: Product: syz [ 3532.844267][T14071] usb 2-1: Manufacturer: syz [ 3532.848931][T14071] usb 2-1: SerialNumber: syz [ 3533.431247][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3533.440608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3533.713522][T14071] usb 2-1: config 0 descriptor?? [ 3533.782225][T18577] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 3534.164547][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11407'. [ 3534.983567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3534.991974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3535.000362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3535.506642][T14080] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3535.870342][T14080] usb 6-1: Using ep0 maxpacket: 8 [ 3535.903976][T18387] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 3536.044105][T14080] usb 6-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3536.084206][T18387] usb 3-1: Using ep0 maxpacket: 32 [ 3536.153223][T14080] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3536.206571][T18387] usb 3-1: config 8 has an invalid interface number: 72 but max is 0 [ 3536.279710][T18387] usb 3-1: config 8 has no interface number 0 [ 3536.424406][T18387] usb 3-1: config 8 interface 72 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 3536.448450][T18387] usb 3-1: config 8 interface 72 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 3536.840256][T14044] usb 7-1: USB disconnect, device number 59 [ 3537.019681][T14071] usb 2-1: can't set config #0, error -71 [ 3537.047529][T14080] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3537.319721][T14071] usb 2-1: USB disconnect, device number 71 [ 3537.490934][T18633] kAFS: unable to lookup cell '.,' [ 3537.518288][T14044] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 3537.701282][T14044] usb 7-1: Using ep0 maxpacket: 8 [ 3537.713204][T18387] usb 3-1: config 8 interface 72 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 3537.713837][T14044] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 3537.784102][T14080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3537.785959][T14044] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 3537.821129][T14044] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3537.866688][T14044] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3537.893110][T14044] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3537.911856][T14044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3538.057564][T14080] usb 6-1: can't set config #1, error -71 [ 3538.209853][T14044] usb 7-1: usb_control_msg returned -71 [ 3538.232843][T14044] usbtmc 7-1:16.0: can't read capabilities [ 3538.322728][T18387] usb 3-1: config 8 interface 72 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3538.382872][T14044] usb 7-1: USB disconnect, device number 60 [ 3538.522901][T18635] qrtr: Invalid version 0 [ 3538.552393][T14080] usb 6-1: USB disconnect, device number 8 [ 3538.824429][T15202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3538.832877][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3538.861307][T18387] usb 3-1: config 8 interface 72 has no altsetting 0 [ 3539.201399][T18640] netlink: 100 bytes leftover after parsing attributes in process `syz.1.11413'. [ 3539.779276][T18387] usb 3-1: string descriptor 0 read error: -71 [ 3539.794222][T18387] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=b7.98 [ 3539.882812][T18387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3539.977935][T18387] usb 3-1: can't set config #8, error -71 [ 3540.031208][T14071] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3540.039821][T18387] usb 3-1: USB disconnect, device number 118 [ 3540.103585][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3540.111959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3540.120411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3540.244058][T14080] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 3540.358042][T14071] usb 6-1: Using ep0 maxpacket: 8 [ 3540.506788][T18387] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 3540.564932][T14071] usb 6-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 3540.572458][T18653] fuse: Unknown parameter '0000000000000000000000000000000000000000' [ 3540.594144][T14071] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 3540.607814][T14080] usb 7-1: Using ep0 maxpacket: 16 [ 3540.684422][T14080] usb 7-1: config 0 has no interfaces? [ 3540.703969][T14080] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3540.967510][T14071] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3540.977922][T14080] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3540.987173][T14071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3540.996489][T14080] usb 7-1: Product: syz [ 3541.000727][T14080] usb 7-1: Manufacturer: syz [ 3541.008978][T14080] usb 7-1: SerialNumber: syz [ 3541.074625][T18387] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 3541.504629][T14080] usb 7-1: config 0 descriptor?? [ 3541.550453][T18387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3541.562849][T18387] usb 3-1: Product: