last executing test programs: 5m52.624056589s ago: executing program 0 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000100000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0x3ff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0x7, 0x0, 0x3}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20) 5m52.410632431s ago: executing program 0 (id=1883): io_uring_setup(0x80004f73, &(0x7f00000000c0)={0x0, 0xec19, 0x0, 0x1000000, 0x4}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f", @ANYRESHEX], 0x0) epoll_create1(0x80000) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 5m49.110301387s ago: executing program 0 (id=1896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000000064e703002503000000000000080026006c09"], 0x80}}, 0x0) 5m48.928593074s ago: executing program 0 (id=1899): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0xf9b) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000440)={r6, r7, r12, 0x6, 0x200, 0x0, 0x4cc, 0xa, 0x4, 0x1, 0x7, 0x200}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x2, &(0x7f0000000040)=[r5, r5], &(0x7f0000000200), 0x0, 0x0}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0xffffffffffffffff, 0x1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0xe3, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r13}) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x20}, @ioring_restriction_register_op={0x0, 0x38}], 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r14 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r14, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r15}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r15], &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r16], &(0x7f0000000180), 0x0, 0xff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000007c0)={0x1, 0x6, &(0x7f0000000480)=[r10, r11, r6, r9, r8, 0x0], &(0x7f00000004c0)=[0x3, 0x6], &(0x7f0000000740)=[r11, 0x0, r16], &(0x7f0000000780)=[0x401, 0x9, 0x3, 0xe867, 0x2, 0x4, 0x3ff, 0x8], 0x0, 0x9}) 5m47.919318444s ago: executing program 0 (id=1903): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x2064) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') write$P9_RVERSION(r4, 0x0, 0x500) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x4000002) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000885) epoll_create1(0x80000) write$dsp(r7, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000140)=0x4) read$dsp(0xffffffffffffffff, &(0x7f0000000200)=""/25, 0x8a) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0) r8 = dup2(r6, r6) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x1}, 0x8) 5m46.516292036s ago: executing program 0 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r4, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0xfffffffd, 0x50313459, 0x3, @stepwise={0x1, 0x8497, 0x1000, 0x401, 0x9, 0x400}}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private1, 0x4000}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000324d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2003, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0xb0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 5m45.798115182s ago: executing program 32 (id=1905): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, 0x0, 0x598080, 0x184) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r4, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000001b00)={0xfffffffd, 0x50313459, 0x3, @stepwise={0x1, 0x8497, 0x1000, 0x401, 0x9, 0x400}}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private1, 0x4000}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000324d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2003, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0xb0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 7.324238992s ago: executing program 4 (id=3117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x743081, 0x0) unshare(0x66000080) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x8080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x7ec) close(0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x200, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001"], 0x74}}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001480), 0x121142, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x210803, 0x0) 6.620426322s ago: executing program 2 (id=3118): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0xff00}}], 0x1, 0x10) 6.456444168s ago: executing program 2 (id=3119): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x2b, &(0x7f00000000c0)=""/43, 0xe8b7a8a4c8ddac32, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/160, 0xfffffcc2}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) read$char_usb(r4, 0x0, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x1, 0x0) close(r10) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000002c0)={0xa002a014}) close(r8) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1380, 0x0) r11 = syz_usb_connect(0x3, 0x986, &(0x7f0000000200)=ANY=[@ANYRESHEX=r6], &(0x7f0000000f40)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x1, 0x7, 0x4, 0x40, 0xe}, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6eb56ae3c2"], 0x5, [{0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="3f03f7be6c1ef99dfa9d48270000000057cccbe0bc150a3d476233450cc624ccf08999702e76fb59cc8387267e4fc144c59d3647246484b0c8b51a077e4db2c701001f2c820e0c50cbcf6527524da62bcd2a197e06c74c5128c9b11ee3f61c4bf6311a339d2aa088d64d5071f359b1f1892c782f0213daaf2d81aefb54946f66742281ab18dea5df2a20a870c7872249aadcc13af265fd535cdc93e170728bd26f50af5ae10be366c45d3eef3defbef48677035a4d596e0e978c5fe1c4c6802ac3b112f68fc07f02fe49c4a4d12652b92bdf07facbd78f9035bdfc85"]}, {0x81, &(0x7f0000000c40)=@string={0x81, 0x3, "6b59d00ef3a596bc6e061d8bb18f9984d6820052752c95ab069f235fce0c82136c1908924c8821d35735226196f3cf5bd65c5492781bba92553fa9a2cb0d76be064e0ef60fd7e0b2bd540fd4b3906db7db6575ab63bb5285cd085efbb765cfeda0732784e616346edd7be292ee839d2c1e20b9323d9e4280e019efc32cb855"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x436}}, {0xd2, &(0x7f00000002c0)=@string={0xd2, 0x3, "d0d9759a2bd6acf1940b931fdd5d5eb74a49dbbaaf173e1ff2d937fa2225b418af49496f6653dcd06945b1f9fb00f2063b957b98028b0bb8bdd4639c18ccb632e97f59b218f2d69e2a9fa555fbbbf1c8d020404f285d477ca4a31432a34acebf5cdea7db6bb42350780650233adf6b25f662c27b37121960248f38e202bee8f57b788f0ab9172a3eee2c86e5116f51894a3a6f2725b2cfd95f5acc2539184fd6de7a66c7815690f49f6d7e59b5c7494ea2f164ef58684469ff59694e7566f022eefeaae48ae38be6d62d071dad14fa08"}}]}) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x58, &(0x7f0000000fc0)={[{0x51, 0x4e00, "b85f2779915e2604a496cb85e1575c471bea5ea400a81c6a3695dd16b7d5d43b3c8f03e02c2fe28bc5f30bd408fabf4954631b7d625d58013caaa375693ddb36d2cf86e86862429763d13f4ce3d41ae416"}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_usb_disconnect(r0) 5.524400682s ago: executing program 5 (id=3121): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{}, {0x20, '\xec\r\n\xd9\x95\\4\x15\x88\xc5A\xed\xa7g\"\r4\xc30x0}) fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) r4 = socket(0x10, 0x803, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000080)) (async) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) (async) ioctl$SNDRV_PCM_IOCTL_DELAY(r10, 0x80084121, 0x0) (async) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'syzkaller0\x00', 0x600}) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x42}, @TCA_CAKE_MPU={0x8, 0xe, 0x9e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0xffe0, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x30000811}, 0x20048850) 5.067637639s ago: executing program 4 (id=3125): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x1800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7ff, 0xfffffe0000000001, 0xf811, 0xffffffff}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYRES16=r0, @ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000003000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x1000, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) r6 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_fuse_handle_req(r4, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x7, 0x0, 0x8, 0x0, 0x0, 0x2, {0x0, 0x1, 0x2, 0x0, 0x0, 0x9, 0x1ff, 0xff, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.03263018s ago: executing program 3 (id=3126): unshare(0x2c020400) r0 = msgget$private(0x0, 0x722) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0) msgctl$IPC_RMID(r0, 0x0) 4.540937944s ago: executing program 3 (id=3127): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x6, 0x1077, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0xda, 0xc7, 0x7e, 0x8, 0x19d2, 0x34, 0x9de0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1065, 0x4, 0xa, 0x0, 0x90, 0xf8, [{{0x9, 0x4, 0x2e, 0x3, 0xb, 0xff, 0xff, 0xff, 0x8, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x2, 0x80, 0x1}, @as_header={0x7, 0x24, 0x1, 0xb, 0x9}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x9, "", "60b0"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x78, 0x2, 0x0, 0xd, "87", "fb17"}]}], [{{0x9, 0x5, 0xf, 0x4, 0x200, 0x81, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0xd77c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x6, 0x2, 0x5, [@generic={0x3f, 0x7, "ec691478a9387b31bac527c2c99b084e890a548a18506e1cda1e5dd7ce968bb3974ad5897da3f4c622c4d9cad9b779cf8be12ca1db6377c1ad3bcdb995"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x8, 0xff, 0x8, [@generic={0xbe, 0xa, "e9cdeb8bcacb0adc9c90ed07c9896a9ac8060bb941a59ed0120f7150e39634788ed97bbf462e5181cb82d3ab17b28fdff958de531f502b066b1f01d73ae7cdf1c939b9e243e8be5b57cc3b7e555feb017148c931cf5f887bf872d917bc3c5644cb4b641ce583c9a0b1efc6ac4618436bf2eb142109008f7e34f635dd83bc5de51290de45f5d671b349d30045474d18f3340ac69e975a11b2c5c950d77e39adc58ea9ad74812cbb5f75b886c9349daa2ac3dbde320ee01426182078bf"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x2, 0x66, 0x3, [@generic={0xe2, 0xa, "730304bf15a314562cc0084d255443cb0024c950e03e168ec00d2493d210b948d9c48e0a1c32ddc9c62baf3d7e1a804c8934ff3c5223174e96f68e9320f6ff1cf1e77aa1bd2e5a1763e9db74c5b3c9cf11a249441c48e099be60bd235b569d70a5547fe17bd8912c3de8ac38a63a33a4d244a1a62f425d2938b7c92e8ec5d74904d2296b3a1c3010fe51c42cbf35d672b40b7efb01064070f88c681dbcd9bea573237a6669cb900abf7c2f0d1571b438e324338c94a435dc8064821a8671a2f6adbef9aa12ca22d7f9fb19daa2b64add9382f09f702be975c232fd4033cc65b3"}, @generic={0x9c, 0x5, "03549f212c2a5ef58cb84c1b71ea86792f96245b92023c781e31dbf81500eb305e7e31f5341b7aea253ae6b0a3e8293082e3ed48e012bd5744aa5c44829a043d518aa92ce25c1b0ed2f115fd27f6503ba195c23af0166556d507d7f40374e8f1196fad0862abd82bbdcc4bf1626a6a28d1f865c8adcacaa9cc70d2a448f5e4ba4de90a0cbaa821514527a1e97ae440f5782fb4e3ff04aa598da0"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x0, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x8}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0x2, 0x7, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x3, 0xe0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x200}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x0, 0x1, 0x1, [@generic={0x6, 0xc, "888f5363"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x6, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xffff}, @generic={0xab, 0x13, "1df096cace95c0b3e25f84a4c7727ddd1d74f0fb16d331be1b57ae0620276d33fe8051338d8cdd82518849e230545cc5c7f73420598cab9b1207f71de9fe8289c7da257bf14ad2a38622c91622f99ebb6ad2de0ef21dac7da617e6347f221823427ba111eaa3c40d582da69b47fd7b2ec6482f61769260c247ab8151f0949994666d52c19927d9e813c564ec178fcfb58246f183f4206d92c74ee136995207a0ed59206b693ba92b36"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x12, 0x74, 0x3d, [@generic={0x6d, 0x5, "f5d55f76f251b27ff5932e92c4294c8a858b413f2544243ae826f2ae674cc405346e8f4d546343c0e84b6ac7da951b8515732f49bea6447ad622279eda48da742bda434de69dd52e719f5f3a3983c3ed2bd159b56c92509ce3625d4a63d7263b6580e0f7397a6252de5cbe"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x8001}]}}, {{0x9, 0x5, 0xa, 0x1, 0x3ff, 0x4, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x49, 0x8000}]}}]}}, {{0x9, 0x4, 0x8b, 0x7, 0x2, 0xff, 0xff, 0xff, 0x9, [@generic={0x66, 0x31, "4cbfe6561517594f9e2cff2289465278a89ad657293e468d0338e83fbd76d14f7b965117776d409851cc4cf43ca977f24b7aa66b17b54c04e994b3d8e126f19236ee0f73ac0a7238171a08316921179c889a600726d152c9d2c897f9eefdadfeff60f159"}], [{{0x9, 0x5, 0x80, 0x9, 0x20, 0x9, 0x6, 0x1, [@generic={0x30, 0x36, "6968ea52b479061284c71318a35cdbe320e95c5287ac77d17a1d0fa4897d0a23cd558739f86853227e11ed2d85d1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x4, 0x5, 0xff, [@generic={0x89, 0x2, "0f4bae9d21c4eb3ee282a99a06330ed703fad7adfc73950a32f465782e3b9ccb3f3eeac54d54aaa64e361e54a46c0dd6329a5ed11e3918fafde741ac1002a605a38ee51b16928bb8af67bdfae76bce4ada18a7f84fb9b8e11724a9c5b4ab5f913886726c124c4ee2ac76ff4d43ef2e0ea990869fc208f1b0466b8a686c01b27b24eedc7758c4f5"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0xd}]}}]}}, {{0x9, 0x4, 0xcf, 0x9, 0x9, 0x22, 0x92, 0xaa, 0x0, [@generic={0xed, 0xc, "83706827a94fd02a0b8eeec58379be69c4d17d62efc5b817f23e1528dd445c50187464c9c1088f11628a10e82fb1686fa05cc83b6f955a38b4da771c8023348e6c04b74c26f504456334e56a109103070136738c3c5d551af982d6a15f979afb27316cb423d57c169159997e466389a06ef00596835c500eba9b0a2218b203907407b3472cdb1aa6a246f655baec77c2f6dc068031abf73f50cf359eed8fba2f6a679ee7420678c76d3ac11f03498c915b0fb8bf8bf5e8b904a03d94d1f267f7e84efd70118488015ee3f8a904527fc8192a85ef4a106f67af6bb73a006ca636b016e74a63931f306b5a9c"}], [{{0x9, 0x5, 0x8, 0x3, 0x20, 0x7f, 0x0, 0x4b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x6677}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x85, 0x2}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0xaa, 0xa, 0x7, [@generic={0x4c, 0x23, "e66a43162a0083dfddaa02287fa3b741add8a7795dbcb7842c1aa3421fa2cf4276383b452833c63dfcc27194feca6b708d79e9ebd568acc592b5071764117d4c396c2de668fcbccf89cb"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x10, 0x52, 0x5, 0x8, [@generic={0xa8, 