last executing test programs: 4m28.894970902s ago: executing program 2 (id=4223): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000009140)={0x2020, 0x0, 0x0}, 0x2020) unshare(0x28040600) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0xfffc, 0x200, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) 4m27.928979752s ago: executing program 2 (id=4228): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x3}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) fsopen(&(0x7f0000000000)='bfs\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f0000000180)={0x0, "8ebd01b3292084cff57a96a55557e37c122c5fa914737fd4dd21cf71c4870784"}) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r6, 0x1) 4m25.837235561s ago: executing program 2 (id=4238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e389}]}}]}, 0x44}}, 0x86) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="100000"], 0x14}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 4m25.57856583s ago: executing program 2 (id=4240): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 4m24.49247206s ago: executing program 2 (id=4247): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) socket$netlink(0x10, 0x3, 0xf) write$evdev(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) pread64(r1, &(0x7f0000000800)=""/82, 0x52, 0x8f6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x2, 0x5, 0x0, 0x0, 0x8}) 4m23.605752673s ago: executing program 2 (id=4249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m22.675245685s ago: executing program 32 (id=4249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.965890957s ago: executing program 1 (id=4967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(0x0, 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r6 = getpid() fcntl$setownex(r2, 0xf, &(0x7f00000007c0)={0x0, r6}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdf59}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x78, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 15.1382697s ago: executing program 0 (id=4960): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3d8, 0x10c, 0x10c, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @local, 0xff, 0xffffff00, 0x5, 0x9, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x1, 0xf206, 0xe28f, 0x5, 'veth0_to_bond\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x202}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}}}, {{@arp={@empty, @loopback, 0xffffffff, 0xff, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0x0, 0x101, 0xff, 0x0, 0xff]}}, 0x16, 0x6, 0x9, 0xc8c0, 0xf4f0, 0x5, 'pim6reg0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x4}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@loopback, @local, 0xffffff00, 0xffffffff, 0xb, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x1000, 0x3, 0x5, 0xa, 0x101, 0xcd, 'ip6_vti0\x00', 'pim6reg1\x00', {}, {0x2a96b25154b01616}, 0x0, 0x20}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0x4, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8010}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x2d4, 0xffffffff, 0x0, 0x180, 0xb8, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}, {0x1, 0x10}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @remote, 0x0, 0xff000000, 'ip6tnl0\x00', 'wg0\x00', {0xff}, {}, 0x11, 0x2, 0x4}, 0x0, 0xa4, 0xc8, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x4, 0xd, 0x3, 0x4, 0x5}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x80000000, 0x3, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x330) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "74bc73ad", {0x1, 0x2, 0x8001, 0xff, 0x3}}) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') 14.621372552s ago: executing program 5 (id=4962): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) write$tun(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @initdev}, 0x0) 13.996451355s ago: executing program 1 (id=4965): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000008000000000000000000001ac14142500000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0', [{0x20, './cgroup/syz0\x00'}, {0x20, '['}, {0x20, './cgroup/syz0\x00'}, {0x20, './cgroup/syz0\x00'}, {0x20, '}@'}, {0x20, 'T\xb6=\xca@8\xbd]S4\x99i=\x99\xb1\x82\x82\x0e.\xff\x88v\x00\x00\xad\x980Q\x1d\xa5\xb9\x13D<\xc5\xb6X\x93\xe5\v\xe4\xdb\xbb\x18:\xb0+\x03\xf9\xee\xe5o\x8dBuR\xc0:\x16\xcb\xd4B5|AJ\xd4\x94\xc1\xa4\xee\xbe0!\xecp]\xf78ne\xe9\xad\xb9\xb4k\xc3K\xf5t)\x97Q\xab\xb1\xb1c\xdc\xb5K\xdf\xec\xce\xb9\xce\x14|\xedA\xea\xdd|?\xdb\xad_\x8fr\xaf\xbb\x80\x88\nD\x93h\xd1=U\x986Q\x99\xd7\x99B\xc5e\x0fI\x84\xd7r~\x1f\x15\xf9.\x9b\"\xa7\xa9,\xb3D\x16y\x14\xa6\xf1/4,m\'\xb3\x9c\xf9\xa4\t\x93\xa5\x81Y\xd2j}\xcaO+\x1e\x9fq\xc8\xe4\x7f\xfb57\xf2\x10#\xc2C\xbd\x83\x90\x9e!t\x04\xaf\xadc\xb9\xec\x18\xc6\x15\xfa\x1e|\x9d3'}, {}], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86"}, 0x172) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 12.526182005s ago: executing program 5 (id=4966): socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8b6c, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x2a020480) unshare(0xa000080) 11.936562686s ago: executing program 0 (id=4968): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000000)={0x8, "a69dd9e6c28eabf7"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a6a35a08460d1220ec4d0102030109021b00010000a000090494000108ca6d000905070310"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x80003) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x6, 0x20, @buffer={0x0, 0x2c, 0x0}, &(0x7f00000001c0)="bf274c199f6e", 0x0, 0x1000000c, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000001bc0)='net/ip_vs_stats\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000440)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @mcast1, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x3a}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0xc0840, 0x0) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getroute={0x24, 0x1a, 0x1, 0x70bd25, 0x8, {0x1c, 0x14, 0x20, 0x4, 0xfc, 0x0, 0xc8, 0x1, 0x1000}, [@RTA_DST={0x8, 0x1, {0x800}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r8 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r8, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) renameat2(r6, &(0x7f0000000040)='./bus\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x1) read$FUSE(r6, &(0x7f0000001c00)={0x2020}, 0x2020) 11.29210367s ago: executing program 4 (id=4969): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8b6c, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x20041081) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x2a020480) 11.191437293s ago: executing program 3 (id=4970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = gettid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x1000000db, 0xfffffdffffffffff, 0xfa11, 0xfffbffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x8004) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d46c0000007f000001000000000000000000000000010000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000053500000a0001002000000000000000480003006465666c6174650000000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, 0x0, 0x0) socket(0xa, 0x3, 0xfffffffd) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x1) 10.994343667s ago: executing program 5 (id=4971): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0', [{0x20, './cgroup/syz0\x00'}, {0x20, '['}, {0x20, './cgroup/syz0\x00'}, {0x20, './cgroup/syz0\x00'}, {0x20, '}@'}, {0x20, 'T\xb6=\xca@8\xbd]S4\x99i=\x99\xb1\x82\x82\x0e.\xff\x88v\x00\x00\xad\x980Q\x1d\xa5\xb9\x13D<\xc5\xb6X\x93\xe5\v\xe4\xdb\xbb\x18:\xb0+\x03\xf9\xee\xe5o\x8dBuR\xc0:\x16\xcb\xd4B5|AJ\xd4\x94\xc1\xa4\xee\xbe0!\xecp]\xf78ne\xe9\xad\xb9\xb4k\xc3K\xf5t)\x97Q\xab\xb1\xb1c\xdc\xb5K\xdf\xec\xce\xb9\xce\x14|\xedA\xea\xdd|?\xdb\xad_\x8fr\xaf\xbb\x80\x88\nD\x93h\xd1=U\x986Q\x99\xd7\x99B\xc5e\x0fI\x84\xd7r~\x1f\x15\xf9.\x9b\"\xa7\xa9,\xb3D\x16y\x14\xa6\xf1/4,m\'\xb3\x9c\xf9\xa4\t\x93\xa5\x81Y\xd2j}\xcaO+\x1e\x9fq\xc8\xe4\x7f\xfb57\xf2\x10#\xc2C\xbd\x83\x90\x9e!t\x04\xaf\xadc\xb9\xec\x18\xc6\x15\xfa\x1e|\x9d3'}, {}], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0x1ce) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.734276323s ago: executing program 1 (id=4972): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) brk(0x400000ffc000) r4 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="7365aa6c97a937451dbece6375726974792e2f6400"]) ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x1314, 0x1184, 0x150, 0x150, 0x1184, 0xf8010000, 0x124c, 0x238, 0x238, 0x124c, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [], [], 'team_slave_0\x00', 'hsr0\x00', {0xff}, {}, 0x84}, 0x0, 0x111c, 0x1184, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.net/syz0\x00', 0x1000000, {0x8}}}, @common=@hbh={{0x48}, {0x3, 0x4, 0x1, [0x1ff, 0x3, 0xe, 0x1, 0x54f, 0xe, 0x0, 0xa, 0x1, 0xe5, 0x1, 0x400, 0x9, 0x5, 0xe, 0xfe0], 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'batadv_slave_0\x00', 'gre0\x00', {}, {}, 0x87}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x1370) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 9.605492492s ago: executing program 4 (id=4973): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f0000000880)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x5}}}}}}, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 9.081172507s ago: executing program 3 (id=4974): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') socket$tipc(0x1e, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) pipe(&(0x7f0000000000)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.230057938s ago: executing program 0 (id=4975): openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000b80)={0x7, 0x0, [{0x6, 0x8a2, 0x5, 0x10001, 0x2, 0x4ad, 0x5483}, {0x80000001, 0x2, 0x2, 0x815, 0x7, 0x4, 0x3}, {0x40000001, 0x0, 0x1, 0x10, 0x6e, 0x0, 0x7}, {0xc0000000, 0x3, 0x2, 0x0, 0x9ee0, 0x7fff, 0x4}, {0x0, 0x6, 0x6, 0x1000, 0x4, 0xc4, 0x5a}, {0x8000000d, 0xdf3a, 0x0, 0x7, 0x8, 0xe, 0x9}, {0x2, 0x80, 0x0, 0x1, 0x3, 0x1, 0x4e}]}) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000080)=""/17, &(0x7f0000000180)=0x14) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000ac0)={'\x00', 0x0, 0x32c, 0x2, 0xb66}) sendmmsg$inet(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72b", 0xd4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94", 0xf3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) gettid() 8.229583119s ago: executing program 3 (id=4976): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffff9c, &(0x7f0000000080), 0x101000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001800000000000000200000085000000d000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x2b, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8.148092845s ago: executing program 3 (id=4977): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = dup(0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000540)={{0x5, 0x0, 0x5, 0x100, '\x00', 0x401}, 0x3, 0x20, 0x6, r6, 0x6, 0x3, 'syz1\x00', &(0x7f0000000200)=[',&,,]\x00', '@{.}(\x00', '#! ', '#! ', '\x00', '}@\x00'], 0x16}) getsockname(r0, &(0x7f0000000180)=@hci, &(0x7f0000000040)=0x80) socketpair(0x2b, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_cache\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 8.104088203s ago: executing program 1 (id=4978): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) write$tun(r1, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @initdev}, 0x0) 8.041636401s ago: executing program 4 (id=4979): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000008000000000000000000001", @ANYRES32=0x0, @ANYRES32], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0', [{0x20, './cgroup/syz0\x00'}, {0x20, '['}, {0x20, './cgroup/syz0\x00'}, {0x20, './cgroup/syz0\x00'}, {0x20, '}@'}, {0x20, 'T\xb6=\xca@8\xbd]S4\x99i=\x99\xb1\x82\x82\x0e.\xff\x88v\x00\x00\xad\x980Q\x1d\xa5\xb9\x13D<\xc5\xb6X\x93\xe5\v\xe4\xdb\xbb\x18:\xb0+\x03\xf9\xee\xe5o\x8dBuR\xc0:\x16\xcb\xd4B5|AJ\xd4\x94\xc1\xa4\xee\xbe0!\xecp]\xf78ne\xe9\xad\xb9\xb4k\xc3K\xf5t)\x97Q\xab\xb1\xb1c\xdc\xb5K\xdf\xec\xce\xb9\xce\x14|\xedA\xea\xdd|?\xdb\xad_\x8fr\xaf\xbb\x80\x88\nD\x93h\xd1=U\x986Q\x99\xd7\x99B\xc5e\x0fI\x84\xd7r~\x1f\x15\xf9.\x9b\"\xa7\xa9,\xb3D\x16y\x14\xa6\xf1/4,m\'\xb3\x9c\xf9\xa4\t\x93\xa5\x81Y\xd2j}\xcaO+\x1e\x9fq\xc8\xe4\x7f\xfb57\xf2\x10#\xc2C\xbd\x83\x90\x9e!t\x04\xaf\xadc\xb9\xec\x18\xc6\x15\xfa\x1e|\x9d3'}, {}], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0x1ce) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.496510131s ago: executing program 5 (id=4980): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3d8, 0x10c, 0x10c, 0x10c, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@local, @local, 0xff, 0xffffff00, 0x5, 0x9, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x5, 0x1, 0xf206, 0xe28f, 0x5, 'veth0_to_bond\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x0, 0x202}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}}}, {{@arp={@empty, @loopback, 0xffffffff, 0xff, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0x0, 0x101, 0xff, 0x0, 0xff]}}, 0x16, 0x6, 0x9, 0xc8c0, 0xf4f0, 0x5, 'pim6reg0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x4}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@loopback, @local, 0xffffff00, 0xffffffff, 0xb, 0x1, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x1000, 0x3, 0x5, 0xa, 0x101, 0xcd, 'ip6_vti0\x00', 'pim6reg1\x00', {}, {0x2a96b25154b01616}, 0x0, 0x20}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, 0x4, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x424) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000002c0)={0x2020}, 0x2020) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x3}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x8010}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002300)=@filter={'filter\x00', 0xe, 0x4, 0x2d4, 0xffffffff, 0x0, 0x180, 0xb8, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}, {0x1, 0x10}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @remote, 0x0, 0xff000000, 'ip6tnl0\x00', 'wg0\x00', {0xff}, {}, 0x11, 0x2, 0x4}, 0x0, 0xa4, 0xc8, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0x4, 0xd, 0x3, 0x4, 0x5}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@unspec=@connmark={{0x2c}, {0x80000000, 0x3, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x330) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, "74bc73ad", {0x1, 0x2, 0x8001, 0xff, 0x3}}) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') 6.493500229s ago: executing program 0 (id=4981): socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0xffffffff, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) pread64(r6, &(0x7f0000000480)=""/209, 0xd1, 0x2) read$FUSE(r6, &(0x7f0000002c40)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r5, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0xfffffffffffffe8e) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r2, 0xffff8000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 6.162423342s ago: executing program 3 (id=4982): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000008000000000000000000001ac14142500000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0', [{0x20, './cgroup/syz0\x00'}, {0x20, '['}, {0x20, './cgroup/syz0\x00'}, {0x20, './cgroup/syz0\x00'}, {0x20, '}@'}, {0x20, 'T\xb6=\xca@8\xbd]S4\x99i=\x99\xb1\x82\x82\x0e.\xff\x88v\x00\x00\xad\x980Q\x1d\xa5\xb9\x13D<\xc5\xb6X\x93\xe5\v\xe4\xdb\xbb\x18:\xb0+\x03\xf9\xee\xe5o\x8dBuR\xc0:\x16\xcb\xd4B5|AJ\xd4\x94\xc1\xa4\xee\xbe0!\xecp]\xf78ne\xe9\xad\xb9\xb4k\xc3K\xf5t)\x97Q\xab\xb1\xb1c\xdc\xb5K\xdf\xec\xce\xb9\xce\x14|\xedA\xea\xdd|?\xdb\xad_\x8fr\xaf\xbb\x80\x88\nD\x93h\xd1=U\x986Q\x99\xd7\x99B\xc5e\x0fI\x84\xd7r~\x1f\x15\xf9.\x9b\"\xa7\xa9,\xb3D\x16y\x14\xa6\xf1/4,m\'\xb3\x9c\xf9\xa4\t\x93\xa5\x81Y\xd2j}\xcaO+\x1e\x9fq\xc8\xe4\x7f\xfb57\xf2\x10#\xc2C\xbd\x83\x90\x9e!t\x04\xaf\xadc\xb9\xec\x18\xc6\x15\xfa\x1e|\x9d3'}, {}], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86"}, 0x172) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.002648366s ago: executing program 1 (id=4983): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) openat$dir(0xffffff9c, 0x0, 0xb0040, 0x140) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000001100)) 4.255674577s ago: executing program 4 (id=4984): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, r3, 0x1, 0x55, 0x6, @multicast}, 0x14) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x401, 0x4f5, 0x4, 0x4}, &(0x7f0000000180)=0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x20000001, 0x4, 0x0, 0x1, 0x5}) socket$kcm(0x2, 0x5, 0x84) syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) clock_gettime(0x300, 0x0) bind$l2tp(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 4.193520928s ago: executing program 5 (id=4985): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x6, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0x6, 0x0, 0x5, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 4.130994738s ago: executing program 0 (id=4986): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000008000000000000000000001ac14142500000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000ec0)={'#! ', './file0', [{0x20, './cgroup/syz0\x00'}, {0x20, '['}, {0x20, './cgroup/syz0\x00'}, {0x20, '}@'}, {0x20, 'T\xb6=\xca@8\xbd]S4\x99i=\x99\xb1\x82\x82\x0e.\xff\x88v\x00\x00\xad\x980Q\x1d\xa5\xb9\x13D<\xc5\xb6X\x93\xe5\v\xe4\xdb\xbb\x18:\xb0+\x03\xf9\xee\xe5o\x8dBuR\xc0:\x16\xcb\xd4B5|AJ\xd4\x94\xc1\xa4\xee\xbe0!\xecp]\xf78ne\xe9\xad\xb9\xb4k\xc3K\xf5t)\x97Q\xab\xb1\xb1c\xdc\xb5K\xdf\xec\xce\xb9\xce\x14|\xedA\xea\xdd|?\xdb\xad_\x8fr\xaf\xbb\x80\x88\nD\x93h\xd1=U\x986Q\x99\xd7\x99B\xc5e\x0fI\x84\xd7r~\x1f\x15\xf9.