syz [ 3541.568801][T18387] usb 3-1: Manufacturer: syz [ 3541.574003][T18387] usb 3-1: SerialNumber: syz [ 3541.581346][T18387] usb 3-1: config 0 descriptor?? [ 3542.274927][T18387] usb 3-1: ignoring: probably an ADSL modem [ 3542.568873][T18646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3542.583632][T18646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3542.701559][T18387] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 3542.967606][T18651] program syz.2.11417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3543.013111][T18651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3543.122103][T18651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3543.196052][T18387] usb 3-1: USB disconnect, device number 119 [ 3543.843535][T14044] usb 7-1: USB disconnect, device number 61 [ 3544.262314][T14044] usb 6-1: USB disconnect, device number 9 [ 3545.487314][T18690] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11425'. [ 3545.863563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3545.872186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3545.880628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3546.674086][T14080] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3547.467492][T14080] usb 6-1: Using ep0 maxpacket: 8 [ 3547.486805][T14080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 3547.506893][T14080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3547.524037][T14080] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3547.534763][T14080] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 3547.547459][T14080] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 3547.559967][T14080] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 3547.570140][T14080] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3547.582312][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11426'. [ 3547.595565][T14080] usb 6-1: config 0 descriptor?? [ 3547.602232][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11426'. [ 3547.613438][T18698] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3547.621095][T18711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11426'. [ 3548.126350][T14044] usb 6-1: USB disconnect, device number 10 [ 3548.137619][ T5845] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 3548.487960][T18717] tipc: Started in network mode [ 3548.500696][T18717] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 3548.524215][T18717] tipc: Enabling of bearer rejected, failed to enable media [ 3548.717358][T18721] loop8: detected capacity change from 0 to 9 [ 3548.732442][T18159] Dev loop8: unable to read RDB block 9 [ 3548.746309][T18159] loop8: unable to read partition table [ 3548.753799][T18159] loop8: partition table beyond EOD, truncated [ 3548.763254][T18721] Dev loop8: unable to read RDB block 9 [ 3548.825935][T18721] loop8: unable to read partition table [ 3548.831889][T18721] loop8: partition table beyond EOD, truncated [ 3548.847011][T18721] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 3549.154766][T14044] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 3549.163509][T10817] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 3549.332030][T14044] usb 7-1: Using ep0 maxpacket: 8 [ 3549.341771][T14044] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3549.349999][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3549.790935][T14044] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3549.822212][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3549.893794][T16706] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 3549.982730][T10817] usb 6-1: config 0 has no interfaces? [ 3549.994960][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3550.041714][T10817] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3550.070674][T14044] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3550.116574][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3550.131491][T10817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3550.180842][T10817] usb 6-1: Product: syz [ 3550.190944][T14044] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3550.203179][T16706] usb 3-1: Using ep0 maxpacket: 16 [ 3550.208532][T10817] usb 6-1: Manufacturer: syz [ 3550.213384][T10817] usb 6-1: SerialNumber: syz [ 3550.223986][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3550.241789][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3550.253043][T10817] usb 6-1: config 0 descriptor?? [ 3550.263499][T14044] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 3550.280132][T16706] usb 3-1: config 0 has no interfaces? [ 3550.302173][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3550.322600][T14044] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3550.346990][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3550.359054][T16706] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3550.368872][T16706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3550.383466][T16706] usb 3-1: Product: syz [ 3550.387746][T16706] usb 3-1: Manufacturer: syz [ 3550.392524][T14044] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3550.403133][T16706] usb 