0xe, "7a03c0d624aa5322084b47bedea965a00344aa44da310e48baa4b00e435ac103a83d33d0f3be380cc11b69971318654303bb8bcdb838f8cdbe3ef1d18d84c6a1cd8eed901a6487f68de7010942268f2c69b08e6e5cf313cf5cf52d84fc500a2fa3cd4f81eca7c275dc6ae156dd024b577c62f89312827156536fe70f8e4948270d30d6c9a54ccd14390d9a3f30d6ead2b016ce6da2d4abdd26217e05969ae95bc866b348f553"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x10, 0x0, 0x2, 0x2, [@generic={0x102, 0x31, "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"}, @generic={0x41, 0x11, "eef256ebe4e0fde1fe6940299e86dbd07ff2a3254a09fca25162ed69f6d98033a329cd65a6e1f0c7e88e3df171203b246f221692e777169e32e288bfdadc29"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0x3, 0x5, [@generic={0xf0, 0x0, "5b84ca73376accbb2bd74009caf8f10b76f5b652a3ebceb67eae16faeaa0790a735f5b171027aa49ff17ab4c711408ad78430deea3bedb62b0dc0f551a4017d28d8e2b772bf6df3dccbbe220ce7ce985dc5af823ef90fcf3c389f1d0df9eab69f10871c2ea693ffc663f6d74deae79983e02c4271ec81f9030ae121b0b0380597571ad8196c011c81eb4dac972e0f20090c2dcfb09dd155afae04a7ad4ddbcf83c842a5d829c7845060df47d1df522de356a7044a46362490e1a1733f031e08224a324a7e36dd7e8ec88b0c23dc5fe60f59412740958a9ae006496f8535112cd33e55b723dbe3968b00c133699e8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x31e9}]}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xd1, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xd, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x0, 0xe4, 0x5, [@generic={0x6b, 0x22, "90aafea3f6045f189572661474aaf8e050299a6a7f5983ec16f27799b8dae28c292efc6c43c810e41d7611f8dcd6ee5507ce60cb7912820d9b096b7f475b277cbbe727e9dc7b4f59629b8f484346f01881731acf675ef523164b08b7e0e58ed912afa6bcd7e128373c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x70}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x19, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x32, 0x4}, @generic={0x94, 0x22, "9fce0501a6121be1d52c5f42ecda6a323eb2a32528f6361d7b354dbbc671b855cdc81b807624ab22f5a10e13efd8639aef67cf2113f743c72de16c04dd1d6e364ac531768640e4a5b3ac1b3a124ebc534dc8c550b94efb90416cf80e85fb170cd2b46674bc035ba61881499dc033d3ae7304bc66c7bf34a57ac9bd828444f8044867e687c89b5a6a61c028df4076772aba20"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x4, 0x6, 0x3, [@generic={0xb1, 0x31, "6be9412101f23dffb633b5d71a0015acbe73cb5cebe137f804cf62832e44dc30f1aada6c7157053628438ffc0016347008e5f7c35ae945c4bab57a047bfa857de6c9e7dd1dff30e418e683517f24f919c109f95d50f783d70da1bcc68cd853085a55390befe40b9456f2db3ac1b5f82533b4cf61847a94ae39e83760fbd7181f976a4875ab2705a99f569ebafebd2e4f9fd8291b41ba8dfc69daffc03c47a6c0128a52cb5cc4b86d0790d27a55ae24"}]}}]}}, {{0x9, 0x4, 0x4f, 0xc, 0xb, 0xff, 0x3, 0x79, 0x3, [@uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xc0, 0x1, 0x9, 0x10, "", "dafa"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x1, 0x3, "", 'p'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2b, 0x4, 0x0, 0x7f, "439a48", "2eb3"}, @as_header={0x7, 0x24, 0x1, 0x40}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc0, 0x1, 0xe, 0x10, "ed1d22e0313a3c6d"}]}], [{{0x9, 0x5, 0x0, 0x2, 0x8, 0x9, 0x3, 0x2, [@generic={0x29, 0x11, "352c5aba49bb45539f37b5340b883878594b0e203735d85d5a90bab316884b6772231164406369"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x6, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfe, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x31, 0x5, 0x8, [@generic={0x101, 0x11, "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"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xf7, 0xf, 0x3, [@generic={0xa1, 0xf, "6dcfd48578e19ee4d789f5588759551aff35aa964dcf67aa300aaeed5ac992b6eca56d098594c8a8b39ce7fe604b2562eda0b7c94d5a910b37a24d8148acc3dd774c2f7fc0dac0ad861c47da5cb10097d7bc7db062ab3bb2881955a7a6cd19e8e1bf58a054f4e25583106c59ffaabdd9ca49c4f764dfc8e7703c28d4b4200af9e8b967b2054cdeebab0008e33b740213203566437fdfdc4a26bb81bce9342b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x3, 0xad, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x567}, @generic={0x1a, 0x3e, "e05b48f2de5aa16782211960d91987391c1136c0471d79d7"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x387, 0xc, 0xfd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0xb036}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x0, 0x81, 0xa1, [@generic={0xb9, 0x8, "be0cfd76ae71bfb2374310cef314fe4cfd0a35a44d7ef1a76cc15994b2fd226af051642ef2d5b5a9077900d0e16833e26198002fd868ba3db0a5bf8f8fbed584963e2a0e9c276bf8f318db1b8f89c33c0abe7881626e9901c7dcac04a07ce8d3b5cce6cda942ac64ec73d25de5546263fe238aac50ca39febb9c33ba1b1dc8ae654ae0d036ebfdeed2b739c9972351c76f934d3504d4b136723a961ea5ccccb9943becd398196821f3ee73cc4e576b30428b5bbb7ddbf6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}, {{0x9, 0x5, 0x1, 0x13, 0x3b7, 0x0, 0x7, 0xf, [@generic={0xec, 0xc, "278be51a4b33f50d8cc532a9336b4ef9d3a5a5bdefe00aebe921af7aa3eeac4623ef297b41ccdde77fcb0800ae90a1ed1d0b57eaf2dfa39f1fc861c84f6c860c509078ec0a7c4a094fd2d95898c5efee70415322f551d466190f581e9a12c3b6ba109a155733aa754a2e89a72d509afd4e3a8ca6561ba3ff78ce40a128c58cc122e4aa3b0e2f114038b561f4e0c8dfbc2ea787aaeb72aba3695a222fb01fd199918a97406ff78f36f45dc92caea4aa97a2d8900c9a78c1591cab028b35d86a97057c40266b119ed34e9ad87d5d38814a5b69e1960dab2decb8593a1643b1198ac565083824282ec9a181"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x0, 0x5, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfa, 0x4b47}]}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0xf2, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6d2b}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5f}]}}]}}]}}]}}, &(0x7f0000000080)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x3, 0x2c, 0x8, 0x20, 0x3}, 0xc, &(0x7f0000000040)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x8, 0xe, 0x9d}]}, 0x1, [{0x68, &(0x7f0000000100)=@string={0x68, 0x3, "6677a9aac77c59dfa4258f9b4a2418d4d738fa6b3b6678318ffb588bfe22a45729e8faeae321e8b6cfa7b87563cd75321963629af4f855497f8b49a275fa16460101be581793cb6ecbd638f3d5be7e26125822fa0adf6419e0d02baa4df7a517d212be536164"}}]}) syz_usb_ep_write(r1, 0x4, 0xa9, &(0x7f0000000180)="2dccf621880b18e7e9a1b8c4df61aeb7822ccaf717b4a6da33750de5d4ce6c81cac3fe9a63e1d38dc02f7af75dae64327964fbd68173537f856e0febed386cc40672f902244682d34a50b3f049e71acbc8cec2b5dcc73a06374fd73a489e9b5316d3552eae16ed1a772208e7b18012f2f907649474f9b09f0f715d1591b7c997af602de57fb5fdc330a608f5a4ba3f230a241b8f879fe9c4c6177e6666d75e4400802c046acdac2694") socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) 4.488071859s ago: executing program 5 (id=3128): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000009060102000000f9ef000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4.325110596s ago: executing program 2 (id=3129): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x12000000}}], 0x1, 0x10) 3.763603849s ago: executing program 2 (id=3130): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406441, &(0x7f0000000280)={0x34, 0x0, 0x3, 0xffffffffffffff91, 0x0, 0x0, 0x0, 0xfffffffffffffcb3, 0x0}) (async, rerun: 64) syz_usb_connect(0x3, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501", @ANYRES8], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (rerun: 64) 3.680552834s ago: executing program 5 (id=3131): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fcdbdf250900000034000380080003000000000008000200dc02000008000200feffffff08000100010000000800010000080000080003000300000094000180388004001400010002004e21e00000010000000000000000200002000a004e2200000009fe8000000000000000000000000000aa000200000d0001007564703a73797a31000000000d0001007564703a73797a3200000000380004001400010002004e22e00000010000000000000000200002000a004e2100000005ff01000000000000000000000000000100000100"], 0xdc}}, 0x11) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r3 = socket$inet(0x2, 0x803, 0x3) getsockopt(r3, 0xff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x625, @private1, 0x10001}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000005c0)={r8, @in6={{0xa, 0x4e22, 0xaf6a, @empty, 0x1ff}}}, 0x84) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r9 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r10, 0x403, 0x0) syz_clone3(&(0x7f0000000100)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f00000001c0)) wait4(0x0, 0x0, 0x40000000, 0x0) memfd_create(&(0x7f0000000200)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x3) 3.267330305s ago: executing program 5 (id=3132): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800000055aa00", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000380)={0x0, {}, 0x2000000000000000, {}, 0xdb03, 0x5, 0xc, 0x4, "edf0c98dd46e2f433e157c11b61fd76e031f98e8aad01ccba893d22c6ca42d0e22404919797d9893631da439ace17384471651e41baa61a7fc47257802d43f31", "feb09f79899ce11f40e6932779d1f45df1ae19f87439dac78295c165d48aff1f", [0x3, 0x6]}) 3.086246075s ago: executing program 4 (id=3133): syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a15"], 0x0) r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x7, &(0x7f00000000c0)={0x0, 0x3238, 0x488, 0xffffffff, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x438}, 0x0, 0x12f4c472b764a25e, 0x1}) io_uring_enter(r1, 0x3516, 0xa00100, 0x0, 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x9, 0x4) 2.582657511s ago: executing program 5 (id=3134): syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x20, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a5401, 0x0) r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x67}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x351a, 0x100, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900, 0x0, 0xfffffffe}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000ffff2cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2911000020100000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="08001b00", @ANYRES32, @ANYBLOB="050011"], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x40040) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000000000005) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xd, r10, 0x20000000002, &(0x7f0000000040)) 2.265853547s ago: executing program 3 (id=3136): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000300)={0x2, r1, 0x7ffffff4, 0x101, 0x3, 0x97e8, 0x10000, 0xfff, 0xba3}) 2.120988242s ago: executing program 3 (id=3137): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000dab21842001000010000100000000000000000000a20000000000a01020000000000000000030000000900010073797a30000000001c0000000000060000000008000240000003000000000000000000030000000900010073797a30000000000400048008000b40000000031400000011000100000000000000000000000a0000000000000000"], 0x90}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x21) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000030c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) r3 = epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) epoll_pwait(r3, &(0x7f0000000540)=[{}], 0x1, 0x7, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000001340), 0x1, 0x2) userfaultfd(0x80801) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000013c0)=@fd={0x7, 0xe, 0x4, 0x2000, 0x27, {0x77359400}, {0x1, 0xc, 0x0, 0xb2, 0x5, 0xf7, "230b6991"}, 0x7ff, 0x4, {}, 0x2}) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x4008880) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x1b, 0x80, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0x1}}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 2.00800153s ago: executing program 1 (id=3138): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x24008004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x782, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x2, 0x3, 0x34325842, 0x1, 0x200, 0x9, 0xc, 0x8001, 0x0, 0x0, 0x1, 0x5}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101201) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000440)={0x6f15}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="f3650f20def3642e366bd97f660ffcfabad104b80800efbaf80c66b8c373c78366efbafc0cb06deebaf80c66b868d7e58166efbafc0ced0d7cb9ba420066ed0f20c06635000001000f22c0d24700", 0x4e}], 0x1, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.910662914s ago: executing program 3 (id=3139): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8241, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x7d, &(0x7f0000001080)={0x8, 0x7f, 0x201, 0x80010, 0x39c1, 0xb, 0x0, 0xa}, &(0x7f0000000840)=0x20) r3 = syz_io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x0, 0x40, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x4b, 0x6000, @fd_index=0x7, 0x1000, &(0x7f00000000c0)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="2ddc9396e362f1f1be12c3d06989572d45c134458911bde867f649388d1d0abb00acd99c29c343ce79418be5316f906e6c41ed895fcbb956f2ce99e8a7117c335a28d4d0baa5c35397e5746c0b98b0371797214510b64245ec9a6762f425a011527b1caa9cc190f5cf48e5bdfde80fae9b78154788d93bf0c7d34ecbf7cc75cefd63deb72e84448319d5c382c84030363239c6", 0x93}], 0x2, 0x4, 0x1, {0x3, r6}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1380, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x121002, 0x0) sendfile(r7, r7, &(0x7f0000000500)=0xffffefdfbffffff4, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x104) syz_fuse_handle_req(r8, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x60, 0x0, 0x4, {{0x3, 0x557e, 0x4381, 0x40, 0x7, 0x9, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x201, 0x4800003e, r10, 0x0) syz_usb_disconnect(r0) 1.698762779s ago: executing program 1 (id=3140): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0xff000000}}], 0x1, 0x10) 1.599866899s ago: executing program 2 (id=3141): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x64}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000dc00156bd69d562c7bf09dd02561cdf906000000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000400)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) rmdir(0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$vim2m(0x0, 0x3, 0x2) r4 = dup(r3) renameat2(r4, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0) fsopen(&(0x7f0000000140)='ocfs2\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/50, 0x32}, {&(0x7f0000000380)=""/100, 0x64}, {0x0}], 0x3, &(0x7f00000004c0)=""/84, 0x54}, 