\x9b\"\xa7\xa9,\xb3D\x16y\x14\xa6\xf1/4,m\'\xb3\x9c\xf9\xa4\t\x93\xa5\x81Y\xd2j}\xcaO+\x1e\x9fq\xc8\xe4\x7f\xfb57\xf2\x10#\xc2C\xbd\x83\x90\x9e!t\x04\xaf\xadc\xb9\xec\x18\xc6\x15\xfa\x1e|\x9d3'}, {}], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0x1bf) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6b8306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x28) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.751304318s ago: executing program 4 (id=4987): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000085}, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) chroot(0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x4170010, r2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80000001, 0x5, 0x0, 0x100, 0x25, 0x21100e6, r7}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000640)={'veth1_to_bond\x00', 0x0}) 2.388317578s ago: executing program 5 (id=4988): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0xdc, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'dont_appraise'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff801}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26ed}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#[\xe5\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':--,,+%%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^{/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xdc}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.387688325s ago: executing program 3 (id=4989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x501b02) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x45}, 0x8000002) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000180)=""/135) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) 1.587787518s ago: executing program 1 (id=4990): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x8001) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r4 = getpgid(r3) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x2, r4}) fcntl$setsig(r2, 0xa, 0x1c) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000, 0x0, 0x0, 0x0, 0x0, 0x3]}}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) lseek(r5, 0x36, 0x1) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="401202000000e8"], 0x0, 0x0}) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1.413618485s ago: executing program 4 (id=4991): syz_io_uring_setup(0x39ed, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000), &(0x7f0000000000)) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b010902"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40086602, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) gettid() write$dsp(r4, &(0x7f0000000340)="8bc0d50e", 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4992): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r4 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000007c0)={0x0, r4}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x7c, r5, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdf59}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) kernel console output (not intermixed with test programs): 488][T15050] mos7840 1-1:0.0: device disconnected [ 1218.908597][T10125] usb 4-1: config 0 descriptor?? [ 1219.265402][ T984] usb 3-1: USB disconnect, device number 119 [ 1220.014110][T10125] usbhid 4-1:0.0: can't add hid device: -71 [ 1220.020271][T10125] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1220.030872][T10125] usb 4-1: USB disconnect, device number 119 [ 1220.546274][T20046] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4158'. [ 1221.232653][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4162'. [ 1221.715604][T20068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1221.774551][T20071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1221.809027][ T5948] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1221.966432][ T5948] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1221.991563][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.020378][ T5948] usb 2-1: config 0 descriptor?? [ 1222.037308][ T5948] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1224.200096][ T5948] usb 2-1: USB disconnect, device number 6 [ 1224.847898][ T5948] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1225.074275][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 1225.099029][ T5948] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1225.139251][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.350377][ T5948] usb 3-1: config 0 descriptor?? [ 1225.399571][ T5948] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1226.615824][T20138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1227.251073][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.459012][ T5948] gspca_vc032x: reg_w err -71 [ 1227.463864][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.515948][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.537515][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.555770][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.572519][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.592697][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.608314][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.630336][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.658823][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.669228][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.685903][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.698828][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.716624][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.733916][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.761990][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.774578][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.813879][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1227.835305][ T5948] gspca_vc032x: Unknown sensor... [ 1227.848042][ T5948] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1227.882629][ T5948] usb 3-1: USB disconnect, device number 120 [ 1228.154472][T20154] binder: 20153:20154 unknown command 0 [ 1228.178038][T20154] binder: 20153:20154 ioctl c0306201 80000080 returned -22 [ 1228.887326][ T30] audit: type=1800 audit(1769999617.578:3817): pid=20157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4194" name="/" dev="fuse" ino=9 res=0 errno=0 [ 1229.380797][T20168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.418647][T20170] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1229.434741][T20168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.579002][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1229.678916][ T5948] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1229.888965][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.916248][ T5948] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.931055][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.946454][ T5948] usb 2-1: config 0 descriptor?? [ 1229.960183][ T5948] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.380324][ T5948] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1230.392991][ T5948] pwc: recv_control_msg error -32 req 02 val 2700 [ 1230.410671][ T5948] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1230.421174][ T5948] pwc: recv_control_msg error -32 req 04 val 1000 [ 1230.435751][ T5948] pwc: recv_control_msg error -32 req 04 val 1300 [ 1230.443941][ T5948] pwc: recv_control_msg error -32 req 04 val 1400 [ 1230.479640][ T5948] pwc: recv_control_msg error -32 req 02 val 2000 [ 1230.551088][ T30] audit: type=1326 audit(1769999619.238:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20189 comm="syz.4.4208" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x0 [ 1230.689681][ T5948] pwc: recv_control_msg error -71 req 04 val 1500 [ 1230.712604][ T5948] pwc: recv_control_msg error -71 req 02 val 2500 [ 1230.727288][ T5948] pwc: recv_control_msg error -71 req 02 val 2400 [ 1230.745161][ T5948] pwc: recv_control_msg error -71 req 02 val 2600 [ 1230.752912][ T5948] pwc: recv_control_msg error -71 req 02 val 2900 [ 1230.768377][ T5948] pwc: recv_control_msg error -71 req 02 val 2800 [ 1230.776074][ T5948] pwc: recv_control_msg error -71 req 04 val 1100 [ 1230.783448][ T5948] pwc: recv_control_msg error -71 req 04 val 1200 [ 1230.793919][ T5948] pwc: Registered as video103. [ 1230.806071][ T5948] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input102 [ 1230.837034][ T5948] usb 2-1: USB disconnect, device number 7 [ 1231.097848][T20202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1231.216528][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 1231.370721][T20209] netlink: 'syz.1.4214': attribute type 10 has an invalid length. [ 1232.367386][T20231] random: crng reseeded on system resumption [ 1233.260369][ T30] audit: type=1326 audit(1769999621.948:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20243 comm="syz.1.4227" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x0 [ 1235.873396][T20292] input: syz1 as /devices/virtual/input/input103 [ 1237.256179][ T9156] syz_tun (unregistering): left promiscuous mode [ 1237.335324][ T9156] macvlan0 (unregistering): left allmulticast mode [ 1237.365034][ T9156] macvlan0 (unregistering): left promiscuous mode [ 1237.383426][ T9156] bridge2: port 1(macvlan0) entered disabled state [ 1237.656098][ T3494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1237.953419][ T30] audit: type=1800 audit(1769999626.628:3820): pid=20308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4250" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1238.058458][ T3494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.280933][ T3494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.497528][ T3494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.828149][T10178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1238.838562][T10178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1238.855835][T10178] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1238.864133][T10178] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1238.872094][T10178] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1239.064182][ T3494] bridge_slave_1: left allmulticast mode [ 1239.071246][ T3494] bridge_slave_1: left promiscuous mode [ 1239.079436][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.102819][ T3494] bridge_slave_0: left allmulticast mode [ 1239.108635][ T3494] bridge_slave_0: left promiscuous mode [ 1239.145480][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.299016][ T984] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1239.518946][ T984] usb 4-1: Using ep0 maxpacket: 8 [ 1239.555606][ T984] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1239.566808][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.585975][ T984] usb 4-1: Product: syz [ 1239.602663][ T984] usb 4-1: Manufacturer: syz [ 1239.625148][ T984] usb 4-1: SerialNumber: syz [ 1239.673538][ T984] usb 4-1: config 0 descriptor?? [ 1239.912999][ T984] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1240.325687][ T3494] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1241.019030][T10178] Bluetooth: hci4: command tx timeout [ 1241.699532][ T984] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1241.766859][ T984] usb 4-1: USB disconnect, device number 120 [ 1242.161179][ T3494] bond2 (unregistering): (slave bridge2): Removing an active aggregator [ 1242.171244][ T3494] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1242.204009][ T3494] bridge2 (unregistering): left promiscuous mode [ 1242.226397][ T3494] bridge2 (unregistering): left allmulticast mode [ 1242.283953][ T3494] bond1 (unregistering): Released all slaves [ 1242.366270][ T3494] bond0 (unregistering): Released all slaves [ 1242.396816][T20366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1242.644552][ T3494] bond2 (unregistering): Released all slaves [ 1242.673691][ T3494] bond3 (unregistering): Released all slaves [ 1242.808218][ T3494] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1242.816268][ T3494] bond5 (unregistering): left promiscuous mode [ 1242.824759][ T3494] bond5 (unregistering): left allmulticast mode [ 1242.832270][ T3494] bond4 (unregistering): Released all slaves [ 1242.963670][ T3494] bond5 (unregistering): Released all slaves [ 1243.079316][T10178] Bluetooth: hci4: command tx timeout [ 1243.633515][T20325] chnl_net:caif_netlink_parms(): no params data found [ 1243.968499][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.974958][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.282671][ T3494] hsr_slave_0: left promiscuous mode [ 1244.311136][ T3494] hsr_slave_1: left promiscuous mode [ 1244.326543][ T3494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.674414][T20422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.688270][T20422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.834119][ T3494] team_slave_1 (unregistering): left allmulticast mode [ 1244.842351][ T3494] team0 (unregistering): Port device team_slave_1 removed [ 1244.890278][ T3494] team_slave_0 (unregistering): left allmulticast mode [ 1244.898659][ T3494] team0 (unregistering): Port device team_slave_0 removed [ 1245.159065][T10178] Bluetooth: hci4: command tx timeout [ 1245.315148][T20325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.322577][T20325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.329973][T20325] bridge_slave_0: entered allmulticast mode [ 1245.337968][T20325] bridge_slave_0: entered promiscuous mode [ 1245.363337][T20325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.382419][T20325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.391095][T20325] bridge_slave_1: entered allmulticast mode [ 1245.399875][T20325] bridge_slave_1: entered promiscuous mode [ 1245.531892][T20325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.575084][T20426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4276'. [ 1245.615529][T20325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.768680][T20432] input: syz1 as /devices/virtual/input/input104 [ 1245.856527][T20325] team0: Port device team_slave_0 added [ 1245.930661][T20325] team0: Port device team_slave_1 added [ 1245.945797][ T3494] IPVS: stop unused estimator thread 0... [ 1245.963002][T20436] netlink: 'syz.1.4279': attribute type 10 has an invalid length. [ 1246.008202][T20436] syz_tun: entered promiscuous mode [ 1246.072772][T20325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.079013][T20446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.088523][T20446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.088983][T20325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.147405][T20325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.221314][T20325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.228675][T20325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1246.336822][T20325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.409094][ T5948] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1246.582638][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.607384][ T5948] usb 4-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 1246.666527][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.700492][T20325] hsr_slave_0: entered promiscuous mode [ 1246.730377][ T5948] usb 4-1: config 0 descriptor?? [ 1246.750410][T20325] hsr_slave_1: entered promiscuous mode [ 1246.837481][T20325] debugfs: 'hsr0' already exists in 'hsr' [ 1246.990709][T20325] Cannot create hsr debugfs directory [ 1247.168317][ T5948] chicony 0003:04F2:1123.0050: hidraw0: USB HID v0.00 Device [HID 04f2:1123] on usb-dummy_hcd.3-1/input0 [ 1247.239419][T10178] Bluetooth: hci4: command tx timeout [ 1247.404157][ T5948] usb 4-1: USB disconnect, device number 121 [ 1247.540466][T20468] fido_id[20468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1248.018415][T20325] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1248.137836][T20325] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1248.186853][T20325] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1248.213076][T20325] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1248.757932][T20325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.818077][T20325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.855639][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.862956][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.063325][T19480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.070600][T19480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.137356][T20498] netlink: 'syz.3.4290': attribute type 39 has an invalid length. [ 1249.686952][T20325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.248013][T20325] veth0_vlan: entered promiscuous mode [ 1250.393728][T20325] veth1_vlan: entered promiscuous mode [ 1250.482706][T20325] veth0_macvtap: entered promiscuous mode [ 1250.526948][T20325] veth1_macvtap: entered promiscuous mode [ 1250.725176][T20325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.925287][T20325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.027421][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.051520][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.080596][T20522] syzkaller0: entered promiscuous mode [ 1251.096833][T20522] syzkaller0: entered allmulticast mode [ 1251.143248][T19480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.153008][T19480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.463726][ T35] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.511646][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.540919][ T35] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1251.570409][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.774530][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1251.978169][T20537] macvlan2 (unregistering): left allmulticast mode [ 1251.990434][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1252.000135][T20537] macvlan2 (unregistering): left promiscuous mode [ 1252.006956][T20537] bridge3: port 1(macvlan2) entered disabled state [ 1252.146508][ T35] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.157693][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.191806][ T35] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1252.207045][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.571317][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.585567][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.788662][T19480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.808596][T19480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.819982][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1255.286877][T20577] syzkaller0: entered promiscuous mode [ 1255.307158][T20577] syzkaller0: entered allmulticast mode [ 1256.548233][T20597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4315'. [ 1256.948921][T10125] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1257.259576][T10125] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.271776][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1257.281381][T10125] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1257.300426][T10125] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1257.314249][T10125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1257.341870][T10125] usb 1-1: SerialNumber: syz [ 1257.799129][T20595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1257.882984][T10125] usb 1-1: USB disconnect, device number 11 [ 1259.238912][T20629] netlink: 'syz.1.4323': attribute type 39 has an invalid length. [ 1259.693883][T20635] kvm: emulating exchange as write [ 1259.965415][T20642] syzkaller0: entered promiscuous mode [ 1259.978679][T20642] syzkaller0: entered allmulticast mode [ 1264.020561][T20530] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1264.194014][T20530] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.472331][T20530] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1264.497914][T20530] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.537373][T20530] usb 2-1: config 0 descriptor?? [ 1264.553375][T20530] pwc: Askey VC010 type 2 USB webcam detected. [ 1265.080072][T20530] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1265.096052][T20530] pwc: recv_control_msg error -32 req 02 val 2700 [ 1265.112247][T20530] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1265.128916][T20530] pwc: recv_control_msg error -32 req 04 val 1000 [ 1265.143254][T20530] pwc: recv_control_msg error -32 req 04 val 1300 [ 1265.158391][T20530] pwc: recv_control_msg error -32 req 04 val 1400 [ 1265.166713][T20530] pwc: recv_control_msg error -32 req 02 val 2000 [ 1265.176881][T20530] pwc: recv_control_msg error -32 req 02 val 2100 [ 1265.385930][T20530] pwc: recv_control_msg error -71 req 02 val 2500 [ 1265.399361][T20530] pwc: recv_control_msg error -71 req 02 val 2400 [ 1265.418495][T20530] pwc: recv_control_msg error -71 req 02 val 2600 [ 1265.464611][T20530] pwc: recv_control_msg error -71 req 02 val 2900 [ 1265.506761][T20530] pwc: recv_control_msg error -71 req 02 val 2800 [ 1265.521170][T15050] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1265.529495][T20530] pwc: recv_control_msg error -71 req 04 val 1100 [ 1265.549311][T20530] pwc: recv_control_msg error -71 req 04 val 1200 [ 1265.617640][T20530] pwc: Registered as video103. [ 1265.684007][T20530] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input105 [ 1265.731566][T15050] usb 6-1: Using ep0 maxpacket: 16 [ 1265.773126][T15050] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1265.796646][T20530] usb 2-1: USB disconnect, device number 8 [ 1265.803359][T15050] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1265.873042][T15050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.891527][T15050] usb 6-1: Product: syz [ 1265.895760][T15050] usb 6-1: Manufacturer: syz [ 1265.941434][T15050] usb 6-1: SerialNumber: syz [ 1266.052959][T15050] usb 6-1: config 0 descriptor?? [ 1266.105197][T15050] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1266.187502][T15050] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1266.435546][T20716] syzkaller0: entered promiscuous mode [ 1266.448998][T20716] syzkaller0: entered allmulticast mode [ 1266.713438][T15050] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1267.068589][ T5930] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1267.290989][T15050] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1267.308859][T15050] em28xx 6-1:0.0: board has no eeprom [ 1267.504268][ T5930] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1267.513841][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.908892][T15050] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1267.916811][T15050] em28xx 6-1:0.0: dvb set to bulk mode. [ 1267.928825][T10691] em28xx 6-1:0.0: Binding DVB extension [ 1267.948298][ T5930] usb 1-1: Product: syz [ 1267.956306][ T5930] usb 1-1: Manufacturer: syz [ 1267.961779][ T5930] usb 1-1: SerialNumber: syz [ 1267.968971][T15050] usb 6-1: USB disconnect, device number 2 [ 1267.978229][T15050] em28xx 6-1:0.0: Disconnecting em28xx [ 1268.690183][T10691] em28xx 6-1:0.0: Registering input extension [ 1268.711120][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.713543][T15050] em28xx 6-1:0.0: Closing input extension [ 1268.728888][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1268.799889][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1268.840975][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.898304][T20757] fuse: Invalid gid '00000000000000000005' [ 1268.927918][T15050] em28xx 6-1:0.0: Freeing device [ 1270.169035][T15050] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1270.209010][ T6891] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1270.328834][T15050] usb 4-1: Using ep0 maxpacket: 16 [ 1270.344188][T15050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.376257][T15050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1270.400034][T15050] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1270.428594][T15050] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1270.440037][ T6891] usb 6-1: Using ep0 maxpacket: 32 [ 1270.459985][T15050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.473644][ T6891] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1270.484792][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1270.500201][ T6891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.516996][T15050] usb 4-1: config 0 descriptor?? [ 1270.522594][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1270.545084][ T6891] usb 6-1: Product: syz [ 1270.564542][ T6891] usb 6-1: Manufacturer: syz [ 1270.580201][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1270.593702][ T6891] usb 6-1: SerialNumber: syz [ 1270.618648][ T6891] usb 6-1: config 0 descriptor?? [ 1270.624752][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1270.744447][ T6891] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1270.752338][ T5930] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1270.795233][ T5930] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1270.840524][ T5930] usb 1-1: USB disconnect, device number 12 [ 1270.965498][T15050] HID 045e:07da: Invalid code 65791 type 1 [ 1271.001218][T15050] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0051/input/input107 [ 1271.017170][T20810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.059076][T20810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.069535][T15050] microsoft 0003:045E:07DA.0051: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1271.850455][T20532] usb 4-1: USB disconnect, device number 122 [ 1272.396788][ T6891] gspca_ov534_9: reg_w failed -71 [ 1272.658972][ T6891] gspca_ov534_9: Unknown sensor 0000 [ 1272.659069][ T6891] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1272.701614][ T6891] usb 6-1: USB disconnect, device number 3 [ 1273.998831][ T6891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1274.153853][ T6891] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1274.174692][ T6891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.183358][ T6891] usb 2-1: Product: syz [ 1274.188079][ T6891] usb 2-1: Manufacturer: syz [ 1274.194251][ T6891] usb 2-1: SerialNumber: syz [ 1274.209641][T20871] input: syz0 as /devices/virtual/input/input108 [ 1274.515196][T20876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.531328][T20876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.645531][ T6891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1274.658426][ T6891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1275.419154][T20532] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1275.568965][T20532] usb 4-1: Using ep0 maxpacket: 8 [ 1275.578820][T20532] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1275.588206][T20532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.596774][T20532] usb 4-1: Product: syz [ 1275.601700][T20532] usb 4-1: Manufacturer: syz [ 1275.606461][T20532] usb 4-1: SerialNumber: syz [ 1275.615358][T20532] usb 4-1: config 0 descriptor?? [ 1275.841668][T20532] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1276.487691][ T6891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO [ 1276.511818][ T6891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1276.523299][ T6891] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1276.534561][ T6891] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1276.553249][ T6891] usb 2-1: USB disconnect, device number 9 [ 1276.675296][T20894] syzkaller0: entered promiscuous mode [ 1276.681054][T20894] syzkaller0: entered allmulticast mode [ 1276.719604][ T6880] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1276.884649][ T6880] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1276.894098][ T6880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.902255][ T6880] usb 1-1: Product: syz [ 1276.906464][ T6880] usb 1-1: Manufacturer: syz [ 1276.911144][ T6880] usb 1-1: SerialNumber: syz [ 1276.922270][ T6880] usb 1-1: config 0 descriptor?? [ 1276.936333][ T6880] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1277.079138][T15050] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1277.261240][T15050] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1277.269648][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1277.282423][T15050] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1277.294977][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1277.306515][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1277.321785][T15050] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1277.329375][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1277.340377][T15050] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1277.352737][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1277.364297][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1277.378389][T15050] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1277.385951][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1277.397307][T15050] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1277.399452][T20530] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1277.410423][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1277.428303][T15050] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1277.444614][T15050] usb 6-1: string descriptor 0 read error: -22 [ 1277.451522][T15050] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1277.460724][T15050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.482578][T15050] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1277.571351][T20530] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1277.588312][T20530] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1277.597976][T20530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1277.606574][T20530] usb 2-1: Product: syz [ 1277.611712][T20530] usb 2-1: Manufacturer: syz [ 1277.616589][T20530] usb 2-1: SerialNumber: syz [ 1277.735323][ T6891] usb 6-1: USB disconnect, device number 4 [ 1277.836013][T20530] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1277.869401][T20532] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1277.891840][T20532] usb 4-1: USB disconnect, device number 123 [ 1278.412816][T20905] syzkaller0: entered promiscuous mode [ 1278.418605][T20905] syzkaller0: entered allmulticast mode [ 1278.962482][ T6880] gspca_stk1135: reg_w 0x203 err -71 [ 1279.134355][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.147714][ T6880] gspca_stk1135: Sensor write failed [ 1279.160064][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.173746][ T6880] gspca_stk1135: Sensor write failed [ 1279.185530][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.198197][ T6880] gspca_stk1135: Sensor read failed [ 1279.211034][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.430291][ T6880] gspca_stk1135: Sensor read failed [ 1279.441867][ T6880] gspca_stk1135: Detected sensor type unknown (0x0) [ 1279.448541][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.468855][ T6880] gspca_stk1135: Sensor read failed [ 1279.478845][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.485320][ T6880] gspca_stk1135: Sensor read failed [ 1279.516861][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.549015][ T6880] gspca_stk1135: Sensor write failed [ 1279.566961][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1279.596368][ T6880] gspca_stk1135: Sensor write failed [ 1279.608399][ T6880] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 1279.634921][ T6880] usb 1-1: USB disconnect, device number 13 [ 1279.745000][T20929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1279.783425][T20929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.811730][T20931] binder_alloc: 20930: pid 20930 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1280.376184][ T6880] usb 2-1: USB disconnect, device number 10 [ 1280.410599][ T6880] usblp0: removed [ 1280.858903][ T6880] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 1281.423322][ T6880] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1281.438820][ T6880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.448885][ T6880] usb 2-1: Product: syz [ 1281.462832][ T6880] usb 2-1: Manufacturer: syz [ 1281.477158][ T6880] usb 2-1: SerialNumber: syz [ 1281.516498][ T6880] usb 2-1: config 0 descriptor?? [ 1281.534750][ T6880] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1282.478799][T10691] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1282.894158][T10691] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1282.916257][T10691] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1283.118875][T10691] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1283.174459][T10691] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1283.191500][T10691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.260178][T20957] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1283.888128][ T6880] gspca_stk1135: reg_w 0x2ff err -71 [ 1283.898844][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1283.905235][ T6880] gspca_stk1135: Sensor write failed [ 1283.919891][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1283.950854][ T6880] gspca_stk1135: Sensor write failed [ 1283.983769][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.035245][ T6880] gspca_stk1135: Sensor read failed [ 1284.068081][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.140142][ T6880] gspca_stk1135: Sensor read failed [ 1284.157430][ T6880] gspca_stk1135: Detected sensor type unknown (0x0) [ 1284.164454][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.181925][ T6880] gspca_stk1135: Sensor read failed [ 1284.187385][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.222466][ T6880] gspca_stk1135: Sensor read failed [ 1284.229281][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.235864][ T6880] gspca_stk1135: Sensor write failed [ 1284.249844][ T6880] gspca_stk1135: serial bus timeout: status=0x00 [ 1284.256240][ T6880] gspca_stk1135: Sensor write failed [ 1284.265112][ T6880] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1284.278477][ T6880] usb 2-1: USB disconnect, device number 11 [ 1285.506399][T20995] syzkaller0: entered promiscuous mode [ 1285.524848][T20995] syzkaller0: entered allmulticast mode [ 1286.716659][T10691] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 1286.738844][T10691] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input109 [ 1287.261325][T10691] usb 6-1: USB disconnect, device number 5 [ 1287.267267][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1288.078850][ T6891] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1288.274019][ T6891] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1288.288794][ T6891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.341827][ T6891] usb 4-1: Product: syz [ 1288.414352][ T6891] usb 4-1: Manufacturer: syz [ 1288.461814][ T6891] usb 4-1: SerialNumber: syz [ 1288.484067][ T6891] usb 4-1: config 0 descriptor?? [ 1288.509850][ T6891] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1289.139913][ T6891] gspca_stk1135: reg_w 0x2 err -110 [ 1289.148703][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.173625][ T6891] gspca_stk1135: Sensor write failed [ 1289.190242][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.204010][ T6891] gspca_stk1135: Sensor write failed [ 1289.214785][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.228996][ T6891] gspca_stk1135: Sensor read failed [ 1289.240632][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.258933][ T6891] gspca_stk1135: Sensor read failed [ 1289.273463][ T6891] gspca_stk1135: Detected sensor type unknown (0x0) [ 1289.296647][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.321423][ T6891] gspca_stk1135: Sensor read failed [ 1289.337814][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.353096][ T6891] gspca_stk1135: Sensor read failed [ 1289.366643][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.416030][T21036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.424646][ T6891] gspca_stk1135: Sensor write failed [ 1289.436265][ T6891] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.488579][ T6891] gspca_stk1135: Sensor write failed [ 1289.523553][ T6891] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 1289.540633][T21036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.389240][T21046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.446596][T21046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.791234][ T6891] usb 4-1: USB disconnect, device number 124 [ 1292.356374][T21070] syzkaller0: entered promiscuous