3-1: SerialNumber: syz [ 3550.414473][T14044] usb 7-1: string descriptor 0 read error: -22 [ 3550.421182][T14044] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3550.431956][T16706] usb 3-1: config 0 descriptor?? [ 3550.514859][T14044] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3550.557732][T14044] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 3551.623611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3551.632038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3551.640503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3552.053700][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11433'. [ 3552.727646][T18736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3552.736693][T18736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3552.832564][T18728] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11430'. [ 3553.188563][T14080] usb 6-1: USB disconnect, device number 11 [ 3553.784153][T16706] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 3554.604719][T14080] usb 3-1: USB disconnect, device number 120 [ 3554.643721][T16706] usb 6-1: Using ep0 maxpacket: 16 [ 3554.651838][T16706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3554.661155][T16706] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3554.689858][T16706] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3554.701017][T18387] usb 7-1: USB disconnect, device number 62 [ 3554.718529][T16706] usb 6-1: string descriptor 0 read error: -22 [ 3554.727696][T16706] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3554.753892][T16706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3555.693624][T18780] netlink: 'syz.6.11438': attribute type 5 has an invalid length. [ 3555.848808][T18780] ip6erspan0: entered promiscuous mode [ 3556.673591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3556.681972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3556.690400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3557.787820][T16706] usbhid 6-1:1.0: can't add hid device: -71 [ 3557.822314][T16706] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3557.882764][T16706] usb 6-1: USB disconnect, device number 12 [ 3558.105522][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3558.114704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3558.434019][T18387] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3559.096421][T18387] usb 2-1: config 0 has no interfaces? [ 3559.341820][T18387] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3559.351607][T18387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3559.382114][T18387] usb 2-1: Product: syz [ 3559.398434][T18387] usb 2-1: Manufacturer: syz [ 3559.415468][T18387] usb 2-1: SerialNumber: syz [ 3559.451576][T18387] usb 2-1: config 0 descriptor?? [ 3560.164368][T18801] program syz.1.11445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3560.177066][T18801] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 3562.376940][T16706] usb 2-1: USB disconnect, device number 72 [ 3562.503578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3562.511908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3562.520235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3562.713785][T18836] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11450'. [ 3563.923929][T18387] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3563.958760][ T1333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3563.967713][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3564.614105][T18387] usb 2-1: Using ep0 maxpacket: 8 [ 3564.629218][T18387] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 3564.778836][T18387] usb 2-1: config 2 has no interface number 0 [ 3564.835126][T18387] usb 2-1: config 2 interface 31 has no altsetting 0 [ 3564.922679][T18387] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 3565.227619][T18387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3565.246319][T18387] usb 2-1: Product: syz [ 3565.250636][T18387] usb 2-1: Manufacturer: syz [ 3565.256495][T18387] usb 2-1: SerialNumber: syz [ 3565.387980][T18387] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 3565.464220][T14080] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 3565.756814][T14080] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3565.774928][T14080] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3565.802878][T14080] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3565.823900][T16706] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3565.891092][T14080] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3565.917419][T14080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3565.970817][T14080] usb 3-1: Product: syz [ 3565.976063][T14080] usb 3-1: Manufacturer: syz [ 3565.980697][T14080] usb 3-1: SerialNumber: syz [ 3565.994046][T16706] usb 6-1: Using ep0 maxpacket: 16 [ 3566.005979][T16706] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3566.135567][T16706] usb 6-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3566.199127][T16706] usb 6-1: config 1 interface 0 has no altsetting 0 [ 3566.246847][T14080] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 