0x40000100) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000440)=ANY=[@ANYBLOB="0417e9b06a6f693de935fa490084", @ANYRESDEC=r0], 0xe, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) 1.589048261s ago: executing program 1 (id=3142): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r0, @ANYBLOB="00082dbd7000fcdbdf250900000034000380080003000000000008000200dc02000008000200feffffff08000100010000000800010000080000080003000300000094000180388004001400010002004e21e00000010000000000000000200002000a004e2200000009fe8000000000000000000000000000aa000200000d0001007564703a73797a31000000000d0001007564703a73797a3200000000380004001400010002004e22e00000010000000000000000200002000a004e2100000005ff01000000000000000000000000000100000100"], 0xdc}}, 0x11) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r3 = socket$inet(0x2, 0x803, 0x3) getsockopt(r3, 0xff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x2c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x625, @private1, 0x10001}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000500)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f00000005c0)={r8, @in6={{0xa, 0x4e22, 0xaf6a, @empty, 0x1ff}}}, 0x84) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r9 = epoll_create1(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r10, 0x403, 0x0) syz_clone3(&(0x7f0000000100)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f00000001c0)) wait4(0x0, 0x0, 0x40000000, 0x0) memfd_create(&(0x7f0000000200)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x3) 1.564265861s ago: executing program 4 (id=3143): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1, 0x110, r1, 0xffffa000) recvmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xd9}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a010200000000000000000100f0ff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001"], 0xe8}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r3, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x4000, 0x1, 0x44}, &(0x7f0000000540)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x6400, &(0x7f0000000380)={0x0, 0x97db, 0x20, 0xfffffffe, 0xaa}, &(0x7f0000000180)=0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0x1}, {0x10, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000000c0), 0x0, 0x8800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0xc0, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x12, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="b17cb86aa08216e21f99ba7a970a21274da4fdd1e4135cb8df5cb995f04525d01c3e088ea283b097c3cf7e4a17e342f911cd9a9173e945b5abc7f32f636c867dc5420f6776ccdfb757ff2ee6f047078f53483cbe10723da6dfab5496b876beb707821638fc22947461983f11093395a0236e84558ba4de7b9bde52d8bd3c9e178c07054a84de116d5bd1a89fd7cb5455507f870f2f1d1d7be0552a4a0a34e0745f15f2029ace68c0ff032e79582df58c567c0f7ff58c", 0xb6, 0x1, 0x0, {0x0, r10}}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x208000}) 1.192523418s ago: executing program 1 (id=3144): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 1.118631868s ago: executing program 1 (id=3145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/187, 0xbb}], 0x6}, 0x9}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/10, 0xa}, {&(0x7f0000000700)=""/8, 0x8}], 0x2}, 0x9}, {{&(0x7f0000000780)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000d40)=""/60, 0x3c}, 0x9}, {{&(0x7f0000000d80)=@nfc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/151, 0x97}, {&(0x7f0000000ec0)=""/54, 0x36}], 0x2}, 0x1000000}, {{&(0x7f0000000f40)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000fc0)=""/236, 0xec}, {&(0x7f00000010c0)=""/190, 0xbe}, {&(0x7f0000001180)=""/252, 0xfc}, {&(0x7f0000001280)=""/88, 0x58}, {&(0x7f0000000800)=""/206, 0xce}], 0x5}, 0x6}, {{&(0x7f0000001440)=@rc={0x1f, @none}, 0x80, &(0x7f00000014c0), 0x0, &(0x7f0000001500)=""/201, 0xc9}, 0x80000000}], 0x6, 0x60012120, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='\xe4\xadMy\x05G\xbaf\xe4\x06\x8cX%', &(0x7f0000000180)='\xb7BD,\xe2Hq\x9c_:\x93\xf2\xfd\xc7\x18\x0fP#\xc78Q1\xaf\x9b\xd0\x11T\xb3G\xbe+\xd9\xf9#\xa3\xc1\xd6\x98\v\\\x95\xb9\x06J[\xbf\xd0v&\xf7]', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000480)='\x98', &(0x7f00000005c0)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oGr1}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0x5}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xfffffffe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x3, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0xfffffffc, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x800009, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000008, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x400003], [0x7, 0x40c, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0xb, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x40000005, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x0, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x5, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x5, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x80005, 0x937, 0x6, 0x6, 0x0, 0xb9, 0x4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000c40)={0x2000000b}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x1f0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x6, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r8, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) mq_timedreceive(r7, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) 223.273639ms ago: executing program 4 (id=3147): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, r1, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000300)={0x2, r1, 0x7ffffff4, 0x101, 0x3, 0x97e8, 0x10000, 0xfff, 0xba3}) 156.535516ms ago: executing program 1 (id=3148): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x1, [0x2, 0x2000005f, 0x0, 0x9, 0x10, 0x2000000000c0], 0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=0x0]}, 0x79) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_timeval(r2, 0x1, 0x32, &(0x7f0000000000)={0x77359400}, 0x10) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000001400)={0x1, @win={{0xd, 0x8, 0xbb, 0x200}, 0x4, 0x9, 0x0, 0xffffffa3, 0x0, 0x1}}) (async) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x6, 0xe, 0x7ffffffe}]}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010400654b142010400037105590009058200004000"/39, @ANYBLOB="16c9eecf0486432d459b70f631d84c2a1a58f5af628d0c156fb306474a15724efefbae6ce46d8907b5a65fda64c767b192766026bb596e73707552153af5c5b5b549fedab7b2a37c027212368980b9f91629d2eea835053f8ce5dd741b238276fc9410e94a912dfe782496c4e64572e37a91edc559225dd13685f1dc1aa108f2f39b18acca86b93067511e0a1cfef5a59cddf5de8c1c2e7eef9960f0588367820c6c3386239ab91cb6e90e989da364c053e1c52f71c82b6aeae6d16e6349a840e2a3754f6d2feceb3e618f08a743e6155b3e6b9a118e5734e7948aeddaa631414a02e451"], 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f00000007c0)={{}, 0xfe}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x3776b250, 0x0, '\x00', {0x0, @bt={0xa, 0x7fffffff, 0x0, 0x0, 0x2, 0x1, 0x8, 0x0, 0x1, 0x9, 0xfffffff8, 0x7, 0x7fff, 0x7, 0x10, 0x20, {0x6, 0x8000}, 0xa, 0x8}}}) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 138.551417ms ago: executing program 4 (id=3149): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e00030000000300000005000700080000005fb6465337590775be641b10308106b31a6b4d5f8b5b085961e39f6b21d5b50e024bd4507641ce05be2fa64fd72abda58b9a54fb136453e4fc1efe643ef454917a6f4184a547d8069805031deedfd8e74f82e5c76710"], 0x48}, 0xfffe, 0x0, 0x0, 0x200400c0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x1f30}}, './file0\x00'}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x14) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000100)=[{0x34, '\x00', @st={0x4, [{0x2, @uvalue=0x1000}, {0x1, @svalue=0x3}, {0x1, @uvalue=0x56}, {0x3, @uvalue=0x4}]}, 0xfd}, {0x24, '\x00', @data=0x800, 0x5}]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast2, 0x47f40b73}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf, @private0, 0x3}}}, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x1c, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r9, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x24044804) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r10, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 0s ago: executing program 3 (id=3150): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) (async) socket(0xa, 0x3, 0x3a) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008200000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async, rerun: 32) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) (rerun: 32) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{0x0}], 0x1) (async, rerun: 32) r5 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000000c0)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e000"], 0x57) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): atadv_slave_0 (retrying later): interface not active [ 841.546521][T14825] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 841.555757][T14825] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 841.566370][T14825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 841.579228][T16862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.586590][T14825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 841.599396][T16862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.627953][T14825] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 841.640861][T16862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.653314][T14825] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 841.662764][T14825] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 841.680579][T14825] usb 5-1: Product: syz [ 841.686449][T14825] usb 5-1: Manufacturer: syz [ 841.691387][ T5912] m920x_read = error: -19 [ 841.696277][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 841.732876][T14825] cdc_wdm 5-1:1.0: skipping garbage [ 841.746101][T14825] cdc_wdm 5-1:1.0: skipping garbage [ 841.767224][T14825] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 841.776649][T14825] cdc_wdm 5-1:1.0: Unknown control protocol [ 841.860670][T14825] m920x_read = error: -19 [ 841.907627][T14825] dvb-usb: error -19 while querying for an remote control event. [ 842.001566][ C0] wdm_int_callback: 55 callbacks suppressed [ 842.001597][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 842.014185][ C0] wdm_int_callback: 55 callbacks suppressed [ 842.014215][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 842.027552][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 842.034394][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 842.041569][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 842.048236][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 842.055327][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 842.061981][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 842.068994][T14825] usb 5-1: USB disconnect, device number 39 [ 842.075366][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 842.075397][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 842.075418][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 842.130011][ T5898] m920x_read = error: -19 [ 842.134509][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 842.162447][T16784] bridge_slave_1: left allmulticast mode [ 842.177567][T16957] netlink: 264 bytes leftover after parsing attributes in process `syz.5.2935'. [ 842.187687][T16784] bridge_slave_1: left promiscuous mode [ 842.203497][T16784] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.221216][T16784] bridge_slave_0: left allmulticast mode [ 842.227166][T16784] bridge_slave_0: left promiscuous mode [ 842.234064][T16784] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.310467][ T5898] m920x_read = error: -19 [ 842.319332][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 842.453271][T16784] bond1 (unregistering): (slave gretap1): Releasing active interface [ 842.508112][T14825] m920x_read = error: -19 [ 842.512721][T14825] dvb-usb: error -19 while querying for an remote control event. [ 842.679702][T14825] m920x_read = error: -19 [ 842.684366][T14825] dvb-usb: error -19 while querying for an remote control event. [ 842.701141][T16784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.716015][T16784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.726497][T16784] bond0 (unregistering): Released all slaves [ 842.738055][T16784] bond1 (unregistering): Released all slaves [ 842.754008][T16784] bond2 (unregistering): Released all slaves [ 842.781177][T16862] hsr_slave_0: entered promiscuous mode [ 842.788069][T16862] hsr_slave_1: entered promiscuous mode [ 842.795141][T16862] debugfs: 'hsr0' already exists in 'hsr' [ 842.801082][T16862] Cannot create hsr debugfs directory [ 842.849984][ T5912] m920x_read = error: -19 [ 842.854422][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 843.019773][ T5912] m920x_read = error: -19 [ 843.024196][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 843.058379][T16784] tipc: Left network mode [ 843.132049][T16784] IPVS: stopping master sync thread 10859 ... [ 843.240002][T14825] m920x_read = error: -19 [ 843.244596][T14825] dvb-usb: error -19 while querying for an remote control event. [ 843.425999][ T30] audit: type=1326 audit(1771245934.323:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 843.479923][ T5912] m920x_read = error: -19 [ 843.484338][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 843.489864][ T30] audit: type=1326 audit(1771245934.323:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 843.544563][ T30] audit: type=1326 audit(1771245934.323:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 843.659608][T14825] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 843.680719][ T30] audit: type=1326 audit(1771245934.323:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 843.712933][ T5913] m920x_read = error: -19 [ 843.717349][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 843.769895][ T30] audit: type=1326 audit(1771245934.333:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 