mode [ 1292.369022][T21070] syzkaller0: entered allmulticast mode [ 1292.595264][T21075] binder: 21073:21075 ioctl c0306201 80000440 returned -14 [ 1293.063472][T15050] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1293.371322][T15050] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1293.382039][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1293.393254][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1293.448583][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1293.499294][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1293.537735][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1293.595745][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1293.630956][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1293.651404][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1293.702174][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1293.735561][T21097] syzkaller0: entered promiscuous mode [ 1293.895683][T21097] syzkaller0: entered allmulticast mode [ 1293.946792][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1293.959296][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1293.994091][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.010603][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1294.150729][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1294.165637][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.377210][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1294.394158][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1294.422907][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.497433][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1294.513282][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1294.579187][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.600654][T15050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1294.614716][T15050] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1294.654639][T15050] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.700331][T15050] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1294.724896][T15050] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1294.743734][T15050] usb 1-1: Product: syz [ 1294.760032][T15050] usb 1-1: Manufacturer: syz [ 1294.774302][T15050] usb 1-1: SerialNumber: syz [ 1294.808516][T15050] usb 1-1: config 0 descriptor?? [ 1294.831699][T15050] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1295.037718][ T30] audit: type=1326 audit(1769999683.728:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.5.4453" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc6539 code=0x0 [ 1295.144597][ T30] audit: type=1326 audit(1769999683.838:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21110 comm="syz.5.4453" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc6539 code=0x0 [ 1295.374747][T21116] syzkaller0: entered promiscuous mode [ 1295.394369][T21116] syzkaller0: entered allmulticast mode [ 1295.694382][T21115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.706298][T21115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.723999][T21115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.733603][T21115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.984004][ T6880] usb 1-1: USB disconnect, device number 14 [ 1296.699600][T21136] syzkaller0: entered promiscuous mode [ 1296.705829][T21136] syzkaller0: entered allmulticast mode [ 1296.979545][T21139] syzkaller0: entered promiscuous mode [ 1297.004935][T21139] syzkaller0: entered allmulticast mode [ 1297.231348][ T6880] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1297.517566][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1297.640697][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1297.654156][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1297.669508][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'. [ 1297.828958][ T6891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1297.978800][ T6891] usb 1-1: Using ep0 maxpacket: 16 [ 1298.065457][ T6891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.092602][ T6891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1298.671399][ T6891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1298.999515][ T6891] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1299.128398][ T6891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.153394][ T6891] usb 1-1: config 0 descriptor?? [ 1299.646337][ T6891] HID 045e:07da: Invalid code 65791 type 1 [ 1299.759074][ T6891] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0052/input/input110 [ 1299.823492][ T6891] microsoft 0003:045E:07DA.0052: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1299.939253][T21161] syzkaller1: entered promiscuous mode [ 1299.944813][T21161] syzkaller1: entered allmulticast mode [ 1300.635163][T21180] syzkaller0: entered promiscuous mode [ 1300.701057][T21180] syzkaller0: entered allmulticast mode [ 1300.851266][ T6880] usb 1-1: USB disconnect, device number 15 [ 1301.123216][T21190] tipc: Enabled bearer , priority 0 [ 1301.146170][T21190] syzkaller0: entered promiscuous mode [ 1301.155407][T21190] syzkaller0: entered allmulticast mode [ 1301.194539][T21190] tipc: Resetting bearer [ 1301.204905][T21189] tipc: Resetting bearer [ 1301.523007][T21189] tipc: Disabling bearer [ 1301.569867][T21193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1301.970827][T10691] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1302.151867][T10691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.158063][ T30] audit: type=1326 audit(1769999690.848:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21210 comm="syz.4.4484" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bd539 code=0x0 [ 1302.254307][T10691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.265972][T10691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1302.304768][T10691] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1302.325296][T10691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.364393][T10691] usb 2-1: config 0 descriptor?? [ 1302.825766][T10691] plantronics 0003:047F:FFFF.0053: reserved main item tag 0xd [ 1302.845428][T10691] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1304.469104][T10691] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 1304.868428][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1304.881277][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1304.893052][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1304.905293][T21241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1305.328949][T20532] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1305.405801][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.412295][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.489501][T20532] usb 6-1: Using ep0 maxpacket: 16 [ 1305.502825][T20532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.528968][T20532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.560568][T15050] usb 2-1: USB disconnect, device number 12 [ 1305.566053][T20532] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1305.654116][T20532] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1305.721352][T20532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.854764][T20532] usb 6-1: config 0 descriptor?? [ 1306.321354][T20532] HID 045e:07da: Invalid code 65791 type 1 [ 1306.356360][T20532] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0054/input/input112 [ 1306.464864][T20532] microsoft 0003:045E:07DA.0054: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1306.904020][T21274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.948633][T21274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.698881][T20532] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 1308.568897][T15050] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1308.728818][T15050] usb 2-1: Using ep0 maxpacket: 32 [ 1308.748166][T15050] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1308.764179][T15050] usb 2-1: config 0 has no interface number 0 [ 1308.780947][T15050] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1308.798962][T15050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.817331][T15050] usb 2-1: Product: syz [ 1308.825435][T15050] usb 2-1: Manufacturer: syz [ 1308.836709][T15050] usb 2-1: SerialNumber: syz [ 1308.863998][T15050] usb 2-1: config 0 descriptor?? [ 1308.898171][T15050] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1309.316786][T15050] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1309.338876][ T6891] usb 6-1: USB disconnect, device number 6 [ 1309.362262][T15050] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1310.043691][T21300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.110529][T21300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.520932][T21309] binder_alloc: 21308: pid 21308 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1310.575633][T21309] binder_alloc: 21308: pid 21308 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1310.940673][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1310.949050][T15050] usb 2-1: USB disconnect, device number 13 [ 1310.961086][T15050] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1310.982402][T15050] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1311.019700][T15050] quatech2 2-1:0.51: device disconnected [ 1311.118902][ T6891] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1311.280398][ T6891] usb 4-1: Using ep0 maxpacket: 8 [ 1311.294576][ T6891] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1311.323226][ T6891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.346325][ T6891] usb 4-1: Product: syz [ 1311.482892][ T6891] usb 4-1: Manufacturer: syz [ 1311.496890][ T6891] usb 4-1: SerialNumber: syz [ 1311.523118][ T6891] usb 4-1: config 0 descriptor?? [ 1311.538852][T20532] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1311.572354][ T6891] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1311.846581][T20532] usb 6-1: config 0 has no interfaces? [ 1311.865174][T20532] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1311.898057][T20532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.940550][T20532] usb 6-1: config 0 descriptor?? [ 1312.669502][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1312.710918][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1312.730049][T21332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1313.277393][T15050] usb 6-1: USB disconnect, device number 7 [ 1314.051771][ T6891] gspca_sonixj: reg_w1 err -71 [ 1314.095914][ T6891] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1314.140194][ T6891] usb 4-1: USB disconnect, device number 125 [ 1315.763834][T21365] syzkaller0: entered promiscuous mode [ 1315.773577][T21365] syzkaller0: entered allmulticast mode [ 1315.851720][T21365] tipc: Started in network mode [ 1315.859215][T21365] tipc: Node identity 0e2fde7bb59, cluster identity 4711 [ 1315.867807][T21365] tipc: Enabled bearer , priority 0 [ 1315.981562][T21364] tipc: Resetting bearer [ 1316.258575][T21364] tipc: Disabling bearer [ 1321.654198][T21409] bond_slave_0: entered promiscuous mode [ 1321.660261][T21409] bond_slave_1: entered promiscuous mode [ 1321.677858][T21409] vlan2: entered promiscuous mode [ 1321.683299][T21409] bond0: entered promiscuous mode [ 1322.313623][T21417] syzkaller0: entered promiscuous mode [ 1322.331208][T21417] syzkaller0: entered allmulticast mode [ 1327.645823][T21431] syzkaller0: entered promiscuous mode [ 1327.651592][T21431] syzkaller0: entered allmulticast mode [ 1327.659924][T21439] tipc: Started in network mode [ 1327.664937][T21439] tipc: Node identity b2334a3926c, cluster identity 4711 [ 1327.672616][T21439] tipc: Enabled bearer , priority 0 [ 1327.691478][T21447] tipc: Resetting bearer [ 1327.816239][T21475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1327.826282][T21475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1327.944099][T21470] syzkaller0: entered promiscuous mode [ 1327.950533][T21470] syzkaller0: entered allmulticast mode [ 1328.098822][ T6880] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1328.228586][T21487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1328.273853][ T6880] usb 2-1: Using ep0 maxpacket: 8 [ 1328.299170][ T6880] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1328.308526][ T6880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.338776][ T6880] usb 2-1: Product: syz [ 1328.343006][ T6880] usb 2-1: Manufacturer: syz [ 1328.357911][ T6880] usb 2-1: SerialNumber: syz [ 1328.401738][ T6880] usb 2-1: config 0 descriptor?? [ 1328.424063][ T6880] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1331.654411][ T6880] gspca_sonixj: reg_w1 err -71 [ 1331.707496][ T6880] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1331.747749][ T6880] usb 2-1: USB disconnect, device number 14 [ 1333.388284][T15050] tipc: Node number set to 2498972217 [ 1333.506907][T21522] syzkaller0: entered promiscuous mode [ 1333.515592][T21522] syzkaller0: entered allmulticast mode [ 1333.963405][T21554] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 1338.020219][T21588] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4587'. [ 1338.041241][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4586'. [ 1338.064140][T21588] netlink: 'syz.3.4587': attribute type 7 has an invalid length. [ 1338.104225][T21588] netlink: 'syz.3.4587': attribute type 8 has an invalid length. [ 1338.130943][T21588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4587'. [ 1338.141682][T21587] vlan3: entered promiscuous mode [ 1338.157126][T21587] dummy0: entered promiscuous mode [ 1338.351253][T21588] ip6gretap0: entered promiscuous mode [ 1338.385844][T21588] syz_tun: entered promiscuous mode [ 1338.393719][T21588] gretap0: entered promiscuous mode [ 1338.423624][T21588] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 1338.436744][T21597] loop6: detected capacity change from 0 to 3664 [ 1338.443296][T21588] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 1338.455222][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.464613][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.472818][T21588] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 1338.483423][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.493321][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.507574][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.531142][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.547270][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.555824][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.567211][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.575973][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.584494][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.592442][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.601099][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.609606][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.617472][T21597] ldm_validate_partition_table(): Disk read failed. [ 1338.626805][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.644733][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.659187][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.668813][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.676964][T21597] Buffer I/O error on dev loop6, logical block 0, async page read [ 1338.684969][T20530] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1338.694394][ T6880] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 1338.699198][T21597] Dev loop6: unable to read RDB block 0 [ 1338.726645][ T6880] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1338.740288][T21597] loop6: unable to read partition table [ 1338.766766][T21597] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1338.788847][T15050] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1338.828838][T20530] usb 2-1: Using ep0 maxpacket: 32 [ 1338.841232][T20530] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1338.854260][T21607] syzkaller0: entered promiscuous mode [ 1338.860243][T20530] usb 2-1: config 0 has no interface number 0 [ 1338.866881][T21607] syzkaller0: entered allmulticast mode [ 1338.883182][T20530] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1338.914075][T20530] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1338.921429][T21607] tipc: Enabled bearer , priority 0 [ 1338.933808][T20530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.945479][T20530] usb 2-1: Product: syz [ 1338.945878][T21606] tipc: Resetting bearer [ 1338.957862][T20530] usb 2-1: Manufacturer: syz [ 1338.965152][T20530] usb 2-1: SerialNumber: syz [ 1338.979238][T20530] usb 2-1: config 0 descriptor?? [ 1338.997008][T15050] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.016840][T21606] tipc: Disabling bearer [ 1339.024111][T15050] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1339.044551][T15050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.094447][T15050] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1340.134926][T15050] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 1340.155107][T15050] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 1340.169591][T15050] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 1340.383826][T20532] usb 6-1: USB disconnect, device number 8 [ 1340.729147][T21635] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1340.750765][ T3535] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.092039][ T3535] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.118455][ T3535] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.137706][ T3535] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1341.437479][T21637] syzkaller0: entered promiscuous mode [ 1341.460073][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1341.473266][T21637] syzkaller0: entered allmulticast mode [ 1341.490924][T21642] netlink: 'syz.5.4605': attribute type 7 has an invalid length. [ 1341.559412][T21642] netlink: 'syz.5.4605': attribute type 8 has an invalid length. [ 1341.579953][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1341.618098][T21642] ip6gretap0: entered