3566.380497][T16706] usb 6-1: string descriptor 0 read error: -22 [ 3566.411323][T16706] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 3566.471111][T16706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3566.808040][T18845] delete_channel: no stack [ 3567.623582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3567.632066][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3567.640517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3568.281930][T14044] usb 3-1: USB disconnect, device number 121 [ 3568.369253][T14044] usblp0: removed [ 3568.839349][T14048] usb 2-1: USB disconnect, device number 73 [ 3569.119717][ T63] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3569.128707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3569.387570][T16706] usbhid 6-1:1.0: can't add hid device: -71 [ 3569.417088][T16706] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 3569.960864][T16706] usb 6-1: USB disconnect, device number 13 [ 3571.353924][T18387] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 3571.515532][T18908] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11465'. [ 3571.541383][T18387] usb 3-1: Using ep0 maxpacket: 8 [ 3571.560625][T16706] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 3571.568605][T14048] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3571.568739][T18387] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3571.710693][T18387] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3571.769644][T14048] usb 6-1: Using ep0 maxpacket: 32 [ 3571.783128][T14048] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 3571.791880][T14048] usb 6-1: config 0 has no interface number 0 [ 3571.840809][T16706] usb 7-1: config 0 has no interfaces? [ 3571.849688][T14048] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 3571.876768][T16706] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 3571.892925][T14048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3571.896203][T18387] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3571.911334][T16706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3571.911364][T16706] usb 7-1: Product: syz [ 3571.911382][T16706] usb 7-1: Manufacturer: syz [ 3571.911399][T16706] usb 7-1: SerialNumber: syz [ 3571.914721][T16706] usb 7-1: config 0 descriptor?? [ 3571.992413][T14048] usb 6-1: config 0 descriptor?? [ 3572.425246][T18892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3572.448407][T18387] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3572.458262][T18892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3572.519103][T18387] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3572.561392][T14071] usb 6-1: USB disconnect, device number 14 [ 3572.581580][T18387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3572.656445][T18387] usb 3-1: can't set config #16, error -71 [ 3572.787830][T18387] usb 3-1: USB disconnect, device number 122 [ 3573.471011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3573.479506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3573.487939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3573.505803][T18924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3573.536126][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.543345][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.586556][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11468'. [ 3573.603430][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11468'. [ 3573.612665][T18926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11468'. [ 3573.879127][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11469'. [ 3573.905668][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11469'. [ 3573.921437][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11469'. [ 3574.049318][T18934] tipc: Enabling of bearer rejected, failed to enable media [ 3574.059850][T18934] CIFS: VFS: Malformed UNC in devname [ 3574.206854][T14071] usb 7-1: USB disconnect, device number 63 [ 3574.727473][ T30] audit: type=1326 audit(1747206234.803:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3574.815355][T14019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3574.823882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3575.404095][ T30] audit: type=1326 audit(1747206234.863:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3575.493985][ T30] audit: type=1326 audit(1747206234.953:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.011913][ T30] audit: type=1326 audit(1747206234.963:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.039142][ T30] audit: type=1326 audit(1747206234.963:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.076302][ T30] audit: type=1326 audit(1747206234.963:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.099775][ T30] audit: type=1326 audit(1747206234.963:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.123643][ T30] audit: type=1326 audit(1747206234.963:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.160793][ T30] audit: type=1326 audit(1747206234.963:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.184573][ T30] audit: type=1326 