843.795528][ T30] audit: type=1326 audit(1771245934.333:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f158939bce2 code=0x7ffc0000 [ 843.830742][ T30] audit: type=1326 audit(1771245934.333:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f158939bce2 code=0x7ffc0000 [ 843.854262][ T30] audit: type=1326 audit(1771245934.333:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 843.980863][ T5913] m920x_read = error: -19 [ 843.985335][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 844.038426][T14825] usb 3-1: New USB device found, idVendor=f283, idProduct=1233, bcdDevice=ff.76 [ 844.048442][T16974] syzkaller0: entered promiscuous mode [ 844.200377][T14825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 844.221225][ T30] audit: type=1326 audit(1771245934.333:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 844.241005][T16974] syzkaller0: entered allmulticast mode [ 844.290495][T14825] usb 3-1: Product: syz [ 844.298442][T14825] usb 3-1: Manufacturer: syz [ 844.313890][T14825] usb 3-1: SerialNumber: syz [ 844.335187][ T30] audit: type=1326 audit(1771245934.333:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16967 comm="syz.4.2937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f158939bf79 code=0x7ffc0000 [ 844.362180][ T5898] m920x_read = error: -19 [ 844.366813][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 844.410973][T14825] usb 3-1: config 0 descriptor?? [ 844.579716][T14825] m920x_read = error: -19 [ 844.586664][T14825] dvb-usb: error -19 while querying for an remote control event. [ 844.792009][ T5912] m920x_read = error: -19 [ 844.796499][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 844.969854][ T5912] m920x_read = error: -19 [ 844.974440][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 844.996527][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.022031][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.159732][ T5912] m920x_read = error: -19 [ 845.164176][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 845.333395][ T5912] m920x_read = error: -19 [ 845.337901][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 845.503023][ T5912] m920x_read = error: -19 [ 845.510009][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 845.685523][ T5912] m920x_read = error: -19 [ 845.709900][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 845.891810][ T5912] m920x_read = error: -19 [ 845.896430][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 845.959728][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 846.073427][T14825] m920x_read = error: -19 [ 846.077880][T14825] dvb-usb: error -19 while querying for an remote control event. [ 846.109698][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 846.122614][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.146165][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.186248][ T29] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 846.205837][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.217499][ T29] usb 5-1: config 0 descriptor?? [ 846.256167][ T5912] m920x_read = error: -19 [ 846.261232][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 846.285310][ T24] usb 3-1: USB disconnect, device number 46 [ 846.421190][ T5912] m920x_read = error: -19 [ 846.425640][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 846.592152][ T5912] m920x_read = error: -19 [ 846.596657][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 846.692568][ T29] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 846.720501][ T29] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 846.727897][ T29] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 846.764492][ T5912] m920x_read = error: -19 [ 846.769030][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 846.772619][ T29] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 846.846418][ T29] cm6533_jd 0003:0D8C:0022.0029: unknown main item tag 0x0 [ 846.899957][ T29] cm6533_jd 0003:0D8C:0022.0029: hiddev0,hidraw0: USB HID va6.05 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 846.940095][ T5912] m920x_read = error: -19 [ 846.944550][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 846.967814][ T29] usb 5-1: USB disconnect, device number 40 [ 847.055517][T17034] fido_id[17034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 847.111980][ T5912] m920x_read = error: -19 [ 847.116404][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 847.326284][ T5912] m920x_read = error: -19 [ 847.340727][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 847.529771][ T5912] m920x_read = error: -19 [ 847.534188][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 847.704153][ T5912] m920x_read = error: -19 [ 847.708760][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 847.879688][ T5912] m920x_read = error: -19 [ 847.884217][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 848.045156][ T5912] m920x_read = error: -19 [ 848.049945][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 848.138208][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2951'. [ 848.212100][ T5912] m920x_read = error: -19 [ 848.216491][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 848.382408][ T5912] m920x_read = error: -19 [ 848.386882][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 848.556071][ T5912] m920x_read = error: -19 [ 848.560908][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 848.727527][ T5912] m920x_read = error: -19 [ 848.732755][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 848.905858][ T5912] m920x_read = error: -19 [ 848.910811][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 849.118464][ T5912] m920x_read = error: -19 [ 849.538219][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 849.720609][ T5912] m920x_read = error: -19 [ 849.725047][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 849.899762][ T5912] m920x_read = error: -19 [ 849.904236][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 850.062970][T17027] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2946'. [ 850.072613][T17026] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2946'. [ 850.082006][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2951'. [ 850.093531][ T5912] m920x_read = error: -19 [ 850.097915][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 850.300875][ T5912] m920x_read = error: -19 [ 850.305887][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 850.405970][T16784] hsr_slave_0: left promiscuous mode [ 850.417622][T16784] hsr_slave_1: left promiscuous mode [ 850.423407][ T797] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 850.434264][T16784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.440704][T14825] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 850.450822][T16784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.459278][T16784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.479159][T16784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.489716][ T5912] m920x_read = error: -19 [ 850.494723][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 850.512213][T16784] veth1_macvtap: left promiscuous mode [ 850.517940][T16784] veth0_macvtap: left promiscuous mode [ 850.599688][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 850.601160][T14825] usb 3-1: Using ep0 maxpacket: 8 [ 850.613996][ T797] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 850.623932][T14825] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 850.631135][ T797] usb 4-1: config 2 has no interface number 0 [ 850.644950][ T797] usb 4-1: config 2 interface 31 has no altsetting 0 [ 850.655107][T14825] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.665595][ T797] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 850.675275][ T5898] m920x_read = error: -19 [ 850.684228][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.693088][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 850.705024][T17088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.712899][T17088] IPv6: NLM_F_CREATE should be set when creating new route [ 850.715156][T14825] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.736524][ T797] usb 4-1: Product: syz [ 850.752659][ T797] usb 4-1: Manufacturer: syz [ 850.757488][T14825] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 850.766438][ T797] usb 4-1: SerialNumber: syz [ 850.787375][T14825] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 850.824865][T14825] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 850.835083][T14825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.858192][T16784] team0 (unregistering): Port device batadv1 removed [ 850.890010][ T5898] m920x_read = error: -19 [ 850.894519][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 850.964533][T16784] pimreg (unregistering): left allmulticast mode [ 851.071650][ T5898] m920x_read = error: -19 [ 851.076439][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 851.138960][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 851.139006][ T30] audit: type=1400 audit(1771245942.043:1101): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=17072 comm="syz.2.2958" [ 851.139222][T14825] usb 3-1: usb_control_msg returned -32 [ 851.332476][ T5898] m920x_read = error: -19 [ 851.338497][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 851.357931][T14825] usbtmc 3-1:16.0: can't read capabilities [ 851.411482][T16784] team0 (unregistering): Port device team_slave_1 removed [ 851.442373][T16784] team0 (unregistering): Port device team_slave_0 removed [ 851.501622][T17073] ptrace attach of "./syz-executor exec"[5841] was attempted by " \x22O\x0b\x09 \x0c}k`'\x0bs68R.UdY\x0cH] `shX˰fo>(AKfZNq.*&c9!\x07&kړwm$\x22.溮sȬo!Nʬ^LN}H\x5cQYv n/Ɠ';Y=Hfhej~6>'$;\x0c+[xԕN$0xտh# \x0aC    B'oX, ۼ?x抱&P[ 4t\x09U\x0a6֏sЗe?aO_~\x09`2'cCLjמեUjҺO'ZB#\x07f\x0d!w#'y[$.?+9%bܷY;4w\x1bNN   , @ ( V/dqI#{)\x0a]y&{R\x095yUTG4!~\x0dN\x22YLd2JE6\x1bP沲OuF$U [ 851.509703][T14825] m920x_read = error: -19 [ 851.622837][T14825] dvb-usb: error -19 while querying for an remote control event. [ 851.643802][ T797] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 851.674872][ T797] usb 4-1: USB disconnect, device number 36 [ 851.800126][T14825] m920x_read = error: -19 [ 851.804520][T14825] dvb-usb: error -19 while querying for an remote control event. [ 851.921526][T17097] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 851.979964][T14825] m920x_read = error: -19 [ 851.985023][T14825] dvb-usb: error -19 while querying for an remote control event. [ 852.108735][T14825] usb 3-1: USB disconnect, device number 47 [ 852.161076][ T5898] m920x_read = error: -19 [ 852.165621][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 852.349685][T14825] m920x_read = error: -19 [ 852.354102][T14825] dvb-usb: error -19 while querying for an remote control event. [ 852.530524][T14825] m920x_read = error: -19 [ 852.535154][T14825] dvb-usb: error -19 while querying for an remote control event. [ 852.747496][T14825] m920x_read = error: -19 [ 852.755393][T17111] syzkaller0: entered promiscuous mode [ 852.822639][T17111] syzkaller0: entered allmulticast mode [ 852.844573][T14825] dvb-usb: error -19 while querying for an remote control event. [ 853.041298][T14825] m920x_read = error: -19 [ 853.047684][T14825] dvb-usb: error -19 while querying for an remote control event. [ 853.066781][T16784] IPVS: stop unused estimator thread 0... [ 853.299997][T14825] m920x_read = error: -19 [ 853.304597][T14825] dvb-usb: error -19 while querying for an remote control event. [ 853.364633][T16862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 853.401470][T17124] netlink: 264 bytes leftover after parsing attributes in process `syz.5.2968'. [ 853.450276][T16862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 853.499814][T16862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 853.588342][T16862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 853.599995][T14825] m920x_read = error: -19 [ 853.604428][T14825] dvb-usb: error -19 while querying for an remote control event. [ 853.819260][T14825] m920x_read = error: -19 [ 853.826682][T14825] dvb-usb: error -19 while querying for an remote control event. [ 853.904278][T17137] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 853.957197][T17137] openvswitch: netlink: Message has 16 unknown bytes. [ 854.021535][T17137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 854.040143][T17137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2969'. [ 854.061397][ T29] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 854.109712][ T5912] m920x_read = error: -19 [ 854.114129][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 854.248634][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 854.275426][ T29] usb 6-1: config 222 has an invalid interface number: 31 but max is 0 [ 854.284183][ T29] usb 6-1: config 222 has no interface number 0 [ 854.308848][ T29] usb 6-1: config 222 interface 31 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 854.335792][ T29] usb 6-1: config 222 interface 31 has no altsetting 0 [ 854.368225][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 854.380218][ T5912] m920x_read = error: -19 [ 854.384626][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 854.402998][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.419874][ T29] usb 6-1: Product: syz [ 854.425401][ T29] usb 6-1: Manufacturer: syz [ 854.510601][ T29] usb 6-1: SerialNumber: syz [ 854.540971][T17135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 854.601709][ T5912] m920x_read = error: -19 [ 854.606122][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 854.686349][T16862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.810207][ T5912] m920x_read = error: -19 [ 854.814671][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 854.845251][T16862] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.962473][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.969699][ T8534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.015564][T16784] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.022812][T16784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.046369][T14825] m920x_read = error: -19 [ 855.063420][T14825] dvb-usb: error -19 while querying for an remote control event. [ 855.250402][ T5912] m920x_read = error: -19 [ 855.255048][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 855.450149][T14825] m920x_read = error: -19 [ 855.459843][T14825] dvb-usb: error -19 while querying for an remote control event. [ 855.468003][T16862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.607712][T16862] veth0_vlan: entered promiscuous mode [ 855.668321][T16862] veth1_vlan: entered promiscuous mode [ 855.680476][ T5912] m920x_read = error: -19 [ 855.694196][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 855.873335][T16862] veth0_macvtap: entered promiscuous mode [ 855.889752][ T5912] m920x_read = error: -19 [ 855.895486][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 855.933957][T16862] veth1_macvtap: entered promiscuous mode [ 856.090164][T14825] m920x_read = error: -19 [ 856.092522][T16862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.096176][T14825] dvb-usb: error -19 while querying for an remote control event. [ 856.167959][T17176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'. [ 856.260785][T16862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.313176][T14825] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 856.326947][ T5898] m920x_read = error: -19 [ 856.334623][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 856.367248][ T108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.406959][ T8534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.440868][ T8534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.483331][ T8534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.492232][T14825] usb 5-1: Using ep0 maxpacket: 8 [ 856.505698][T14825] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 856.531375][T14825] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.542323][ T5898] m920x_read = error: -19 [ 856.546744][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 856.574755][T14825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 856.616062][T14825] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 856.686434][T14825] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.828142][ T5898] m920x_read = error: -19 [ 856.834672][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 856.844768][T14825] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 856.868401][T14825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.049801][ T5912] m920x_read = error: -19 [ 857.057049][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 857.265861][ T5898] m920x_read = error: -19 [ 857.290142][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 857.357339][ T8532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.375895][T14825] usb 5-1: usb_control_msg returned -32 [ 857.398103][ T30] audit: type=1400 audit(1771245948.303:1102): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=17170 comm="syz.4.2976" [ 857.430355][T14825] usbtmc 5-1:16.0: can't read capabilities [ 857.446709][ T8532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.502128][ T5898] m920x_read = error: -19 [ 857.506538][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 857.603589][ T29] ldusb 6-1:222.31: Interrupt out endpoint not found (using control endpoint instead) [ 857.628483][ T29] ldusb 6-1:222.31: LD USB Device #1 now attached to major 180 minor 1 [ 857.676738][T16784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.693872][ T29] usb 6-1: USB disconnect, device number 70 [ 857.740161][T16784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.742749][ T5912] m920x_read = error: -19 [ 857.758174][T17190] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2979'. [ 857.770542][ T29] ldusb 6-1:222.31: LD USB Device #1 now disconnected [ 857.800256][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 857.824045][T17171] ptrace attach of "./syz-executor exec"[5838] was attempted by " \x22O\x0b\x09 \x0c}k`'\x0bs68R.UdY\x0cH] `shX˰fo>(AKfZNq.*&c9!\x07&kړwm$\x22.溮sȬo!Nʬ^LN}H\x5cQYv n/Ɠ';Y=Hfhej~6>'$;\x0c+[xԕN$0xտh# \x0aC    B'oX, ۼ?x抱&P[ 4t\x09U\x0a6֏sЗe?aO_~\x09`2'cCLjמեUjҺO'ZB#\x07f\x0d!w#'y[$.?+9%bܷY;4w\x1bNN   , @ ( V/dqI#{)\x0a]y&{R\x095yUTG4!~\x0dN\x22YLd2JE6\x1bP沲OuF$U [ 857.960167][ T5912] m920x_read = error: -19 [ 858.163419][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 858.240502][T17193] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 858.329826][ T5912] m920x_read = error: -19 [ 858.334236][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 858.422585][ T5912] usb 5-1: USB disconnect, device number 41 [ 858.510039][ T5898] m920x_read = error: -19 [ 858.514555][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 858.772044][ T5898] m920x_read = error: -19 [ 858.778432][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 858.950389][ T5898] m920x_read = error: -19 [ 858.954809][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 859.169630][ T5898] m920x_read = error: -19 [ 859.192494][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 859.400160][ T5898] m920x_read = error: -19 [ 859.430473][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 859.590104][ T5898] m920x_read = error: -19 [ 859.594527][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 859.694911][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 859.707442][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 859.717601][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 859.725897][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 859.733808][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.792385][ T5898] m920x_read = error: -19 [ 859.796904][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 859.963930][ T5898] m920x_read = error: -19 [ 859.968347][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 860.075773][T17241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2990'. [ 860.209985][T14825] m920x_read = error: -19 [ 860.214553][T14825] dvb-usb: error -19 while querying for an remote control event. [ 860.429677][T14825] m920x_read = error: -19 [ 860.434211][T14825] dvb-usb: error -19 while querying for an remote control event. [ 860.616367][T14825] m920x_read = error: -19 [ 860.626420][T14825] dvb-usb: error -19 while querying for an remote control event. [ 860.857578][T14825] m920x_read = error: -19 [ 860.869620][T14825] dvb-usb: error -19 while querying for an remote control event. [ 860.877478][ T30] audit: type=1800 audit(1771245951.723:1103): pid=17253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2991" name="file0" dev="fuse" ino=3 res=0 errno=0 [ 861.075045][T17238] chnl_net:caif_netlink_parms(): no params data found [ 861.101434][T14825] m920x_read = error: -19 [ 861.118430][T14825] dvb-usb: error -19 while querying for an remote control event. [ 861.180126][ T29] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 861.299799][T14825] m920x_read = error: -19 [ 861.304395][T14825] dvb-usb: error -19 while querying for an remote control event. [ 861.440951][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 861.453526][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.471576][T14825] m920x_read = error: -19 [ 861.480429][T14825] dvb-usb: error -19 while querying for an remote control event. [ 861.499336][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.530974][T17238] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.544458][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 861.564991][T17238] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.584716][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.593747][T17238] bridge_slave_0: entered allmulticast mode [ 861.616961][ T29] usb 2-1: config 0 descriptor?? [ 861.624769][T17238] bridge_slave_0: entered promiscuous mode [ 861.641550][ T29] hub 2-1:0.0: USB hub found [ 861.652871][T17238] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.661284][T14825] m920x_read = error: -19 [ 861.671551][T17238] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.679423][T17238] bridge_slave_1: entered allmulticast mode [ 861.689832][T14825] dvb-usb: error -19 while querying for an remote control event. [ 861.718843][T17238] bridge_slave_1: entered promiscuous mode [ 861.830075][ T5834] Bluetooth: hci1: command tx timeout [ 861.839007][ T29] hub 2-1:0.0: 1 port detected [ 861.869665][T14825] m920x_read = error: -19 [ 861.874080][T14825] dvb-usb: error -19 while querying for an remote control event. [ 861.958004][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 861.992174][T17238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.013714][T17268] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2995'. [ 862.041414][T14825] m920x_read = error: -19 [ 862.045020][ T29] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 862.045821][T14825] dvb-usb: error -19 while querying for an remote control event. [ 862.070030][ T29] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 862.088211][T17238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.109464][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 862.128367][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 862.152659][T17267] cgroup: fork rejected by pids controller in /syz2 [ 862.190597][ T29] usb 2-1: USB disconnect, device number 12 [ 862.238677][T17238] team0: Port device team_slave_0 added [ 862.250240][T14825] m920x_read = error: -19 [ 862.266875][T14825] dvb-usb: error -19 while querying for an remote control event. [ 862.288256][T17238] team0: Port device team_slave_1 added [ 862.377759][T17238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.393018][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.451602][T14825] m920x_read = error: -19 [ 862.460952][T14825] dvb-usb: error -19 while querying for an remote control event. [ 862.608518][T17238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.640733][ T5912] m920x_read = error: -19 [ 862.648299][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 862.661028][T17238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.668025][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.713167][T14825] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 862.747100][T17238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.849987][ T5898] m920x_read = error: -19 [ 862.854506][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 862.909918][T14825] usb 4-1: Using ep0 maxpacket: 32 [ 862.919253][T14825] usb 4-1: unable to get BOS descriptor or descriptor too short [ 862.952089][T14825] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 862.960661][T17880] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3000'. [ 862.965809][T14825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.003412][T17238] hsr_slave_0: entered promiscuous mode [ 863.023250][ T5898] m920x_read = error: -19 [ 863.027671][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 863.037082][T14825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 863.055598][T17238] hsr_slave_1: entered promiscuous mode [ 863.066457][T17238] debugfs: 'hsr0' already exists in 'hsr' [ 863.072697][T14825] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 863.082562][T14825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.091457][T17238] Cannot create hsr debugfs directory [ 863.098626][T14825] usb 4-1: Product: syz [ 863.117394][T14825] usb 4-1: Manufacturer: syz [ 863.137702][T14825] usb 4-1: SerialNumber: syz [ 863.169677][ T6444] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 863.219779][ T5898] m920x_read = error: -19 [ 863.224331][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 863.341420][ T6444] usb 6-1: Using ep0 maxpacket: 32 [ 863.372480][ T6444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.388526][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.397861][ T5912] m920x_read = error: -19 [ 863.402444][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 863.411541][ T6444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.440115][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.442275][ T6444] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 863.489398][ T6444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.524630][ T6444] usb 6-1: config 0 descriptor?? [ 863.536781][T14825] usb 4-1: 0:2 : does not exist [ 863.610128][ T5898] m920x_read = error: -19 [ 863.614567][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 863.689663][T14825] usb 4-1: USB disconnect, device number 37 [ 863.859667][ T5898] m920x_read = error: -19 [ 863.877974][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 863.919773][ T5834] Bluetooth: hci1: command tx timeout [ 863.948925][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.152136][T14825] m920x_read = error: -19 [ 864.166779][T14825] dvb-usb: error -19 while querying for an remote control event. [ 864.196520][ T6444] savu 0003:1E7D:2D5A.