promiscuous mode [ 1341.626006][T21642] syz_tun: entered promiscuous mode [ 1341.632653][T21642] gretap0: entered promiscuous mode [ 1341.640743][T15050] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1341.642169][T21642] debugfs: 'hsr1' already exists in 'hsr' [ 1341.654590][T21642] Cannot create hsr debugfs directory [ 1341.774668][T21646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4607'. [ 1341.798841][T15050] usb 1-1: Using ep0 maxpacket: 32 [ 1341.806766][T15050] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1341.816254][T15050] usb 1-1: config 0 has no interface number 0 [ 1341.828556][T15050] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1341.835658][ T30] audit: type=1804 audit(1769999730.518:3824): pid=21644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4606" name="/newroot/1028/file1" dev="fuse" ino=1 res=1 errno=0 [ 1341.842189][T15050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.870942][T15050] usb 1-1: Product: syz [ 1341.875172][T15050] usb 1-1: Manufacturer: syz [ 1341.881217][T15050] usb 1-1: SerialNumber: syz [ 1341.892355][T15050] usb 1-1: config 0 descriptor?? [ 1341.905806][T15050] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1342.096988][T20530] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1342.107300][T20530] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1342.132600][T20530] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1342.144441][T21657] binder: BINDER_SET_CONTEXT_MGR already set [ 1342.151119][T21657] binder: 21654:21657 ioctl 4018620d 80004a80 returned -16 [ 1342.163712][T20530] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1342.174086][T15050] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1342.183452][T20532] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1342.239431][T20530] usb 2-1: USB disconnect, device number 15 [ 1342.303540][T15050] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1342.339072][T20532] usb 6-1: Using ep0 maxpacket: 16 [ 1342.347246][T20532] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1342.367145][T20532] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 1342.392750][T20532] usb 6-1: config 13 has no interface number 0 [ 1342.410115][T20532] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1342.438214][T20532] usb 6-1: config 13 interface 50 has no altsetting 0 [ 1342.468181][T20532] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1342.489127][T20532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.505133][T20532] usb 6-1: Product: syz [ 1342.512156][T20532] usb 6-1: Manufacturer: syz [ 1342.517054][T20532] usb 6-1: SerialNumber: syz [ 1342.563140][T21650] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1342.897020][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4608'. [ 1342.973907][T20532] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1342.987004][T20532] usb 6-1: MIDIStreaming interface descriptor not found [ 1343.126438][T20532] usb 6-1: USB disconnect, device number 9 [ 1343.154670][T21668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.213042][T21668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.340904][T21576] udevd[21576]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1343.885104][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1343.918531][T15050] usb 1-1: USB disconnect, device number 16 [ 1343.960089][T15050] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1344.005142][T21680] syzkaller0: entered promiscuous mode [ 1344.031031][T15050] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1344.064566][T15050] quatech2 1-1:0.51: device disconnected [ 1344.078949][T21680] syzkaller0: entered allmulticast mode [ 1344.189274][T20532] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1344.477935][T20532] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1344.516047][T20532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.545942][T20532] usb 2-1: Product: syz [ 1344.556102][T20532] usb 2-1: Manufacturer: syz [ 1344.637445][T20532] usb 2-1: SerialNumber: syz [ 1344.749875][T20532] usb 2-1: config 0 descriptor?? [ 1344.995347][T20532] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1346.608826][T15050] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1346.812185][ T6880] usb 2-1: USB disconnect, device number 16 [ 1346.850144][T15050] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.891333][T15050] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1346.953281][T15050] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1346.995762][T15050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1347.037773][T15050] usb 4-1: SerialNumber: syz [ 1347.198155][T21710] netlink: 'syz.0.4621': attribute type 1 has an invalid length. [ 1347.421570][T21710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1347.524749][T21712] vlan2: entered allmulticast mode [ 1347.560155][T21712] veth0_to_bond: entered allmulticast mode [ 1347.590579][T21712] bond3: (slave vlan2): Opening slave failed [ 1347.952212][T21726] tipc: Enabled bearer , priority 0 [ 1348.056302][T21726] tipc: Resetting bearer [ 1349.075840][T21733] tipc: Enabling of bearer rejected, already enabled [ 1349.345141][T15050] usb 4-1: 0:2 : does not exist [ 1349.502144][T15050] usb 4-1: USB disconnect, device number 126 [ 1349.665962][T21744] tipc: Enabling of bearer rejected, already enabled [ 1349.821628][T21573] udevd[21573]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.919188][T20532] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1350.091269][T21748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4632'. [ 1350.121954][T20532] usb 6-1: Using ep0 maxpacket: 16 [ 1350.139549][T20532] usb 6-1: config 0 has no interfaces? [ 1350.150551][T20532] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1350.161062][T20532] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1350.233544][T20532] usb 6-1: Manufacturer: syz [ 1350.303853][T20532] usb 6-1: config 0 descriptor?? [ 1350.758839][T21754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.826144][T21754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.711289][T21773] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4638'. [ 1351.889178][T21777] syzkaller0: entered promiscuous mode [ 1351.897177][T21777] syzkaller0: entered allmulticast mode [ 1352.072026][T21779] binder: 21778:21779 ioctl c0306201 0 returned -14 [ 1352.163871][T21781] syzkaller0: entered promiscuous mode [ 1352.177335][T21781] syzkaller0: entered allmulticast mode [ 1352.374051][T21784] tipc: Enabling of bearer rejected, already enabled [ 1352.646274][ T6880] usb 6-1: USB disconnect, device number 10 [ 1353.189494][T21795] syzkaller0: entered promiscuous mode [ 1353.196759][T21795] syzkaller0: entered allmulticast mode [ 1356.938229][T21831] netlink: 'syz.4.4658': attribute type 1 has an invalid length. [ 1356.977149][T21831] bond5: entered promiscuous mode [ 1356.983060][T21831] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1357.152830][T21831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1357.162060][T21831] bond5: entered allmulticast mode [ 1357.229654][T21831] bond5: (slave bridge3): making interface the new active one [ 1357.237382][T21831] bridge3: entered promiscuous mode [ 1357.246612][T21831] bridge3: entered allmulticast mode [ 1357.253921][T21831] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1357.351674][T21840] syzkaller0: entered promiscuous mode [ 1357.357247][T21840] syzkaller0: entered allmulticast mode [ 1361.457493][T21881] netlink: 'syz.1.4672': attribute type 1 has an invalid length. [ 1362.778859][ T6880] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1363.080546][ T6880] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1363.097645][ T6880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.118112][T21907] netlink: 'syz.1.4679': attribute type 13 has an invalid length. [ 1363.142754][ T6880] usb 4-1: Product: syz [ 1363.159232][ T6880] usb 4-1: Manufacturer: syz [ 1363.183346][ T6880] usb 4-1: SerialNumber: syz [ 1363.713693][ T6880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1363.819159][ T6880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1363.860311][T10178] Bluetooth: hci4: command 0x0406 tx timeout [ 1366.229152][T21947] tipc: Enabling of bearer rejected, already enabled [ 1366.734800][ T6880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 1366.747347][ T6880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1366.860734][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.866167][ T6880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1366.868209][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.883540][ T6880] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1367.430825][ T6880] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1367.466188][ T6880] usb 4-1: USB disconnect, device number 127 [ 1368.289742][T21965] geneve2: entered promiscuous mode [ 1368.300182][ T3556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.309514][ T3556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.318257][ T3556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.428921][ T3556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1368.931359][T21974] netlink: 'syz.3.4700': attribute type 10 has an invalid length. [ 1368.990031][T21974] team0: Failed to send options change via netlink (err -105) [ 1368.997575][T21974] team0: Port device dummy0 added [ 1369.078195][T21974] netlink: 'syz.3.4700': attribute type 10 has an invalid length. [ 1369.152641][T21977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.174297][T21974] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1369.192639][T21977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.207138][T21976] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1369.224359][ T30] audit: type=1326 audit(1769999757.908:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.250324][T21974] team0: Failed to send options change via netlink (err -105) [ 1369.259751][T21974] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1369.269260][ T30] audit: type=1326 audit(1769999757.908:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.292768][T21974] team0: Port device dummy0 removed [ 1369.301479][T21974] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1369.316081][ T30] audit: type=1326 audit(1769999757.908:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.349983][ T30] audit: type=1326 audit(1769999757.908:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.569176][ T30] audit: type=1326 audit(1769999757.908:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.643048][T21986] syzkaller0: entered promiscuous mode [ 1369.679124][T21986] syzkaller0: entered allmulticast mode [ 1369.701233][ T30] audit: type=1326 audit(1769999757.908:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.732716][ T30] audit: type=1326 audit(1769999757.988:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.770776][ T30] audit: type=1326 audit(1769999757.988:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1369.854531][T21994] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1369.977723][ T30] audit: type=1326 audit(1769999757.998:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1370.033908][ T30] audit: type=1326 audit(1769999757.998:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21972 comm="syz.3.4700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 1370.258818][ T6880] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1370.431711][ T6880] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1370.440586][ T6880] usb 6-1: not running at top speed; connect to a high speed hub [ 1370.456785][ T6880] usb 6-1: config 185 has an invalid interface number: 51 but max is 0 [ 1370.469408][ T6880] usb 6-1: config 185 has no interface number 0 [ 1370.488970][ T6880] usb 6-1: config 185 interface 51 has no altsetting 0 [ 1370.670953][ T6880] usb 6-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e7.0d [ 1370.768906][ T6880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.797479][ T6880] usb 6-1: Product: syz [ 1370.806114][ T6880] usb 6-1: Manufacturer: syz [ 1370.814262][ T6880] usb 6-1: SerialNumber: syz [ 1371.967845][T22008] tipc: Enabling of bearer rejected, already enabled [ 1372.014478][ T6880] as10x_usb: device has been detected [ 1372.031422][ T6880] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1372.116886][ T6880] usb 6-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 1372.149853][ T6880] as10x_usb: error during firmware upload part1 [ 1372.163050][ T6880] Registered device PCTV Systems picoStick (74e) [ 1372.167248][ T6880] usb 6-1: USB disconnect, device number 11 [ 1372.248337][ T6880] Unregistered device PCTV Systems picoStick (74e) [ 1372.249669][ T6880] as10x_usb: device has been disconnected [ 1373.927979][ T6880] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1374.114690][T22037] tipc: Started in network mode [ 1374.119955][T22037] tipc: Node identity b2bedf7a30ff, cluster identity 4711 [ 1374.127337][T22037] tipc: Enabled bearer , priority 0 [ 1374.136500][T22037] syzkaller0: entered promiscuous mode [ 1374.148848][T22037] syzkaller0: entered allmulticast mode [ 1374.186537][T22037] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1374.198801][ T6880] usb 4-1: Using ep0 maxpacket: 16 [ 1374.214773][T22037] tipc: Resetting bearer [ 1374.227240][T22036] tipc: Resetting bearer [ 1374.287584][ T6880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.317451][T22036] tipc: Disabling bearer [ 1374.324548][ T6880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.367836][ T6880] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1374.388170][ T6880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.403604][ T6880] usb 4-1: config 0 descriptor?? [ 1374.844729][T22032] xt_TCPMSS: Only works on TCP SYN packets [ 1374.882812][T22032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.943263][T22032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.025502][ T6880] hid_parser_main: 73 callbacks suppressed [ 1375.025527][ T6880] zydacron 0003:13EC:0006.0056: unknown main item tag 0x7 [ 1375.087160][T22047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.138199][T22047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.139382][ T6880] zydacron 0003:13EC:0006.0056: unknown main item tag 0x0 [ 1375.180771][ T6880] zydacron 0003:13EC:0006.0056: item fetching failed at offset 4/5 [ 1375.203546][ T6880] zydacron 0003:13EC:0006.0056: parse failed [ 1375.220985][ T6880] zydacron 0003:13EC:0006.0056: probe with driver zydacron failed with error -22 [ 1375.252426][ T6880] usb 4-1: USB disconnect, device number 2 [ 1375.595167][T22047] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1375.695727][T22047] bond6 (unregistering): Released all slaves [ 1375.954741][T22044] Set syz0 is full, maxelem 0 reached [ 1376.736541][T22065] syzkaller0: entered promiscuous mode [ 1377.184463][T22065] syzkaller0: entered allmulticast mode [ 1377.275420][T22065] tipc: Enabled bearer , priority 0 [ 1377.438557][T22071] tipc: Enabled bearer , priority 0 [ 1377.447118][T22071] syzkaller0: entered promiscuous mode [ 1377.576024][T22071] syzkaller0: entered allmulticast mode [ 1377.818387][T22065] tipc: Resetting bearer [ 1377.959533][T22064] tipc: Resetting bearer [ 1378.010026][T22064] tipc: Disabling bearer [ 1378.034376][T22071] tipc: Resetting bearer [ 1378.043597][T22070] tipc: Resetting bearer [ 1378.350251][T22070] tipc: Disabling bearer [ 1378.454660][T22082] netlink: 'syz.0.4728': attribute type 1 has an invalid length. [ 1380.138832][T15050] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1380.458763][T15050] usb 1-1: Using ep0 maxpacket: 16 [ 1380.556525][T15050] usb 1-1: config 0 has no interfaces? [ 1380.571649][T15050] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1380.608499][T15050] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1380.642573][T15050] usb 1-1: Manufacturer: syz [ 1380.659693][T15050] usb 1-1: config 0 descriptor?? [ 1381.409066][T22108] tipc: Enabled bearer , priority 0 [ 1381.471638][T22108] syzkaller0: entered promiscuous mode [ 1381.480551][T22108] syzkaller0: entered allmulticast mode [ 1381.544902][T22108] tipc: Resetting bearer [ 1381.561209][T22107] tipc: Resetting bearer [ 1381.600020][T22107] tipc: Disabling bearer [ 1381.628292][T22112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.647272][T22112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.188400][T22119] syzkaller0: entered promiscuous mode [ 1382.194186][T22119] syzkaller0: entered allmulticast mode [ 1383.275819][T20532] usb 1-1: USB disconnect, device number 17 [ 1384.110048][T22139] netlink: 'syz.4.4740': attribute type 1 has an invalid length. [ 1384.172370][T22140] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4742'. [ 1384.255737][T22128] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4750'. [ 1385.446933][ T6891] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1385.650702][ T6891] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.664186][ T6891] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1385.704018][ T6891] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1385.729694][ T6891] usb 6-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 1385.766863][ T6891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.796921][ T6891] usb 6-1: config 0 descriptor?? [ 1385.844054][ T6891] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input113 [ 1385.939160][T15050] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1386.125118][T15050] usb 2-1: Using ep0 maxpacket: 8 [ 1386.137680][T15050] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1386.180528][T15050] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1386.213337][T15050] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1386.258966][T15050] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.318646][T15050] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1386.344209][T15050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.616973][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4758'. [ 