audit(1747206234.963:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.6.11473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 3576.253480][T14048] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 3576.495968][T14048] usb 7-1: Using ep0 maxpacket: 32 [ 3576.518119][T14048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3576.541081][T14048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3576.552614][T14048] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3576.619289][T14048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3576.663802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3576.672135][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3576.680662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3576.745509][T14048] usb 7-1: config 0 descriptor?? [ 3577.242694][T14048] savu 0003:1E7D:2D5A.00AA: unknown main item tag 0x0 [ 3577.263965][T14048] savu 0003:1E7D:2D5A.00AA: unknown main item tag 0x0 [ 3577.270993][T14048] savu 0003:1E7D:2D5A.00AA: unknown main item tag 0x0 [ 3577.278358][T14048] savu 0003:1E7D:2D5A.00AA: unknown main item tag 0x0 [ 3577.286979][T14048] savu 0003:1E7D:2D5A.00AA: unknown main item tag 0x0 [ 3577.294461][T14048] savu 0003:1E7D:2D5A.00AA: unbalanced collection at end of report description [ 3577.304910][T14048] savu 0003:1E7D:2D5A.00AA: parse failed [ 3577.316257][T14048] savu 0003:1E7D:2D5A.00AA: probe with driver savu failed with error -22 [ 3578.613850][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11477'. [ 3578.631717][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11477'. [ 3578.645876][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11477'. [ 3580.310089][T14048] usb 7-1: USB disconnect, device number 64 [ 3580.510591][T15202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3580.519682][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3581.033672][T18387] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 3581.063607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3581.071984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3581.263944][T14071] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 3581.295118][T18387] usb 7-1: Using ep0 maxpacket: 16 [ 3581.436291][T14071] usb 2-1: Using ep0 maxpacket: 8 [ 3581.666078][T14071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3581.864229][T14080] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 3581.977944][T14071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3581.989666][T14071] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3582.040189][T14071] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 3582.125060][T14071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3582.244690][T14071] usb 2-1: config 0 descriptor?? [ 3582.594989][T14080] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3583.408321][T14080] usb 6-1: not running at top speed; connect to a high speed hub [ 3583.589818][T14080] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3584.183864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3584.192321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3584.729624][T14080] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3584.790738][T14080] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3584.815757][T14080] usb 6-1: Product: syz [ 3584.820053][T14080] usb 6-1: Manufacturer: syz [ 3584.960856][T14080] usb 6-1: SerialNumber: syz [ 3585.328693][T14071] usb 2-1: can't set config #0, error -71 [ 3585.339326][T14071] usb 2-1: USB disconnect, device number 74 [ 3585.747198][T18387] usb 7-1: unable to get BOS descriptor or descriptor too short [ 3585.756564][T18387] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 3585.772982][T18387] usb 7-1: can't read configurations, error -71 [ 3585.811479][T14080] usb 6-1: can't set config #1, error -71 [ 3585.841510][T14080] usb 6-1: USB disconnect, device number 15 [ 3586.267468][T14019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3586.276602][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3586.987114][T18387] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 3587.863591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3587.872025][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3588.180121][T18387] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3588.242650][T18387] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3588.458019][T18387] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3588.481721][T18387] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3588.492383][T18387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3588.516645][T18387] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3588.557646][T18387] usb 7-1: invalid MIDI out EP 0 [ 3588.651056][T18387] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3588.788774][T19027] delete_channel: no stack [ 3588.869175][T18161] udevd[18161]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3588.961095][T18387] usb 7-1: USB disconnect, device number 66 [ 3591.313582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3591.321960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3592.003859][T14048] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 