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 864.297995][ T6444] usb 6-1: USB disconnect, device number 71 [ 864.349702][T14825] m920x_read = error: -19 [ 864.360190][T14825] dvb-usb: error -19 while querying for an remote control event. [ 864.421488][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3003'. [ 864.499443][T17888] fido_id[17888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 864.587333][T14825] m920x_read = error: -19 [ 864.601591][T14825] dvb-usb: error -19 while querying for an remote control event. [ 864.621780][T17238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 864.874091][T14825] m920x_read = error: -19 [ 864.888044][T14825] dvb-usb: error -19 while querying for an remote control event. [ 864.940825][T17238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 865.072156][T14825] m920x_read = error: -19 [ 865.095098][T14825] dvb-usb: error -19 while querying for an remote control event. [ 865.123060][T17238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 865.270404][T14825] m920x_read = error: -19 [ 865.274827][T14825] dvb-usb: error -19 while querying for an remote control event. [ 865.450023][T14825] m920x_read = error: -19 [ 865.454439][T14825] dvb-usb: error -19 while querying for an remote control event. [ 865.622283][T17903] netlink: 'syz.2.3006': attribute type 1 has an invalid length. [ 865.659644][T14825] m920x_read = error: -19 [ 865.664065][T14825] dvb-usb: error -19 while querying for an remote control event. [ 865.744626][T17903] 8021q: adding VLAN 0 to HW filter on device bond5 [ 865.862615][T14825] m920x_read = error: -19 [ 865.891907][T14825] dvb-usb: error -19 while querying for an remote control event. [ 865.976226][T17903] bond5: (slave bridge2): making interface the new active one [ 865.990854][ T5834] Bluetooth: hci1: command tx timeout [ 866.024442][T17903] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 866.079806][ T5898] m920x_read = error: -19 [ 866.084346][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 866.259835][ T5898] m920x_read = error: -19 [ 866.265444][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 866.398045][T17238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 866.439720][T14825] m920x_read = error: -19 [ 866.444175][T14825] dvb-usb: error -19 while querying for an remote control event. [ 866.493371][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 866.558131][T16784] tipc: Subscription rejected, illegal request [ 866.594003][T17915] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3010'. [ 866.603529][T17238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 866.605056][T17917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3009'. [ 866.650605][T17911] fuse: Bad value for 'fd' [ 866.725606][ T5913] m920x_read = error: -19 [ 866.730435][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 866.749462][T17238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 866.768829][ T5898] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 866.787169][ T5898] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 866.818414][T17238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 866.825656][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 866.877510][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 866.908697][ T5913] m920x_read = error: -19 [ 866.923607][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 866.932299][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 866.964876][ T5898] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 867.006777][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 867.015593][ T5898] usb 2-1: Product: syz [ 867.034737][ T5898] usb 2-1: Manufacturer: syz [ 867.054157][ T5898] cdc_wdm 2-1:1.0: skipping garbage [ 867.066398][ T5898] cdc_wdm 2-1:1.0: skipping garbage [ 867.084774][ T5898] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 867.120882][ T5913] m920x_read = error: -19 [ 867.125273][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 867.360065][ T5898] cdc_wdm 2-1:1.0: Unknown control protocol [ 867.389831][ T5898] usb 2-1: USB disconnect, device number 13 [ 867.415820][T17238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.497663][T17238] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.529851][ T5913] m920x_read = error: -19 [ 867.545821][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 867.552324][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.560961][ T8536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.634457][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.641739][ T8536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.731577][ T5898] m920x_read = error: -19 [ 867.735998][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 867.903241][T17238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.922485][T17934] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 867.940270][ T5898] m920x_read = error: -19 [ 867.944855][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 868.027690][T17934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=20 (40 ns) > initial count (16 ns). Using initial count to start timer. [ 868.066935][T17238] veth0_vlan: entered promiscuous mode [ 868.087624][ T5834] Bluetooth: hci1: command tx timeout [ 868.110041][ T5898] m920x_read = error: -19 [ 868.116314][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 868.133412][T17938] kvm: vcpu 0: requested 16 ns lapic timer period limited to 200000 ns [ 868.145900][T17238] veth1_vlan: entered promiscuous mode [ 868.230936][T17938] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 868.341689][ T5898] m920x_read = error: -19 [ 868.346163][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 868.470546][T17238] veth0_macvtap: entered promiscuous mode [ 868.515932][T17238] veth1_macvtap: entered promiscuous mode [ 868.560048][ T5898] m920x_read = error: -19 [ 868.570037][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 868.650310][T17952] veth3: entered promiscuous mode [ 868.677928][T17953] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.739670][ T5898] m920x_read = error: -19 [ 868.744133][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 868.784503][T17958] netlink: 'syz.5.3020': attribute type 10 has an invalid length. [ 868.828860][T17238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.851674][T17958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.865135][T17958] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 868.919139][T17238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.970051][ T5898] m920x_read = error: -19 [ 868.989912][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 869.014293][ T8534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.024250][ T8534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.088320][ T8534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.134358][ T8534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.150111][T17966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3022'. [ 869.150267][ T5898] m920x_read = error: -19 [ 869.210456][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 869.319675][ T5912] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 869.329806][ T8530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.354546][ T8530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.389776][ T5913] m920x_read = error: -19 [ 869.400746][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 869.461712][ T8530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.472636][ T8530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.510073][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 869.532523][ T5912] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.546335][ T5912] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 869.573082][ T5912] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 869.597701][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.609020][ T5913] m920x_read = error: -19 [ 869.615945][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 869.632598][ T5912] usb 6-1: Product: syz [ 869.644902][ T5912] usb 6-1: Manufacturer: syz [ 869.656740][ T5912] usb 6-1: SerialNumber: syz [ 869.799749][T14825] m920x_read = error: -19 [ 869.806162][T14825] dvb-usb: error -19 while querying for an remote control event. [ 869.832686][ T5913] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 869.929558][T17958] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3020'. [ 869.964859][T17958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.982796][T17958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.999217][T14825] m920x_read = error: -19 [ 870.010723][T14825] dvb-usb: error -19 while querying for an remote control event. [ 870.020633][T17958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.036563][ T5913] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 870.056512][T17958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.059718][ T5913] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 870.118552][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 870.144260][T17958] bond0: (slave batadv0): Releasing backup interface [ 870.155899][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 870.190044][T14825] m920x_read = error: -19 [ 870.196909][T14825] dvb-usb: error -19 while querying for an remote control event. [ 870.206442][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 870.255235][ T5913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 870.286988][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 870.306916][ T5913] usb 4-1: Product: syz [ 870.317780][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.324713][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.368387][T13132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 870.380229][T13132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 870.388916][T13132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 870.396122][T14825] m920x_read = error: -19 [ 870.401355][T14825] dvb-usb: error -19 while querying for an remote control event. [ 870.411701][T13132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 870.421934][T13132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 870.430458][ T5913] usb 4-1: Manufacturer: syz [ 870.489903][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 870.495408][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 870.510076][ T5913] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 870.516228][ T5913] cdc_wdm 4-1:1.0: Unknown control protocol [ 870.559957][ T5912] usb 6-1: 0:2 : does not exist [ 870.596796][ T5912] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 870.622098][ T5913] m920x_read = error: -19 [ 870.633079][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 870.731075][ T5912] usb 6-1: USB disconnect, device number 72 [ 870.777644][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 870.779046][ T24] usb 4-1: USB disconnect, device number 38 [ 870.784415][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 870.784442][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 870.854006][T14825] m920x_read = error: -19 [ 870.858426][T14825] dvb-usb: error -19 while querying for an remote control event. [ 870.953673][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.032154][ T5898] m920x_read = error: -19 [ 871.047227][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 871.077426][T17994] syzkaller1: entered promiscuous mode [ 871.089750][T17994] syzkaller1: entered allmulticast mode [ 871.221593][ T5912] m920x_read = error: -19 [ 871.229657][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 871.323250][T18001] syzkaller0: entered promiscuous mode [ 871.339098][T18001] syzkaller0: entered allmulticast mode [ 871.376593][ T30] audit: type=1326 audit(1771245962.283:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18007 comm="syz.5.3034" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b80f9bf79 code=0x0 [ 871.409703][ T5913] m920x_read = error: -19 [ 871.414284][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 871.465323][ T108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.478760][ T108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.582904][ T5912] m920x_read = error: -19 [ 871.587341][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 871.700087][ T5913] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 871.774360][ T5912] m920x_read = error: -19 [ 871.778782][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 871.813683][ T108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.840030][ T108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.885277][ T8530] tipc: Resetting bearer [ 871.891186][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 871.907136][ T5913] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 871.917442][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.952165][ T5913] usb 2-1: config 0 has no interface number 0 [ 871.973145][ T5913] usb 2-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 871.988521][ T5912] m920x_read = error: -19 [ 871.998639][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 872.017954][ T5913] usb 2-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 872.052090][ T5913] usb 2-1: config 0 interface 8 has no altsetting 0 [ 872.060350][ T108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.075550][ T108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.097855][ T5913] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 872.115447][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.129429][ T5913] usb 2-1: Product: syz [ 872.134113][ T5913] usb 2-1: Manufacturer: syz [ 872.161300][ T5913] usb 2-1: SerialNumber: syz [ 872.169605][T18026] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 872.176279][T18026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.197766][ T5913] usb 2-1: config 0 descriptor?? [ 872.203405][ T5912] m920x_read = error: -19 [ 872.207784][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 872.237279][T18026] vhci_hcd vhci_hcd.0: Device attached [ 872.313183][T18033] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(17) [ 872.319876][T18033] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.373811][ T108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.390781][ T108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.402532][T14825] m920x_read = error: -19 [ 872.406964][T14825] dvb-usb: error -19 while querying for an remote control event. [ 872.419658][T18026] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(20) [ 872.426329][T18026] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 872.429885][T18033] vhci_hcd vhci_hcd.0: Device attached [ 872.509963][ T5912] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 872.536040][T18026] vhci_hcd vhci_hcd.0: Device attached [ 872.550592][T13132] Bluetooth: hci4: command tx timeout [ 872.551614][T17985] chnl_net:caif_netlink_parms(): no params data found [ 872.597344][T18046] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 872.604018][T18046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.612647][T14825] m920x_read = error: -19 [ 872.617125][T14825] dvb-usb: error -19 while querying for an remote control event. [ 