1386.629209][T22164] program syz.1.4758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1386.639120][T22164] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1386.654436][T15050] usb 2-1: GET_CAPABILITIES returned 0 [ 1386.664809][T15050] usbtmc 2-1:16.0: can't read capabilities [ 1386.941350][T15050] usb 2-1: USB disconnect, device number 17 [ 1387.653439][ T5182] bcm5974 6-1:0.0: could not read from device [ 1387.752998][ T5182] bcm5974 6-1:0.0: could not read from device [ 1387.765577][ T6891] usb 6-1: USB disconnect, device number 12 [ 1387.781254][ T5182] bcm5974 6-1:0.0: could not read from device [ 1387.814538][ T5182] bcm5974 6-1:0.0: could not read from device [ 1388.134456][ T5840] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1388.707231][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1388.707253][ T30] audit: type=1326 audit(1769999777.368:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1388.812027][ T30] audit: type=1326 audit(1769999777.368:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1388.874624][ T30] audit: type=1326 audit(1769999777.368:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1388.978981][T22191] nvme_fabrics: missing parameter 'transport=%s' [ 1388.991339][T22191] nvme_fabrics: missing parameter 'nqn=%s' [ 1389.058244][ T30] audit: type=1326 audit(1769999777.368:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1389.168868][T10691] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1389.253129][ T30] audit: type=1326 audit(1769999777.368:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1389.594690][ T30] audit: type=1326 audit(1769999777.368:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1389.624665][T22201] syzkaller0: entered promiscuous mode [ 1389.638909][T10691] usb 4-1: Using ep0 maxpacket: 16 [ 1389.644755][ T30] audit: type=1326 audit(1769999777.368:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1389.644844][T22201] syzkaller0: entered allmulticast mode [ 1389.675593][T10691] usb 4-1: config 0 has no interfaces? [ 1389.691773][T10691] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1389.720018][T10691] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1389.758626][T10691] usb 4-1: Manufacturer: syz [ 1389.777337][T22203] netlink: 'syz.5.4757': attribute type 13 has an invalid length. [ 1389.792098][T22201] TC_ACT_REPEAT abuse ? [ 1389.805166][T10691] usb 4-1: config 0 descriptor?? [ 1389.818883][ T30] audit: type=1326 audit(1769999777.368:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1389.885841][ T30] audit: type=1326 audit(1769999777.368:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1389.939137][ T30] audit: type=1326 audit(1769999777.368:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22189 comm="syz.4.4755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 1390.662823][T22215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1390.761597][T22206] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1390.769790][T22206] syzkaller0: entered promiscuous mode [ 1390.787495][T22206] syzkaller0: entered allmulticast mode [ 1390.945702][T22211] tipc: Enabled bearer , priority 0 [ 1391.015613][T22202] tipc: Resetting bearer [ 1391.566026][T10125] usb 4-1: USB disconnect, device number 3 [ 1391.643376][T22202] tipc: Disabling bearer [ 1392.208065][T22226] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1392.856512][T15050] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1393.811985][T15050] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.899152][T15050] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1393.911891][T15050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.937315][T15050] usb 1-1: config 0 descriptor?? [ 1394.144805][T15050] pwc: Askey VC010 type 2 USB webcam detected. [ 1394.376393][T15050] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1394.391980][T15050] pwc: recv_control_msg error -32 req 02 val 2700 [ 1394.400727][T15050] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1394.408462][T15050] pwc: recv_control_msg error -32 req 04 val 1000 [ 1394.444556][T15050] pwc: recv_control_msg error -32 req 04 val 1300 [ 1394.460923][T15050] pwc: recv_control_msg error -32 req 04 val 1400 [ 1394.484005][T15050] pwc: recv_control_msg error -32 req 02 val 2000 [ 1394.494378][T15050] pwc: recv_control_msg error -32 req 02 val 2100 [ 1394.510745][T15050] pwc: recv_control_msg error -32 req 04 val 1500 [ 1394.528055][T15050] pwc: recv_control_msg error -32 req 02 val 2500 [ 1394.536191][T15050] pwc: recv_control_msg error -32 req 02 val 2400 [ 1394.544641][T15050] pwc: recv_control_msg error -32 req 02 val 2600 [ 1394.552783][T15050] pwc: recv_control_msg error -32 req 02 val 2900 [ 1394.560109][T15050] pwc: recv_control_msg error -32 req 02 val 2800 [ 1394.569579][T15050] pwc: recv_control_msg error -32 req 04 val 1100 [ 1394.580892][T15050] pwc: Registered as video103. [ 1394.587299][T15050] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input114 [ 1394.860287][T15050] usb 1-1: USB disconnect, device number 18 [ 1395.488880][ T6891] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1395.645108][ T6891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.659262][T15050] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1395.665906][ T6891] usb 6-1: config 0 has no interfaces? [ 1395.679092][ T6891] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1395.688408][ T6891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.714355][ T6891] usb 6-1: config 0 descriptor?? [ 1395.831053][T15050] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1395.841270][T15050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.862859][T22263] syzkaller0: entered promiscuous mode [ 1395.866366][T15050] usb 1-1: config 0 descriptor?? [ 1395.868925][T22263] syzkaller0: entered allmulticast mode [ 1396.447117][T22276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.456457][T22276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.672379][ T6891] usb 6-1: USB disconnect, device number 13 [ 1398.386176][T15050] pegasus 1-1:0.0: setup Pegasus II specific registers [ 1399.492361][T15050] pegasus 1-1:0.0: can't locate MII phy, using default [ 1399.537643][T15050] pegasus 1-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, 2e:9e:ef:52:f2:4c [ 1399.563635][T15050] usb 1-1: USB disconnect, device number 19 [ 1400.080544][T22297] nvme_fabrics: missing parameter 'transport=%s' [ 1400.097674][T22297] nvme_fabrics: missing parameter 'nqn=%s' [ 1400.481483][T22311] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1400.969529][T22319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.979040][T22319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.260908][T22343] syzkaller0: entered promiscuous mode [ 1404.260934][T22343] syzkaller0: entered allmulticast mode [ 1404.494255][T22340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.525764][T22340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.668846][T20530] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1404.935990][T20530] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1405.084240][T20530] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1405.094322][T20530] usb 4-1: config 1 has no interface number 1 [ 1405.100820][T20530] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1405.121091][T20530] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1405.171326][T20530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.188893][T20530] usb 4-1: Product: syz [ 1405.423873][T20530] usb 4-1: Manufacturer: syz [ 1405.485769][T20530] usb 4-1: SerialNumber: syz [ 1405.834557][T22351] vlan0: entered promiscuous mode [ 1405.842060][T22351] team0: entered promiscuous mode [ 1405.847487][T22351] team_slave_0: entered promiscuous mode [ 1405.854871][T22351] team_slave_1: entered promiscuous mode [ 1406.001741][T20530] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 1406.028458][T20530] usb 4-1: found format II with max.bitrate = 26774, frame size=2 [ 1406.047953][T20530] usb 4-1: failed to enable PITCH for EP 0x82 [ 1406.171411][T22371] tipc: Enabling of bearer rejected, already enabled [ 1406.340409][T20530] usb 4-1: USB disconnect, device number 4 [ 1408.839849][T22400] fuse: Bad value for 'user_id' [ 1408.844851][T22400] fuse: Bad value for 'user_id' [ 1409.328883][T20530] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1410.033664][T20530] usb 2-1: Using ep0 maxpacket: 16 [ 1410.104308][T20530] usb 2-1: config 0 has no interfaces? [ 1410.114075][T20530] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1410.131244][T20530] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1410.192975][T20530] usb 2-1: Manufacturer: syz [ 1410.225957][T20530] usb 2-1: config 0 descriptor?? [ 1410.655018][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4809'. [ 1410.771175][T22418] bond1: entered allmulticast mode [ 1410.847566][T22418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1411.237573][T22428] netlink: 'syz.3.4811': attribute type 2 has an invalid length. [ 1411.296039][T22428] #{6c: entered promiscuous mode [ 1411.417523][T22428] netlink: 'syz.3.4811': attribute type 2 has an invalid length. [ 1411.426701][T22428] #{6c: left promiscuous mode [ 1412.547736][T22446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.653661][T10125] usb 2-1: USB disconnect, device number 18 [ 1412.685931][T22446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.207785][T22450] futex_wake_op: syz.1.4817 tries to shift op by -1; fix this program [ 1414.014273][T22461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.023397][T22461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.778273][T22471] tipc: Enabling of bearer rejected, already enabled [ 1415.933940][T22471] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1416.748009][T22489] syzkaller0: entered promiscuous mode [ 1416.753785][T22489] syzkaller0: entered allmulticast mode [ 1416.763358][T22489] netlink: 'syz.5.4826': attribute type 30 has an invalid length. [ 1418.280228][ T6891] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1418.479353][ T6891] usb 1-1: Using ep0 maxpacket: 8 [ 1418.494610][ T6891] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1418.505973][ T6891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1418.547356][ T6891] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1418.578054][ T6891] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1418.598293][ T6891] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1418.615491][ T6891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.856418][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'. [ 1418.930050][T22502] program syz.0.4831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1418.958598][T22502] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1418.987791][ T6891] usb 1-1: GET_CAPABILITIES returned 0 [ 1419.038832][ T6891] usbtmc 1-1:16.0: can't read capabilities [ 1419.238019][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.247389][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.256488][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.265554][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.274622][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.301329][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.310693][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.319856][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.377858][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.386993][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.396182][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.553204][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1419.553225][ T30] audit: type=1326 audit(1769999808.248:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1419.583691][ T30] audit: type=1326 audit(1769999808.248:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1419.832786][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.841935][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.851010][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.860113][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.869266][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1419.909587][ T30] audit: type=1326 audit(1769999808.578:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1419.916120][ T6891] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1419.934691][ T30] audit: type=1326 audit(1769999808.578:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1419.969713][T10125] usb 1-1: USB disconnect, device number 20 [ 1420.002122][ T30] audit: type=1326 audit(1769999808.578:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1420.349138][ T30] audit: type=1326 audit(1769999808.578:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1420.417671][ T6891] usb 6-1: Using ep0 maxpacket: 8 [ 1420.417830][ T30] audit: type=1326 audit(1769999808.578:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1420.446060][ T30] audit: type=1326 audit(1769999808.578:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1420.476915][ T6891] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1420.538921][ T6891] usb 6-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 1420.548071][ T6891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.556479][ T6891] usb 6-1: Product: syz [ 1420.560925][ T6891] usb 6-1: SerialNumber: syz [ 1420.711352][ T30] audit: type=1326 audit(1769999808.578:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1420.762480][ T30] audit: type=1326 audit(1769999808.578:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.1.4834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1420.874123][ T6891] usb 6-1: USB disconnect, device number 14 [ 1421.908215][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4840'. [ 1421.927789][T22542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1422.596929][T22542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1422.739036][ T6891] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1423.157831][ T6891] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 1423.172042][ T6891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.192499][ T6891] usb 1-1: config 0 has no interfaces? [ 1423.243801][ T6891] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1423.273177][ T6891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.320869][ T6891] usb 1-1: config 0 descriptor?? [ 1423.986739][ T6891] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1424.607350][ T6891] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 552, setting to 64 [ 1424.646866][ T6891] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1424.696485][ T6891] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.40 [ 1424.728059][ T6891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.747995][ T6891] usb 4-1: Product: 땮⺦冯憻邱麦敃렩鋷䃇ࠤ꺫虪⯭沣࿑糤̄蚇߲ꋿ맕ấý풟Ѐ♾镓⣙徃쯟뢄귗캽Ԑꊉꨍイ䱊좟ܱ⁆儠济赬疪徉꼉쏉⡢զ拤ᤴ젮綒᠓㕛ၩЦ韡ﲪ蓠繒軱걦␊鴭嫗蚚绠⑥⧽㝱裡෯뷪᝘뿑佰䷱ꞛꝽ嶃 [ 1424.827913][ T6891] usb 4-1: Manufacturer: О [ 1424.945770][ T6891] usb 4-1: SerialNumber: 釸橘₱竺ꥋ芗ঁ䷞辳餹䏷⃶േ㭅焹킼庢퀊⾆鎼ꦮヷ쉗㭃갼骠擊௿疲䟱⎱㺔變雔窃蒶ᾱ䴐穢ꀉ셽쪃頰湜妶㞷섐楫዁慡ꙅ玲脮蜂➘握ᕋ㔦굶 [ 1425.177827][T22557] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1425.379131][T22561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.399593][T22561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.702794][T10125] usb 1-1: USB disconnect, device number 21 [ 1426.626129][ T6891] usbhid 4-1:1.0: can't add hid device: -71 [ 1426.679182][ T6891] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1426.938455][ T6891] usb 4-1: USB disconnect, device number 5 [ 1428.292215][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.300316][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.089235][ T6891] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1429.248876][ T6891] usb 4-1: Using ep0 maxpacket: 32 [ 1429.263559][ T6891] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1429.291915][ T6891] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1429.305226][ T6891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.324917][ T6891] usb 4-1: Product: syz [ 1429.335577][ T6891] usb 4-1: Manufacturer: syz [ 1429.348919][ T6891] usb 4-1: SerialNumber: syz [ 1429.360201][ T6891] usb 4-1: config 0 descriptor?? [ 1429.377957][ T6891] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1429.428368][ T6891] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1429.476501][T21573] udevd[21573]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.590467][ T6891] usb 4-1: USB disconnect, device number 6 [ 1430.559216][T22612] netlink: 'syz.4.4857': attribute type 2 has an invalid length. [ 1430.574471][T22612] #{6c: entered promiscuous mode [ 1430.647230][T22614] fuse: Bad value for 'fd' [ 1430.674865][T22612] netlink: 'syz.4.4857': attribute type 2 has an invalid length. [ 1430.682938][T22612] #{6c: left promiscuous mode [ 1431.258801][T10125] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1431.354791][T22619] syzkaller0: entered promiscuous mode [ 1431.421724][T22619] syzkaller0: entered allmulticast mode [ 1431.489009][T10125] usb 4-1: Using ep0 maxpacket: 16 [ 1431.497433][T10125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1431.508774][T10125] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1431.554223][T10125] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1431.564991][T10125] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1431.576747][T10125] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1431.589477][T10125] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1431.686420][T10125] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1431.697356][T10125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.733029][T22624] syzkaller0: entered promiscuous mode [ 1431.738632][T22624] syzkaller0: entered allmulticast mode [ 1431.774537][T10125] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1431.979749][T10125] scsi host1: usb-storage 4-1:1.0 [ 1432.374316][T20530] usb 4-1: USB disconnect, device number 7 [ 1432.662644][T10125] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1432.921048][T10125] usb 