3592.052220][T31969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3592.060739][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3592.343717][T14048] usb 2-1: Using ep0 maxpacket: 8 [ 3592.355942][T14048] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3592.366359][T14048] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3592.381686][T14048] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3592.411494][T14048] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3592.816070][T14048] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3592.825436][T14048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3592.876554][T18387] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 3593.366484][T18387] usb 7-1: Using ep0 maxpacket: 32 [ 3593.375821][T18387] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 3593.398409][T18387] usb 7-1: config 0 has no interface number 0 [ 3593.421687][T14048] usb 2-1: usb_control_msg returned -71 [ 3593.428904][T14048] usbtmc 2-1:16.0: can't read capabilities [ 3593.437419][T18387] usb 7-1: config 0 interface 106 has no altsetting 0 [ 3593.460582][T18387] usb 7-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d [ 3593.474053][T18387] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3593.482117][T18387] usb 7-1: Product: syz [ 3593.604923][T18387] usb 7-1: Manufacturer: syz [ 3593.609606][T18387] usb 7-1: SerialNumber: syz [ 3593.627162][T18387] usb 7-1: config 0 descriptor?? [ 3593.761502][T14048] usb 2-1: USB disconnect, device number 75 [ 3594.362601][T18387] cdc_phonet 7-1:0.106: probe with driver cdc_phonet failed with error -22 [ 3595.300405][T19097] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 3595.623856][T14048] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3595.645749][T19105] ================================================================== [ 3595.653867][T19105] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3595.662531][T19105] Write of size 1440 at addr ffffc90003b1cda0 by task vivid-000-vid-c/19105 [ 3595.671328][T19105] [ 3595.673697][T19105] CPU: 1 UID: 0 PID: 19105 Comm: vivid-000-vid-c Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 3595.673724][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3595.673743][T19105] Call Trace: [ 3595.673759][T19105] [ 3595.673769][T19105] dump_stack_lvl+0x189/0x250 [ 3595.673807][T19105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3595.673838][T19105] ? __pfx__printk+0x10/0x10 [ 3595.673860][T19105] ? __pfx__printk+0x10/0x10 [ 3595.673878][T19105] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 3595.673902][T19105] ? __virt_addr_valid+0xc3/0x540 [ 3595.673932][T19105] print_report+0xb4/0x290 [ 3595.673957][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3595.673984][T19105] kasan_report+0x118/0x150 [ 3595.674014][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3595.674044][T19105] kasan_check_range+0x29a/0x2b0 [ 3595.674072][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3595.674099][T19105] __asan_memcpy+0x40/0x70 [ 3595.674120][T19105] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3595.674185][T19105] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 3595.674225][T19105] ? kvm_sched_clock_read+0x11/0x20 [ 3595.674252][T19105] ? __lock_acquire+0xaac/0xd20 [ 3595.674291][T19105] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 3595.674327][T19105] ? cgroup_freezing+0x2ad/0x360 [ 3595.674355][T19105] vivid_thread_vid_cap+0x8d8/0x10d0 [ 3595.674394][T19105] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3595.674419][T19105] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3595.674444][T19105] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3595.674472][T19105] ? __kthread_parkme+0x7b/0x200 [ 3595.674495][T19105] ? __kthread_parkme+0x1a1/0x200 [ 3595.674528][T19105] kthread+0x711/0x8a0 [ 3595.674556][T19105] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3595.674579][T19105] ? __pfx_kthread+0x10/0x10 [ 3595.674605][T19105] ? __pfx_kthread+0x10/0x10 [ 3595.674630][T19105] ? _raw_spin_unlock_irq+0x23/0x50 [ 3595.674654][T19105] ? lockdep_hardirqs_on+0x9c/0x150 [ 3595.674679][T19105] ? __pfx_kthread+0x10/0x10 [ 3595.674704][T19105] ret_from_fork+0x4b/0x80 [ 3595.674725][T19105] ? __pfx_kthread+0x10/0x10 [ 3595.674749][T19105] ret_from_fork_asm+0x1a/0x30 [ 3595.674777][T19105] [ 3595.674786][T19105] [ 3595.783612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3595.784639][T19105] The buggy address belongs to the virtual mapping at [ 3595.784639][T19105] [ffffc90003b06000, ffffc90003b1e000) created by: [ 3595.784639][T19105] vb2_vmalloc_alloc+0xef/0x340 [ 3595.789740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3595.795623][T19105] [ 3595.795633][T19105] The buggy address belongs to the physical page: [ 3595.795644][T19105] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888031f9a000 pfn:0x31f9a [ 3595.795675][T19105] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 3595.795707][T19105] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 3595.800949][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 