872.647415][T18033] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(25) [ 872.654088][T18033] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 872.687004][T18046] vhci_hcd vhci_hcd.0: Device attached [ 872.705381][T18026] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(22) [ 872.712077][T18026] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 872.729364][T18033] vhci_hcd vhci_hcd.0: Device attached [ 872.739747][ T24] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 872.784950][T18026] vhci_hcd vhci_hcd.0: Device attached [ 872.800670][T14825] m920x_read = error: -19 [ 872.805162][T14825] dvb-usb: error -19 while querying for an remote control event. [ 872.821154][T18056] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 872.836883][T18033] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 872.871791][T18026] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(29) [ 872.878469][T18026] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 872.904458][ T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 872.921354][T18026] vhci_hcd vhci_hcd.0: Device attached [ 872.928192][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.943743][ T24] usb 5-1: Product: syz [ 872.948460][ T24] usb 5-1: Manufacturer: syz [ 872.957533][ T24] usb 5-1: SerialNumber: syz [ 872.982890][ T24] usb 5-1: config 0 descriptor?? [ 872.990512][ T5898] m920x_read = error: -19 [ 872.994961][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 872.998895][ T24] ch341 5-1:0.0: ch341-uart converter detected [ 873.014579][T18033] vhci_hcd vhci_hcd.0: port 0 already used [ 873.058042][T18047] vhci_hcd: connection closed [ 873.058156][T18038] vhci_hcd: connection closed [ 873.063198][T18034] vhci_hcd: connection closed [ 873.068299][T18030] vhci_hcd: connection reset by peer [ 873.074715][T18052] vhci_hcd: connection closed [ 873.079814][T18050] vhci_hcd: connection closed [ 873.087425][ T8532] vhci_hcd vhci_hcd.3: stop threads [ 873.111206][ T8532] vhci_hcd vhci_hcd.3: release socket [ 873.116947][ T8532] vhci_hcd vhci_hcd.3: disconnect device [ 873.127964][ T8532] vhci_hcd vhci_hcd.3: stop threads [ 873.137475][ T8532] vhci_hcd vhci_hcd.3: release socket [ 873.150455][ T8532] vhci_hcd vhci_hcd.3: disconnect device [ 873.192445][ T5898] m920x_read = error: -19 [ 873.204586][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 873.233950][ T8532] vhci_hcd vhci_hcd.3: stop threads [ 873.239286][ T8532] vhci_hcd vhci_hcd.3: release socket [ 873.246467][T17985] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.248721][ T8532] vhci_hcd vhci_hcd.3: disconnect device [ 873.260994][ T8532] vhci_hcd vhci_hcd.3: stop threads [ 873.264952][T17985] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.276232][T17985] bridge_slave_0: entered allmulticast mode [ 873.278706][ T8532] vhci_hcd vhci_hcd.3: release socket [ 873.294968][T17985] bridge_slave_0: entered promiscuous mode [ 873.301853][ T8532] vhci_hcd vhci_hcd.3: disconnect device [ 873.312915][ T8532] vhci_hcd vhci_hcd.3: stop threads [ 873.318286][ T8532] vhci_hcd vhci_hcd.3: release socket [ 873.328250][ T8532] vhci_hcd vhci_hcd.3: disconnect device [ 873.337025][ T8532] vhci_hcd vhci_hcd.3: stop threads [ 873.342795][ T8532] vhci_hcd vhci_hcd.3: release socket [ 873.348606][ T8532] vhci_hcd vhci_hcd.3: disconnect device [ 873.381002][ T5898] m920x_read = error: -19 [ 873.385468][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 873.589998][ T981] m920x_read = error: -19 [ 873.594477][ T981] dvb-usb: error -19 while querying for an remote control event. [ 873.602937][T18043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.632998][T18043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.770146][ T981] m920x_read = error: -19 [ 873.774597][ T981] dvb-usb: error -19 while querying for an remote control event. [ 873.821536][ T108] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 873.841222][ T24] usb 5-1: failed to send control message: -71 [ 873.853025][ T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 873.880894][ T24] usb 5-1: USB disconnect, device number 42 [ 873.890389][ T24] ch341 5-1:0.0: device disconnected [ 873.969728][ T5898] m920x_read = error: -19 [ 873.974199][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 874.037605][T18058] vhci_hcd: connection closed [ 874.038187][ T8536] vhci_hcd vhci_hcd.3: stop threads [ 874.088490][ T8536] vhci_hcd vhci_hcd.3: release socket [ 874.121424][ T8536] vhci_hcd vhci_hcd.3: disconnect device [ 874.160063][ T5898] m920x_read = error: -19 [ 874.169921][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 874.241548][T18065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3043'. [ 874.340109][ T981] m920x_read = error: -19 [ 874.344636][ T981] dvb-usb: error -19 while querying for an remote control event. [ 874.396581][ T108] bond5 (unregistering): (slave bridge2): Releasing active interface [ 874.477851][ T5913] ath6kl: Failed to submit usb control message: -71 [ 874.495419][ T108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.505368][ T5913] ath6kl: unable to send the bmi data to the device: -71 [ 874.517011][ T5913] ath6kl: Unable to send get target info: -71 [ 874.524967][ T108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.534583][ T5913] ath6kl: Failed to init ath6kl core: -71 [ 874.542354][ T5898] m920x_read = error: -19 [ 874.546767][ T5898] dvb-usb: error -19 while querying for an remote control event. [ 874.561363][ T108] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 874.561585][ T5913] ath6kl_usb 2-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 874.591314][ T5913] usb 2-1: USB disconnect, device number 14 [ 874.616357][ T108] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 874.631896][T13132] Bluetooth: hci4: command tx timeout [ 874.641801][ T108] bond0 (unregistering): Released all slaves [ 874.649771][ T981] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 874.665157][ T108] bond1 (unregistering): Released all slaves [ 874.687195][ T108] bond2 (unregistering): Released all slaves [ 874.700067][T12842] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 874.715529][ T108] bond3 (unregistering): Released all slaves [ 874.731685][T18073] m920x_read = error: -19 [ 874.736236][T18073] dvb-usb: error -19 while querying for an remote control event. [ 874.756521][ T108] bond4 (unregistering): Released all slaves [ 874.773098][ T108] bond5 (unregistering): Released all slaves [ 874.793760][T17985] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.801180][T17985] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.809096][T17985] bridge_slave_1: entered allmulticast mode [ 874.817908][T17985] bridge_slave_1: entered promiscuous mode [ 874.833098][ T981] usb 6-1: descriptor type invalid, skip [ 874.839008][ T981] usb 6-1: descriptor type invalid, skip [ 874.847453][ T981] usb 6-1: not running at top speed; connect to a high speed hub [ 874.859800][ T981] usb 6-1: config 1 interface 0 has no altsetting 0 [ 874.879212][T12842] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 874.900908][ T981] usb 6-1: language id specifier not provided by device, defaulting to English [ 874.911971][T12842] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 874.922625][T18073] m920x_read = error: -19 [ 874.927029][T18073] dvb-usb: error -19 while querying for an remote control event. [ 874.945598][T12842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 874.959292][ T981] usb 6-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.40 [ 874.970066][ T108] hma2: left promiscuous mode [ 874.975515][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.990954][T12842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 875.009746][ T981] usb 6-1: Product: Г [ 875.019871][T12842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 875.031257][ T981] usb 6-1: Manufacturer: ᐇ [ 875.035916][ T981] usb 6-1: SerialNumber: 榔ↈᝨ䁐躵޺鋜戾ॽ [ 875.050137][ T5913] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 875.072311][T12842] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 875.085546][T17985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.089896][T12842] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 875.120878][T18073] m920x_read = error: -19 [ 875.120912][T17985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.121061][ T108] tipc: Disabling bearer [ 875.125924][T18073] dvb-usb: error -19 while querying for an remote control event. [ 875.143851][ T108] tipc: Disabling bearer [ 875.152066][T12842] usb 5-1: Product: syz [ 875.157692][T12842] usb 5-1: Manufacturer: syz [ 875.189908][ T108] tipc: Left network mode [ 875.211141][T12842] cdc_wdm 5-1:1.0: skipping garbage [ 875.243734][T17985] team0: Port device team_slave_0 added [ 875.246656][T12842] cdc_wdm 5-1:1.0: skipping garbage [ 875.247156][ T5913] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 875.265844][T12842] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 875.272080][T17985] team0: Port device team_slave_1 added [ 875.285477][T12842] cdc_wdm 5-1:1.0: Unknown control protocol [ 875.292137][ T5913] usb 2-1: config 0 has no interface number 0 [ 875.298364][ T5913] usb 2-1: config 0 interface 1 has no altsetting 0 [ 875.321352][T12842] m920x_read = error: -19 [ 875.326316][T12842] dvb-usb: error -19 while querying for an remote control event. [ 875.344153][ T5913] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 875.360242][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.368325][ T5913] usb 2-1: Product: syz [ 875.373186][ T5913] usb 2-1: Manufacturer: syz [ 875.403845][ T5913] usb 2-1: SerialNumber: syz [ 875.423977][ T981] usbhid 6-1:1.0: can't add hid device: -71 [ 875.438318][ T5913] usb 2-1: config 0 descriptor?? [ 875.452245][ T981] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 875.467992][ T981] usb 6-1: USB disconnect, device number 73 [ 875.528437][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 875.534365][ T5884] usb 5-1: USB disconnect, device number 43 [ 875.535197][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 875.547239][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 875.559070][T12842] m920x_read = error: -19 [ 875.583288][T12842] dvb-usb: error -19 while querying for an remote control event. [ 875.648453][T17985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.663548][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.679847][ T29] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 875.697579][T17985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.717238][T18072] fuse: Unknown parameter '' [ 875.755194][ T981] m920x_read = error: -19 [ 875.761299][ T981] dvb-usb: error -19 while querying for an remote control event. [ 875.783662][T17985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.804384][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.833878][T17985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.890704][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.919725][ T29] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 875.919747][ T5884] m920x_read = error: -19 [ 875.919772][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 875.933738][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.976655][ T29] usb 4-1: config 0 descriptor?? [ 876.014136][ T29] pwc: Askey VC010 type 2 USB webcam detected. [ 876.054455][ T5913] msi2500 2-1:0.1: Registered as swradio24 [ 876.061316][ T5913] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 876.101698][ T5913] usb 2-1: USB disconnect, device number 15 [ 876.121116][T12842] m920x_read = error: -19 [ 876.126665][T12842] dvb-usb: error -19 while querying for an remote control event. [ 876.300674][T12842] m920x_read = error: -19 [ 876.305113][T12842] dvb-usb: error -19 while querying for an remote control event. [ 876.439682][ T29] pwc: recv_control_msg error -32 req 02 val 2b00 [ 876.447233][T17985] hsr_slave_0: entered promiscuous mode [ 876.475875][T17985] hsr_slave_1: entered promiscuous mode [ 876.477265][ T29] pwc: recv_control_msg error -32 req 02 val 2700 [ 876.482627][ T5913] m920x_read = error: -19 [ 876.506163][T17985] debugfs: 'hsr0' already exists in 'hsr' [ 876.515018][ T29] pwc: recv_control_msg error -32 req 02 val 2c00 [ 876.519814][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 876.545191][ T29] pwc: recv_control_msg error -32 req 04 val 1000 [ 876.556421][T17985] Cannot create hsr debugfs directory [ 876.566050][ T29] pwc: recv_control_msg error -32 req 04 val 1300 [ 876.612431][ T29] pwc: recv_control_msg error -32 req 04 val 1400 [ 876.660527][ T29] pwc: recv_control_msg error -32 req 02 val 2000 [ 876.720238][T13132] Bluetooth: hci4: command tx timeout [ 876.749982][ T5913] m920x_read = error: -19 [ 876.754944][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 876.931027][ T5913] m920x_read = error: -19 [ 876.937403][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 876.940558][ T29] pwc: recv_control_msg error -71 req 04 val 1500 [ 876.950452][T18106] loop2: detected capacity change from 0 to 7 [ 876.963677][ T29] pwc: recv_control_msg error -71 req 02 val 2500 [ 877.120738][ T29] pwc: recv_control_msg error -71 req 02 val 2400 [ 877.127465][T18106] Dev loop2: unable to read RDB block 7 [ 877.139644][ T5884] m920x_read = error: -19 [ 877.139644][ T29] pwc: recv_control_msg error -71 req 02 val 2600 [ 877.143755][ T29] pwc: recv_control_msg error -71 req 02 val 2900 [ 877.145214][T18108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3052'. [ 877.166831][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 877.224329][T18106] loop2: unable to read partition table [ 877.230780][ T29] pwc: recv_control_msg error -71 req 02 val 2800 [ 877.270437][ T5913] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 877.280236][ T29] pwc: recv_control_msg error -71 req 04 val 1100 [ 877.312796][T18106] loop2: partition table beyond EOD, truncated [ 877.319052][T18106] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 877.344225][ T5884] m920x_read = error: -19 [ 877.348639][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 