2-1: Using ep0 maxpacket: 32 [ 1432.999068][T10125] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 1433.008756][T10125] usb 2-1: config 0 has no interface number 0 [ 1433.025633][T10125] usb 2-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 1433.048853][T10125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.068070][T10125] usb 2-1: Product: syz [ 1433.075871][T10125] usb 2-1: Manufacturer: syz [ 1433.083555][T10125] usb 2-1: SerialNumber: syz [ 1433.095854][T10125] usb 2-1: config 0 descriptor?? [ 1433.521223][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1433.521245][ T30] audit: type=1804 audit(1769999822.068:3886): pid=22651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4867" name="/newroot/953/bus" dev="tmpfs" ino=4874 res=1 errno=0 [ 1435.124624][T22657] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004 [ 1435.534404][T10125] cp210x 2-1:0.79: cp210x converter detected [ 1435.790705][T10125] cp210x 2-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 1435.808762][T10125] cp210x 2-1:0.79: querying part number failed [ 1435.838245][T10125] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1435.864964][T10125] usb 2-1: USB disconnect, device number 19 [ 1435.910606][T10125] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1435.971377][T10125] cp210x 2-1:0.79: device disconnected [ 1436.558794][ T6891] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1436.648823][T10125] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1437.386462][ T6891] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1437.458743][ T6891] usb 2-1: config 0 has no interface number 0 [ 1437.478857][ T6891] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.550808][T10125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1437.561922][ T6891] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.604577][ T6891] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1437.709656][ T6891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.718914][T10125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.789418][T10125] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1437.801443][T10125] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1437.828459][T10125] usb 6-1: Manufacturer: syz [ 1437.844324][T10125] usb 6-1: config 0 descriptor?? [ 1437.890443][ T6891] usb 2-1: config 0 descriptor?? [ 1438.277849][T10125] cougar 0003:060B:700A.0057: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1438.380677][ T6891] uclogic 0003:28BD:0905.0058: Interface probing failed: -22 [ 1438.417130][ T6891] uclogic 0003:28BD:0905.0058: interface is invalid, ignoring [ 1438.595656][T22683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.617043][ T6891] usb 2-1: USB disconnect, device number 20 [ 1438.759503][T22683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.767466][T22685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.789508][T22685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.928034][T20532] usb 6-1: USB disconnect, device number 15 [ 1443.260109][T22708] syzkaller0: entered promiscuous mode [ 1443.272802][T22712] futex_wake_op: syz.5.4878 tries to shift op by -1; fix this program [ 1443.601602][T22708] syzkaller0: entered allmulticast mode [ 1444.516132][T22735] netdevsim netdevsim0: Direct firmware load for . [ 1444.516132][T22735] failed with error -2 [ 1444.527206][T22735] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1444.527206][T22735] [ 1444.675414][T10125] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1444.863794][T10125] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.892727][T10125] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1444.952573][T10125] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1444.980923][T10125] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1444.991013][T10125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.002066][T10125] usb 4-1: Product: syz [ 1445.006327][T10125] usb 4-1: Manufacturer: syz [ 1445.011584][T10125] usb 4-1: SerialNumber: syz [ 1445.046285][T10125] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing [ 1445.054318][T10125] cdc_ncm 4-1:1.0: bind() failure [ 1447.900304][T22761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.909261][T22761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1448.008835][T20532] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1448.181345][T20532] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1448.600069][T20532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.799266][T10125] usb 4-1: USB disconnect, device number 8 [ 1448.807854][T20532] usb 2-1: config 0 descriptor?? [ 1448.847664][T22769] futex_wake_op: syz.5.4892 tries to shift op by -1; fix this program [ 1449.468870][ T6891] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1449.710286][ T6891] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1449.718508][ T6891] usb 4-1: config 0 has no interface number 0 [ 1449.729246][ T6891] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1449.748919][ T6891] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1449.785212][ T6891] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1449.794597][ T6891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.802943][ T6891] usb 4-1: Product: syz [ 1449.815371][ T6891] usb 4-1: Manufacturer: syz [ 1449.822024][ T6891] usb 4-1: SerialNumber: syz [ 1450.200968][ T6891] usb 4-1: config 0 descriptor?? [ 1450.229120][T22775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1450.276447][ T6891] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1450.358107][ T6891] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1450.592389][T22786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.699445][T22786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1450.767934][T10125] usb 4-1: USB disconnect, device number 9 [ 1450.820654][T10125] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1450.877047][T10125] cyberjack 4-1:0.69: device disconnected [ 1451.394128][T20532] pegasus 2-1:0.0: setup Pegasus II specific registers [ 1451.557821][T22793] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4898'. [ 1452.478262][T20532] pegasus 2-1:0.0: can't locate MII phy, using default [ 1452.534965][T20532] pegasus 2-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, d2:7c:a8:ef:49:46 [ 1452.610914][T20532] usb 2-1: USB disconnect, device number 21 [ 1455.131953][T22842] netlink: 'syz.4.4904': attribute type 10 has an invalid length. [ 1455.143854][T22842] : left promiscuous mode [ 1455.184584][T22842] : entered promiscuous mode [ 1455.289833][T22842] team0: Device failed to register rx_handler [ 1455.848822][T20532] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1456.148805][T20532] usb 1-1: Using ep0 maxpacket: 16 [ 1456.187697][T20532] usb 1-1: config 0 has no interfaces? [ 1456.224037][T20532] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1456.233362][T20532] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1456.241666][T20532] usb 1-1: Manufacturer: syz [ 1456.251166][T20532] usb 1-1: config 0 descriptor?? [ 1457.050934][T22857] x_tables: duplicate underflow at hook 1 [ 1459.937698][ T6891] usb 1-1: USB disconnect, device number 22 [ 1460.237892][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 1460.271926][T22883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4912'. [ 1460.937221][ T30] audit: type=1326 audit(1769999849.628:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22895 comm="syz.3.4915" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x0 [ 1461.189095][T22902] syzkaller0: entered promiscuous mode [ 1461.194602][T22902] syzkaller0: entered allmulticast mode [ 1461.218104][T22902] openvswitch: netlink: Flow key attribute not present in set flow. [ 1463.523086][T22922] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2551973520/2551973522 [ 1463.569196][T22922] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2551973520/2551973522 [ 1463.679698][T22922] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2551973520/2551973522 [ 1464.268842][T20532] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1464.447931][T20532] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1464.457075][T20532] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 1464.482016][T20532] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1464.511464][T20532] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1464.658548][T22933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.672100][T22933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.687741][T20532] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1464.720469][T20532] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1464.739360][T20532] usb 2-1: Product: syz [ 1464.743585][T20532] usb 2-1: Manufacturer: syz [ 1464.763006][T20532] cdc_wdm 2-1:1.0: skipping garbage [ 1464.768295][T20532] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1465.294813][T22942] netlink: 'syz.3.4923': attribute type 4 has an invalid length. [ 1465.417192][T22943] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20004 [ 1468.747700][T10691] usb 2-1: USB disconnect, device number 22 [ 1470.433529][T22974] binder: 22973:22974 ioctl c0306201 80000300 returned -11 [ 1470.618594][T22982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.639677][T22982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.703718][T22983] hub 1-0:1.0: USB hub found [ 1470.708805][T22983] hub 1-0:1.0: 1 port detected [ 1473.187003][T23004] netlink: 'syz.1.4937': attribute type 4 has an invalid length. [ 1473.409773][T23008] fuse: Unknown parameter 'xWU' [ 1474.625523][T23011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4940'. [ 1475.428848][ T6891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1475.760064][ T6891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.771554][ T6891] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1475.780916][ T6891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.821789][ T6891] usb 1-1: config 0 descriptor?? [ 1476.300633][ T6891] hid-alps 0003:044E:1215.0059: hidraw0: USB HID v58.6c Device [HID 044e:1215] on usb-dummy_hcd.0-1/input0 [ 1476.611396][T23029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1476.658527][T10691] usb 1-1: USB disconnect, device number 23 [ 1477.299782][ T6891] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1477.436987][T23047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.446106][T23047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.691139][ T6891] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1477.891477][ T6891] usb 6-1: config 0 has no interface number 0 [ 1477.897718][ T6891] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1477.918828][ T6891] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1477.951389][ T6891] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1477.960909][ T6891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.969390][ T6891] usb 6-1: Product: syz [ 1477.979006][ T6891] usb 6-1: Manufacturer: syz [ 1477.984825][ T6891] usb 6-1: SerialNumber: syz [ 1478.020303][ T6891] usb 6-1: config 0 descriptor?? [ 1478.051671][T23033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1478.071419][ T6891] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1478.090287][ T6891] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1479.139489][T23055] x_tables: duplicate underflow at hook 1 [ 1479.189837][T23056] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3736692905/3736692907 [ 1479.211048][T23056] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3736692905/3736692907 [ 1479.259572][T23056] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3736692905/3736692907 [ 1479.992152][ T6891] usb 6-1: USB disconnect, device number 16 [ 1480.005977][ T6891] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1480.085465][ T6891] cyberjack 6-1:0.69: device disconnected [ 1480.713182][T23066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.722911][T23066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.404144][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4956'. [ 1484.414474][T23096] netlink: 'syz.1.4967': attribute type 4 has an invalid length. [ 1486.438858][T20532] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1486.610995][T20532] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1486.633639][T20532] usb 1-1: config 0 has no interface number 0 [ 1486.649130][T20532] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1486.688744][T20532] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1486.716286][T20532] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1486.728730][T20532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.798981][T20532] usb 1-1: Product: syz [ 1486.818189][T20532] usb 1-1: Manufacturer: syz [ 1486.838496][T20532] usb 1-1: SerialNumber: syz [ 1486.859051][T20532] usb 1-1: config 0 descriptor?? [ 1486.864760][T23112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1486.981655][T20532] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1487.023426][T20532] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1487.682794][T23130] tipc: Failed to remove unknown binding: 66,1,1/2498972217:3349038164/3349038166 [ 1487.732993][T23130] tipc: Failed to remove unknown binding: 66,1,1/2498972217:3349038164/3349038166 [ 1487.763336][T23130] tipc: Failed to remove unknown binding: 66,1,1/2498972217:3349038164/3349038166 [ 1487.825941][T23131] openvswitch: netlink: IP tunnel dst address not specified [ 1489.114359][T10691] usb 1-1: USB disconnect, device number 24 [ 1489.125647][T10691] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1489.187570][T10691] cyberjack 1-1:0.69: device disconnected [ 1489.723586][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.730122][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.347835][T23150] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1490.368334][T23150] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[23150] [ 1490.698772][T10691] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1491.173273][T10691] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 1491.244877][T10691] usb 1-1: config 0 has no interface number 0 [ 1491.268695][T10691] usb 1-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1491.317974][T10691] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1491.328004][T10691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.346449][T10691] usb 1-1: Product: syz [ 1491.355413][T10691] usb 1-1: Manufacturer: syz [ 1491.374705][T10691] usb 1-1: SerialNumber: syz [ 1491.418437][T10691] usb 1-1: config 0 descriptor?? [ 1491.433528][T10691] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected [ 1491.494439][T10691] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1491.830587][T23140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1492.225983][T10691] usb 1-1: USB disconnect, device number 25 [ 1492.253066][T10691] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1492.334820][T10691] kobil_sct 1-1:0.148: device disconnected [ 1495.396136][T20530] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1495.584887][T20530] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1495.597389][T20530] usb 6-1: config 0 has no interface number 0 [ 1495.698250][T20530] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1495.727253][T20530] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1495.741131][T20530] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1495.753401][T20530] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.763397][T20530] usb 6-1: Product: syz [ 1495.866990][T20530] usb 6-1: Manufacturer: syz [ 1495.898140][T20530] usb 6-1: SerialNumber: syz [ 1495.927353][T20530] usb 6-1: config 0 descriptor?? [ 1495.942262][T23195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1495.963425][T20530] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1495.996706][T20530] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1496.068767][ T6891] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1496.237807][ T6891] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1496.246415][ T6891] usb 2-1: config 0 has no interface number 0 [ 1496.256585][ T6891] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1496.302345][ T6891] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1496.364882][T10691] usb 6-1: USB disconnect, device number 17 [ 1496.377761][ T6891] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1496.417346][T10691] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1496.430784][ T6891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.446539][ T6891] usb 2-1: Product: syz [ 1496.478752][ T6891] usb 2-1: Manufacturer: syz [ 1496.484462][ T6891] usb 2-1: SerialNumber: syz [ 1496.510601][T10691] cyberjack 6-1:0.69: device disconnected [ 1496.547419][ T6891] usb 2-1: config 0 descriptor?? [ 1496.576306][T23205] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1496.595625][ T6891] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1497.030591][T23207] netlink: 'syz.4.4984': attribute type 21 has an invalid length. [ 1497.038697][T23207] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1497.048925][T23207] netlink: 'syz.4.4984': attribute type 10 has an invalid length. [ 1497.178120][T23213] PKCS7: Unknown OID: [5] (bad) [ 1497.183729][T23213] PKCS7: Only support pkcs7_signedData type [ 1497.813770][T23219] vivid-004: disconnect [ 1498.436208][T23216] vivid-004: reconnect [ 1499.118823][T20530] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1499.279025][T20530] usb 4-1: Using ep0 maxpacket: 16 [ 1499.300279][T20530] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1499.312066][T20530] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1499.323221][T20530] usb 4-1: Product: syz [ 1499.328140][T20530] usb 4-1: Manufacturer: syz [ 1499.351905][T20530] usb 4-1: SerialNumber: syz [ 1499.389627][T20530] usb 4-1: config 0 descriptor?? [ 1499.470099][T10691] usb 2-1: USB disconnect, device number 23 [ 1499.492484][T10691] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1499.812791][T23231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.834122][T23231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.028774][T10691] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1500.193033][T10691] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1500.241730][T10691] usb 2-1: not running at top speed; connect to a high speed hub [ 1500.268728][T10691] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.288827][T10691] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.321209][T10691] usb 2-1: string descriptor 0 read error: -22 [ 1500.327829][T10691] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.354583][T10691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.427743][T10691] usb 2-1: 0:2 : does not exist [ 1501.261993][T23242] [ 1501.264409][T23242] ===================================================== [ 1501.271395][T23242] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1501.278917][T23242] syzkaller #0 Tainted: G L [ 1501.284957][T23242] ----------------------------------------------------- [ 1501.291934][T23242] syz.1.4990/23242 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1501.299703][T23242] ffffffff8e20c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1501.308488][T23242] [ 1501.308488][T23242] and this task is already holding: [ 1501.315881][T23242] ffff8880281e9ba0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1501.324695][T23242] which would create a new lock dependency: [ 1501.330626][T23242] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1501.338279][T23242] [ 1501.338279][T23242] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1501.347770][T23242] (&client->buffer_lock){..