3595.805933][T19105] raw: ffff888031f9a000 0000000000000000 00000001ffffffff 0000000000000000 [ 3595.805948][T19105] page dumped because: kasan: bad access detected [ 3595.805969][T19105] page_owner tracks the page as allocated [ 3595.805979][T19105] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 19083, tgid 19080 (syz.6.11497), ts 3594859630175, free_ts 3588674622936 [ 3596.002854][T19105] post_alloc_hook+0x1d8/0x230 [ 3596.007644][T19105] get_page_from_freelist+0x21ce/0x22b0 [ 3596.013200][T19105] __alloc_frozen_pages_noprof+0x181/0x370 [ 3596.019012][T19105] alloc_pages_mpol+0x232/0x4a0 [ 3596.023884][T19105] alloc_pages_noprof+0xa9/0x190 [ 3596.028842][T19105] __vmalloc_node_range_noprof+0x8fe/0x12c0 [ 3596.034754][T19105] vmalloc_user_noprof+0x74/0x80 [ 3596.039703][T19105] vb2_vmalloc_alloc+0xef/0x340 [ 3596.044571][T19105] __vb2_queue_alloc+0x9c2/0x15a0 [ 3596.049608][T19105] vb2_core_reqbufs+0xc31/0x1420 [ 3596.054557][T19105] __vb2_init_fileio+0x318/0xff0 [ 3596.059509][T19105] __vb2_perform_fileio+0x284/0x1600 [ 3596.064807][T19105] vb2_fop_read+0x273/0x360 [ 3596.069322][T19105] v4l2_read+0x19c/0x2c0 [ 3596.073581][T19105] vfs_read+0x200/0x980 [ 3596.077758][T19105] ksys_pread64+0x126/0x1c0 [ 3596.082274][T19105] page last free pid 15 tgid 15 stack trace: [ 3596.088259][T19105] __free_frozen_pages+0xb0e/0xcd0 [ 3596.093390][T19105] rcu_core+0xca5/0x1710 [ 3596.097662][T19105] handle_softirqs+0x283/0x870 [ 3596.102437][T19105] run_ksoftirqd+0x9b/0x100 [ 3596.106951][T19105] smpboot_thread_fn+0x53f/0xa60 [ 3596.111897][T19105] kthread+0x711/0x8a0 [ 3596.115976][T19105] ret_from_fork+0x4b/0x80 [ 3596.120408][T19105] ret_from_fork_asm+0x1a/0x30 [ 3596.125192][T19105] [ 3596.127522][T19105] Memory state around the buggy address: [ 3596.133182][T19105] ffffc90003b1cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3596.141256][T19105] ffffc90003b1cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3596.149336][T19105] >ffffc90003b1d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3596.157399][T19105] ^ [ 3596.161473][T19105] ffffc90003b1d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3596.169539][T19105] ffffc90003b1d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 3596.177604][T19105] ================================================================== [ 3596.185786][ C1] vkms_vblank_simulate: vblank timer overrun [ 3596.224624][T19105] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3596.231867][T19105] CPU: 1 UID: 0 PID: 19105 Comm: vivid-000-vid-c Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 3596.244374][T19105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3596.254454][T19105] Call Trace: [ 3596.257756][T19105] [ 3596.260703][T19105] dump_stack_lvl+0x99/0x250 [ 3596.265308][T19105] ? __asan_memcpy+0x40/0x70 [ 3596.269900][T19105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3596.275107][T19105] ? __pfx__printk+0x10/0x10 [ 3596.279701][T19105] panic+0x2db/0x790 [ 3596.283612][T19105] ? __pfx_panic+0x10/0x10 [ 3596.288054][T19105] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 3596.293956][T19105] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3596.300307][T19105] ? print_memory_metadata+0x314/0x400 [ 3596.305776][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3596.311420][T19105] check_panic_on_warn+0x89/0xb0 [ 3596.316369][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3596.322008][T19105] end_report+0x78/0x160 [ 3596.326257][T19105] kasan_report+0x129/0x150 [ 3596.330767][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3596.336416][T19105] kasan_check_range+0x29a/0x2b0 [ 3596.341363][T19105] ? tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3596.347017][T19105] __asan_memcpy+0x40/0x70 [ 3596.351448][T19105] tpg_fill_plane_buffer+0x1b76/0x5ec0 [ 3596.356952][T19105] vivid_thread_vid_cap_tick+0xfff/0x5fe0 [ 3596.362695][T19105] ? kvm_sched_clock_read+0x11/0x20 [ 3596.367905][T19105] ? __lock_acquire+0xaac/0xd20 [ 3596.372773][T19105] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 3596.378941][T19105] ? cgroup_freezing+0x2ad/0x360 [ 3596.383897][T19105] vivid_thread_vid_cap+0x8d8/0x10d0 [ 3596.389211][T19105] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3596.394938][T19105] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 3596.400836][T19105] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3596.407173][T19105] ? __kthread_parkme+0x7b/0x200 [ 3596.412114][T19105] ? __kthread_parkme+0x1a1/0x200 [ 3596.417146][T19105] kthread+0x711/0x8a0 [ 3596.421251][T19105] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 3596.426987][T19105] ? __pfx_kthread+0x10/0x10 [ 3596.431604][T19105] ? __pfx_kthread+0x10/0x10 [ 3596.436205][T19105] ? _raw_spin_unlock_irq+0x23/0x50 [ 3596.441546][T19105] ? lockdep_hardirqs_on+0x9c/0x150 [ 3596.446846][T19105] ? __pfx_kthread+0x10/0x10 [ 3596.451444][T19105] ret_from_fork+0x4b/0x80 [ 3596.455873][T19105] ? __pfx_kthread+0x10/0x10 [ 3596.460469][T19105] ret_from_fork_asm+0x1a/0x30 [ 3596.465245][T19105] [ 3596.468597][T19105] Kernel Offset: disabled [ 3596.472930][T19105] Rebooting in 86400 seconds..