-.}-{3:3} [ 1501.347810][T23242] [ 1501.347810][T23242] ... which became SOFTIRQ-irq-safe at: [ 1501.361432][T23242] lock_acquire+0x106/0x330 [ 1501.366080][T23242] _raw_spin_lock+0x2e/0x40 [ 1501.370737][T23242] evdev_pass_values+0xb9/0xbd0 [ 1501.375722][T23242] evdev_events+0x1e6/0x340 [ 1501.380358][T23242] input_pass_values+0x288/0x890 [ 1501.385417][T23242] input_event_dispose+0x3e5/0x6b0 [ 1501.390648][T23242] input_event+0x89/0xe0 [ 1501.395015][T23242] hidinput_hid_event+0x1487/0x1e60 [ 1501.400356][T23242] hid_process_event+0x4be/0x620 [ 1501.405421][T23242] hid_report_raw_event+0xe8f/0x1720 [ 1501.410819][T23242] hid_input_report+0x44b/0x580 [ 1501.415786][T23242] hid_irq_in+0x47e/0x6d0 [ 1501.420251][T23242] __usb_hcd_giveback_urb+0x376/0x540 [ 1501.425756][T23242] dummy_timer+0xbbd/0x45d0 [ 1501.430397][T23242] __hrtimer_run_queues+0x527/0xc30 [ 1501.435722][T23242] hrtimer_run_softirq+0x182/0x5a0 [ 1501.441055][T23242] handle_softirqs+0x22a/0x7c0 [ 1501.445943][T23242] __irq_exit_rcu+0x5f/0x150 [ 1501.450659][T23242] irq_exit_rcu+0x9/0x30 [ 1501.455012][T23242] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1501.460779][T23242] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1501.466884][T23242] [ 1501.466884][T23242] to a SOFTIRQ-irq-unsafe lock: [ 1501.473929][T23242] (tasklist_lock){.+.+}-{3:3} [ 1501.473960][T23242] [ 1501.473960][T23242] ... which became SOFTIRQ-irq-unsafe at: [ 1501.486644][T23242] ... [ 1501.486654][T23242] lock_acquire+0x106/0x330 [ 1501.493989][T23242] _raw_read_lock+0x36/0x50 [ 1501.498614][T23242] __do_wait+0xde/0x740 [ 1501.502976][T23242] do_wait+0x1e7/0x4f0 [ 1501.507169][T23242] kernel_wait+0xd6/0x1c0 [ 1501.511636][T23242] call_usermodehelper_exec_work+0xbe/0x230 [ 1501.517649][T23242] process_scheduled_works+0xaec/0x17a0 [ 1501.523322][T23242] worker_thread+0xda6/0x1360 [ 1501.528138][T23242] kthread+0x726/0x8b0 [ 1501.532328][T23242] ret_from_fork+0x51b/0xa40 [ 1501.537054][T23242] ret_from_fork_asm+0x1a/0x30 [ 1501.541943][T23242] [ 1501.541943][T23242] other info that might help us debug this: [ 1501.541943][T23242] [ 1501.552368][T23242] Chain exists of: [ 1501.552368][T23242] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1501.552368][T23242] [ 1501.565637][T23242] Possible interrupt unsafe locking scenario: [ 1501.565637][T23242] [ 1501.574179][T23242] CPU0 CPU1 [ 1501.579572][T23242] ---- ---- [ 1501.584956][T23242] lock(tasklist_lock); [ 1501.589252][T23242] local_irq_disable(); [ 1501.596021][T23242] lock(&client->buffer_lock); [ 1501.603445][T23242] lock(&f_owner->lock); [ 1501.610340][T23242] [ 1501.613820][T23242] lock(&client->buffer_lock); [ 1501.618959][T23242] [ 1501.618959][T23242] *** DEADLOCK *** [ 1501.618959][T23242] [ 1501.627127][T23242] 2 locks held by syz.1.4990/23242: [ 1501.632359][T23242] #0: ffff888027a6de60 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1501.640962][T23242] #1: ffff8880281e9ba0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1501.650175][T23242] [ 1501.650175][T23242] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1501.660777][T23242] -> (&client->buffer_lock){..-.}-{3:3} { [ 1501.666735][T23242] IN-SOFTIRQ-W at: [ 1501.670908][T23242] lock_acquire+0x106/0x330 [ 1501.677441][T23242] _raw_spin_lock+0x2e/0x40 [ 1501.683971][T23242] evdev_pass_values+0xb9/0xbd0 [ 1501.690858][T23242] evdev_events+0x1e6/0x340 [ 1501.697417][T23242] input_pass_values+0x288/0x890 [ 1501.704389][T23242] input_event_dispose+0x3e5/0x6b0 [ 1501.711542][T23242] input_event+0x89/0xe0 [ 1501.717927][T23242] hidinput_hid_event+0x1487/0x1e60 [ 1501.725187][T23242] hid_process_event+0x4be/0x620 [ 1501.732176][T23242] hid_report_raw_event+0xe8f/0x1720 [ 1501.739497][T23242] hid_input_report+0x44b/0x580 [ 1501.746378][T23242] hid_irq_in+0x47e/0x6d0 [ 1501.752945][T23242] __usb_hcd_giveback_urb+0x376/0x540 [ 1501.760404][T23242] dummy_timer+0xbbd/0x45d0 [ 1501.766970][T23242] __hrtimer_run_queues+0x527/0xc30 [ 1501.774204][T23242] hrtimer_run_softirq+0x182/0x5a0 [ 1501.781360][T23242] handle_softirqs+0x22a/0x7c0 [ 1501.788169][T23242] __irq_exit_rcu+0x5f/0x150 [ 1501.794848][T23242] irq_exit_rcu+0x9/0x30 [ 1501.801119][T23242] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1501.808787][T23242] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1501.816807][T23242] INITIAL USE at: [ 1501.820909][T23242] lock_acquire+0x106/0x330 [ 1501.827383][T23242] _raw_spin_lock+0x2e/0x40 [ 1501.834209][T23242] evdev_handle_get_val+0x70/0x9f0 [ 1501.841275][T23242] evdev_ioctl_handler+0x127b/0x1fe0 [ 1501.848528][T23242] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1501.855976][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1501.863116][T23242] do_fast_syscall_32+0x33/0x70 [ 1501.869932][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1501.878221][T23242] } [ 1501.880917][T23242] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1501.889284][T23242] -> (&new->fa_lock){....}-{3:3} { [ 1501.894549][T23242] INITIAL USE at: [ 1501.898552][T23242] lock_acquire+0x106/0x330 [ 1501.904824][T23242] _raw_write_lock_irq+0x3d/0x50 [ 1501.911598][T23242] fasync_remove_entry+0xf1/0x1c0 [ 1501.918407][T23242] sock_fasync+0x85/0xf0 [ 1501.924387][T23242] __fput+0x8a5/0xa70 [ 1501.930144][T23242] task_work_run+0x1d9/0x270 [ 1501.936502][T23242] get_signal+0x11eb/0x1330 [ 1501.942776][T23242] arch_do_signal_or_restart+0xbc/0x830 [ 1501.950094][T23242] exit_to_user_mode_loop+0x86/0x480 [ 1501.957142][T23242] do_int80_emulation+0x2a0/0x400 [ 1501.963945][T23242] asm_int80_emulation+0x1a/0x20 [ 1501.970643][T23242] INITIAL READ USE at: [ 1501.975084][T23242] lock_acquire+0x106/0x330 [ 1501.981817][T23242] _raw_read_lock_irqsave+0x48/0x60 [ 1501.989250][T23242] kill_fasync+0x199/0x4d0 [ 1501.995871][T23242] mousedev_write+0x8f9/0x950 [ 1502.002791][T23242] vfs_write+0x29a/0xb90 [ 1502.009242][T23242] ksys_write+0x150/0x270 [ 1502.015796][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.023205][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.030276][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.038807][T23242] } [ 1502.041410][T23242] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1502.050205][T23242] ... acquired at: [ 1502.054117][T23242] _raw_read_lock_irqsave+0x48/0x60 [ 1502.059607][T23242] kill_fasync+0x199/0x4d0 [ 1502.064228][T23242] evdev_pass_values+0x627/0xbd0 [ 1502.069364][T23242] evdev_events+0x1e6/0x340 [ 1502.074074][T23242] input_pass_values+0x288/0x890 [ 1502.079216][T23242] input_event_dispose+0x330/0x6b0 [ 1502.084520][T23242] input_inject_event+0x1dd/0x340 [ 1502.089740][T23242] evdev_write+0x325/0x4c0 [ 1502.094361][T23242] vfs_write+0x29a/0xb90 [ 1502.098802][T23242] ksys_write+0x150/0x270 [ 1502.103344][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.108825][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.113877][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.120399][T23242] [ 1502.122734][T23242] -> (&f_owner->lock){....}-{3:3} { [ 1502.127990][T23242] INITIAL USE at: [ 1502.131942][T23242] lock_acquire+0x106/0x330 [ 1502.138060][T23242] _raw_write_lock_irq+0x3d/0x50 [ 1502.144617][T23242] __f_setown+0x67/0x370 [ 1502.150451][T23242] do_fcntl+0x171c/0x1a20 [ 1502.156400][T23242] do_compat_fcntl64+0x51e/0x7e0 [ 1502.162957][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.169751][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.176180][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.184114][T23242] INITIAL READ USE at: [ 1502.188471][T23242] lock_acquire+0x106/0x330 [ 1502.195027][T23242] _raw_read_lock_irqsave+0x48/0x60 [ 1502.202254][T23242] send_sigio+0x38/0x370 [ 1502.208535][T23242] kill_fasync+0x24d/0x4d0 [ 1502.214976][T23242] lease_break_callback+0x26/0x30 [ 1502.222021][T23242] __break_lease+0x741/0x1b80 [ 1502.228729][T23242] do_dentry_open+0x73a/0x1420 [ 1502.235519][T23242] vfs_open+0x3b/0x340 [ 1502.241599][T23242] path_openat+0x3486/0x3e20 [ 1502.248238][T23242] do_filp_open+0x22d/0x490 [ 1502.254790][T23242] do_sys_openat2+0x12f/0x220 [ 1502.261492][T23242] __ia32_compat_sys_open+0x117/0x140 [ 1502.268883][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.276107][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.283067][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.291419][T23242] } [ 1502.293931][T23242] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1502.302817][T23242] ... acquired at: [ 1502.306647][T23242] _raw_read_lock_irqsave+0x48/0x60 [ 1502.312043][T23242] send_sigio+0x38/0x370 [ 1502.316486][T23242] kill_fasync+0x24d/0x4d0 [ 1502.321104][T23242] lease_break_callback+0x26/0x30 [ 1502.326325][T23242] __break_lease+0x741/0x1b80 [ 1502.331214][T23242] do_dentry_open+0x73a/0x1420 [ 1502.336174][T23242] vfs_open+0x3b/0x340 [ 1502.340444][T23242] path_openat+0x3486/0x3e20 [ 1502.345253][T23242] do_filp_open+0x22d/0x490 [ 1502.349970][T23242] do_sys_openat2+0x12f/0x220 [ 1502.354946][T23242] __ia32_compat_sys_open+0x117/0x140 [ 1502.360548][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.365965][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.371022][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.377552][T23242] [ 1502.379889][T23242] [ 1502.379889][T23242] the dependencies between the lock to be acquired [ 1502.379902][T23242] and SOFTIRQ-irq-unsafe lock: [ 1502.393472][T23242] -> (tasklist_lock){.+.+}-{3:3} { [ 1502.398741][T23242] HARDIRQ-ON-R at: [ 1502.402760][T23242] lock_acquire+0x106/0x330 [ 1502.408950][T23242] _raw_read_lock+0x36/0x50 [ 1502.415139][T23242] __do_wait+0xde/0x740 [ 1502.421010][T23242] do_wait+0x1e7/0x4f0 [ 1502.426763][T23242] kernel_wait+0xd6/0x1c0 [ 1502.432789][T23242] call_usermodehelper_exec_work+0xbe/0x230 [ 1502.440387][T23242] process_scheduled_works+0xaec/0x17a0 [ 1502.447633][T23242] worker_thread+0xda6/0x1360 [ 1502.454017][T23242] kthread+0x726/0x8b0 [ 1502.459792][T23242] ret_from_fork+0x51b/0xa40 [ 1502.466126][T23242] ret_from_fork_asm+0x1a/0x30 [ 1502.472683][T23242] SOFTIRQ-ON-R at: [ 1502.476697][T23242] lock_acquire+0x106/0x330 [ 1502.482905][T23242] _raw_read_lock+0x36/0x50 [ 1502.489106][T23242] __do_wait+0xde/0x740 [ 1502.494966][T23242] do_wait+0x1e7/0x4f0 [ 1502.500754][T23242] kernel_wait+0xd6/0x1c0 [ 1502.506811][T23242] call_usermodehelper_exec_work+0xbe/0x230 [ 1502.514427][T23242] process_scheduled_works+0xaec/0x17a0 [ 1502.521685][T23242] worker_thread+0xda6/0x1360 [ 1502.528072][T23242] kthread+0x726/0x8b0 [ 1502.533853][T23242] ret_from_fork+0x51b/0xa40 [ 1502.540144][T23242] ret_from_fork_asm+0x1a/0x30 [ 1502.546620][T23242] INITIAL USE at: [ 1502.550576][T23242] lock_acquire+0x106/0x330 [ 1502.556711][T23242] _raw_write_lock_irq+0x3d/0x50 [ 1502.563295][T23242] copy_process+0x2199/0x3980 [ 1502.569572][T23242] kernel_clone+0x248/0x870 [ 1502.575666][T23242] user_mode_thread+0x110/0x180 [ 1502.582104][T23242] rest_init+0x23/0x300 [ 1502.587872][T23242] start_kernel+0x380/0x3d0 [ 1502.594012][T23242] x86_64_start_reservations+0x24/0x30 [ 1502.601426][T23242] x86_64_start_kernel+0x143/0x1c0 [ 1502.608157][T23242] common_startup_64+0x13e/0x147 [ 1502.614754][T23242] INITIAL READ USE at: [ 1502.619159][T23242] lock_acquire+0x106/0x330 [ 1502.625717][T23242] _raw_read_lock+0x36/0x50 [ 1502.632268][T23242] __do_wait+0xde/0x740 [ 1502.638469][T23242] do_wait+0x1e7/0x4f0 [ 1502.644593][T23242] kernel_wait+0xd6/0x1c0 [ 1502.650986][T23242] call_usermodehelper_exec_work+0xbe/0x230 [ 1502.658933][T23242] process_scheduled_works+0xaec/0x17a0 [ 1502.666519][T23242] worker_thread+0xda6/0x1360 [ 1502.673294][T23242] kthread+0x726/0x8b0 [ 1502.679485][T23242] ret_from_fork+0x51b/0xa40 [ 1502.686135][T23242] ret_from_fork_asm+0x1a/0x30 [ 1502.693069][T23242] } [ 1502.695599][T23242] ... key at: [] tasklist_lock+0x18/0x40 [ 1502.703356][T23242] ... acquired at: [ 1502.707193][T23242] _raw_read_lock+0x36/0x50 [ 1502.711986][T23242] send_sigurg+0x12b/0x420 [ 1502.716597][T23242] sk_send_sigurg+0x6c/0x2e0 [ 1502.721399][T23242] queue_oob+0x42c/0x4f0 [ 1502.725850][T23242] unix_stream_sendmsg+0xcb1/0xe80 [ 1502.731154][T23242] ____sys_sendmsg+0xa68/0xad0 [ 1502.736128][T23242] ___sys_sendmsg+0x2a5/0x360 [ 1502.741000][T23242] __sys_sendmmsg+0x2e7/0x4e0 [ 1502.745874][T23242] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1502.751642][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.757043][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.762106][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.768658][T23242] [ 1502.771006][T23242] [ 1502.771006][T23242] stack backtrace: [ 1502.777049][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.1.4990 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.777083][T23242] Tainted: [L]=SOFTLOCKUP [ 1502.777089][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1502.777121][T23242] Call Trace: [ 1502.777133][T23242] [ 1502.777144][T23242] dump_stack_lvl+0xe8/0x150 [ 1502.777174][T23242] __lock_acquire+0x2a94/0x2cf0 [ 1502.777216][T23242] ? send_sigurg+0x12b/0x420 [ 1502.777237][T23242] lock_acquire+0x106/0x330 [ 1502.777258][T23242] ? send_sigurg+0x12b/0x420 [ 1502.777313][T23242] _raw_read_lock+0x36/0x50 [ 1502.777332][T23242] ? send_sigurg+0x12b/0x420 [ 1502.777360][T23242] send_sigurg+0x12b/0x420 [ 1502.777383][T23242] sk_send_sigurg+0x6c/0x2e0 [ 1502.777398][T23242] queue_oob+0x42c/0x4f0 [ 1502.777429][T23242] ? __pfx_queue_oob+0x10/0x10 [ 1502.777452][T23242] ? __lock_acquire+0x6b5/0x2cf0 [ 1502.777480][T23242] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1502.777506][T23242] unix_stream_sendmsg+0xcb1/0xe80 [ 1502.777527][T23242] ? sched_clock+0x3f/0x60 [ 1502.777548][T23242] ? finish_task_switch+0x161/0x920 [ 1502.777584][T23242] ? __might_fault+0xaf/0x130 [ 1502.777616][T23242] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1502.777636][T23242] ? __import_iovec+0x5d4/0x7e0 [ 1502.777670][T23242] ? aa_sock_msg_perm+0xda/0x1b0 [ 1502.777690][T23242] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1502.777706][T23242] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1502.777721][T23242] ____sys_sendmsg+0xa68/0xad0 [ 1502.777767][T23242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1502.777801][T23242] ___sys_sendmsg+0x2a5/0x360 [ 1502.777830][T23242] ? __lock_acquire+0x6b5/0x2cf0 [ 1502.777861][T23242] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.777894][T23242] ? preempt_schedule_thunk+0x16/0x30 [ 1502.777930][T23242] ? preempt_schedule_common+0x82/0xd0 [ 1502.777950][T23242] ? preempt_schedule_thunk+0x16/0x30 [ 1502.777993][T23242] ? __fget_files+0x2a/0x420 [ 1502.778010][T23242] ? __fget_files+0x3a0/0x420 [ 1502.778030][T23242] __sys_sendmmsg+0x2e7/0x4e0 [ 1502.778072][T23242] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1502.778097][T23242] ? do_futex+0x395/0x420 [ 1502.778139][T23242] ? rcu_is_watching+0x15/0xb0 [ 1502.778158][T23242] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1502.778179][T23242] __do_fast_syscall_32+0x1d2/0x540 [ 1502.778213][T23242] ? do_fast_syscall_32+0x33/0x70 [ 1502.778236][T23242] ? irqentry_exit+0x10e/0x620 [ 1502.778259][T23242] do_fast_syscall_32+0x33/0x70 [ 1502.778285][T23242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.778310][T23242] RIP: 0023:0xf73ad539 [ 1502.778328][T23242] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1502.778355][T23242] RSP: 002b:00000000f53b550c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1502.778380][T23242] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006c40 [ 1502.778396][T23242] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 1502.778409][T23242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1502.778421][T23242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1502.778434][T23242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.778456][T23242] [ 1503.390008][T23245] netlink: 'syz.0.4992': attribute type 4 has an invalid length. [ 1503.663297][T10125] usb 4-1: USB disconnect, device number 10 [ 1505.089862][ T6900] kworker/0:15 (6900) used greatest stack depth: 15800 bytes left [ 1508.681728][T10691] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1508.694382][T10691] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1508.704749][T10691] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1508.721901][T10691] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)