877.362035][ T29] pwc: recv_control_msg error -71 req 04 val 1200 [ 877.392244][ T29] pwc: Registered as video103. [ 877.401965][ T29] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input57 [ 877.455990][ T29] usb 4-1: USB disconnect, device number 39 [ 877.475583][ T108] hsr_slave_0: left promiscuous mode [ 877.514991][ T108] hsr_slave_1: left promiscuous mode [ 877.521909][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.532387][ T108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.540835][ T5884] m920x_read = error: -19 [ 877.549829][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 877.568267][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.594545][ T5913] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.604075][T12842] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 877.643055][ T108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.658684][ T5913] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 877.668090][ T108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.686275][ T5912] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 877.700357][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.708381][ T5913] usb 5-1: Product: syz [ 877.722115][ T108] veth1_macvtap: left allmulticast mode [ 877.734493][ T108] veth1_macvtap: left promiscuous mode [ 877.744082][ T5913] usb 5-1: Manufacturer: syz [ 877.749190][ T5913] usb 5-1: SerialNumber: syz [ 877.754110][ T5884] m920x_read = error: -19 [ 877.758646][T12842] usb 2-1: device descriptor read/64, error -71 [ 877.765764][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 877.778529][ T108] veth0_macvtap: left promiscuous mode [ 877.815552][ T5913] usb 5-1: config 0 descriptor?? [ 877.950734][ T5913] m920x_read = error: -19 [ 877.958653][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 878.045307][T12842] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 878.139964][ T5913] m920x_read = error: -19 [ 878.144430][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 878.180226][T12842] usb 2-1: device descriptor read/64, error -71 [ 878.301991][ T108] team0 (unregistering): Port device team_slave_1 removed [ 878.311729][ T5913] m920x_read = error: -19 [ 878.318041][T12842] usb usb2-port1: attempt power cycle [ 878.323564][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 878.351167][ T108] team0 (unregistering): Port device team_slave_0 removed [ 878.479707][ T29] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 878.510191][ T5913] m920x_read = error: -19 [ 878.514693][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 878.609671][ T29] usb 6-1: device descriptor read/64, error -71 [ 878.690161][ T5913] m920x_read = error: -19 [ 878.694546][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 878.707656][T12842] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 878.740405][T12842] usb 2-1: device descriptor read/8, error -71 [ 878.798506][T13132] Bluetooth: hci4: command tx timeout [ 878.859762][ T29] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 878.889659][ T5884] m920x_read = error: -19 [ 878.894090][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 878.942836][T18122] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3056'. [ 878.990412][ T29] usb 6-1: device descriptor read/64, error -71 [ 878.996873][T12842] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 879.006480][T14825] usb usb40-port1: attempt power cycle [ 879.036283][T12842] usb 2-1: device descriptor read/8, error -71 [ 879.070075][ T5884] m920x_read = error: -19 [ 879.074615][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 879.134149][ T29] usb usb6-port1: attempt power cycle [ 879.161659][T12842] usb usb2-port1: unable to enumerate USB device [ 879.251962][T12842] m920x_read = error: -19 [ 879.256581][T12842] dvb-usb: error -19 while querying for an remote control event. [ 879.441624][ T5884] m920x_read = error: -19 [ 879.453179][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 879.495367][ T29] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 879.540965][ T29] usb 6-1: device descriptor read/8, error -71 [ 879.614743][T17985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 879.623304][T14825] usb usb40-port1: unable to enumerate USB device [ 879.640337][T18132] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3058'. [ 879.649869][T18132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3058'. [ 879.658940][T12842] m920x_read = error: -19 [ 879.669748][T12842] dvb-usb: error -19 while querying for an remote control event. [ 879.683540][T17985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 879.706807][T18132] bridge4: entered promiscuous mode [ 879.715221][T18132] bridge4: entered allmulticast mode [ 879.735443][T18132] team0: Port device bridge4 added [ 879.746838][T17985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 879.765665][T17985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 879.773326][ T24] usb 5-1: USB disconnect, device number 44 [ 879.821940][ T29] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 879.831220][T12842] m920x_read = error: -19 [ 879.835631][T12842] dvb-usb: error -19 while querying for an remote control event. [ 879.902763][ T29] usb 6-1: device descriptor read/8, error -71 [ 880.010136][T14825] m920x_read = error: -19 [ 880.014559][T14825] dvb-usb: error -19 while querying for an remote control event. [ 880.031174][ T29] usb usb6-port1: unable to enumerate USB device [ 880.064783][T17985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.119799][T17985] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.134322][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.141647][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 880.171877][T16785] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.179120][T16785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.203526][T14825] m920x_read = error: -19 [ 880.207944][T14825] dvb-usb: error -19 while querying for an remote control event. [ 880.210932][ T797] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 880.288563][T17985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 880.345163][T17985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 880.372001][ T5884] m920x_read = error: -19 [ 880.376514][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 880.396338][ T797] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 880.407686][ T797] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 880.435628][ T29] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 880.451828][ T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 880.465037][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 880.481929][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 880.493439][T17985] veth0_vlan: entered promiscuous mode [ 880.516684][T17985] veth1_vlan: entered promiscuous mode [ 880.527148][ T797] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 880.538046][ T797] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 880.553069][ T5884] m920x_read = error: -19 [ 880.557489][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 880.575068][ T797] usb 2-1: Product: syz [ 880.596386][ T797] usb 2-1: Manufacturer: syz [ 880.610596][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 880.612455][T17985] veth0_macvtap: entered promiscuous mode [ 880.641034][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 880.675040][T17985] veth1_macvtap: entered promiscuous mode [ 880.683056][ T797] cdc_wdm 2-1:1.0: skipping garbage [ 880.688327][ T797] cdc_wdm 2-1:1.0: skipping garbage [ 880.705406][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 880.725728][ T797] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 880.732864][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 880.749991][ T5884] m920x_read = error: -19 [ 880.755942][ T797] cdc_wdm 2-1:1.0: Unknown control protocol [ 880.766954][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.777000][ T29] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 880.781859][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 880.794450][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.816907][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.825686][ T29] usb 5-1: config 0 descriptor?? [ 880.849315][ T108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.859013][ T108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.872157][ T108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.886534][ T108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.000101][ T5912] m920x_read = error: -19 [ 881.004627][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 881.018490][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 881.021946][ T24] usb 2-1: USB disconnect, device number 20 [ 881.025145][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 881.025171][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 881.117142][ T8536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.128607][ T8536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.207060][T16785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.223847][ T5912] m920x_read = error: -19 [ 881.228263][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 881.239121][T16785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.300459][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 881.330161][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 881.383224][ T29] usb 5-1: USB disconnect, device number 45 [ 881.421120][ T5912] m920x_read = error: -19 [ 881.425545][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 881.652769][T14825] m920x_read = error: -19 [ 881.657545][T14825] dvb-usb: error -19 while querying for an remote control event. [ 881.684461][T18173] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3065'. [ 881.840161][T18183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3066'. [ 881.849244][T14825] m920x_read = error: -19 [ 881.883519][T14825] dvb-usb: error -19 while querying for an remote control event. [ 882.060486][ T5913] m920x_read = error: -19 [ 882.065009][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 882.201763][T18190] syzkaller0: entered promiscuous mode [ 882.216707][T18190] syzkaller0: entered allmulticast mode [ 882.240016][T14825] m920x_read = error: -19 [ 882.244715][T14825] dvb-usb: error -19 while querying for an remote control event. [ 882.388143][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3068'. [ 882.440740][T14825] m920x_read = error: -19 [ 882.454330][T14825] dvb-usb: error -19 while querying for an remote control event. [ 882.650612][ T5912] m920x_read = error: -19 [ 882.655429][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 882.720082][T14825] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 882.852081][ T5912] m920x_read = error: -19 [ 882.856498][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 882.940162][T14825] usb 6-1: Using ep0 maxpacket: 16 [ 882.949254][T14825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.975579][T14825] usb 6-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 883.000736][T14825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.021118][T14825] usb 6-1: config 0 descriptor?? [ 883.049993][ T5913] m920x_read = error: -19 [ 883.054602][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 883.230128][ T5913] m920x_read = error: -19 [ 883.234599][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 883.420129][ T5913] m920x_read = error: -19 [ 883.424578][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 883.464819][T14825] cypress 0003:04B4:07B1.002B: unknown main item tag 0x0 [ 883.464863][T14825] cypress 0003:04B4:07B1.002B: unknown main item tag 0x0 [ 883.464894][T14825] cypress 0003:04B4:07B1.002B: unknown main item tag 0x0 [ 883.464923][T14825] cypress 0003:04B4:07B1.002B: unknown main item tag 0x0 [ 883.464953][T14825] cypress 0003:04B4:07B1.002B: unknown main item tag 0x0 [ 883.477645][T14825] cypress 0003:04B4:07B1.002B: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.5-1/input0 [ 883.650770][ T5913] usb 6-1: USB disconnect, device number 78 [ 883.722584][T14825] m920x_read = error: -19 [ 883.722616][T14825] dvb-usb: error -19 while querying for an remote control event. [ 883.754732][T18232] fido_id[18232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 883.890374][T14825] m920x_read = error: -19 [ 883.895422][T14825] dvb-usb: error -19 while querying for an remote control event. [ 884.066696][T14825] m920x_read = error: -19 [ 884.071917][T14825] dvb-usb: error -19 while querying for an remote control event. [ 884.243566][T14825] m920x_read = error: -19 [ 884.285944][T14825] dvb-usb: error -19 while querying for an remote control event. [ 884.443929][T18245] loop8: detected capacity change from 0 to 8 [ 884.450744][T14825] m920x_read = error: -19 [ 884.455135][T14825] dvb-usb: error -19 while querying for an remote control event. [ 884.464343][T18245] Dev loop8: unable to read RDB block 8 [ 884.470819][T18245] loop8: unable to read partition table [ 884.490559][T18245] loop8: partition table beyond EOD, truncated [ 884.529692][ T24] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 884.532587][T18245] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 884.630364][T14825] m920x_read = error: -19 [ 884.634847][T14825] dvb-usb: error -19 while querying for an remote control event. [ 884.704591][T18250] netlink: 'syz.4.3079': attribute type 10 has an invalid length. [ 884.714287][T18250] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3079'. [ 884.735094][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.761658][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 884.813138][T14825] m920x_read = error: -19 [ 884.817657][T14825] dvb-usb: error -19 while querying for an remote control event. [ 884.827955][ T24] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 884.849329][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.888045][ T24] usb 3-1: Product: syz [ 884.899576][ T24] usb 3-1: Manufacturer: syz [ 884.907026][ T24] usb 3-1: SerialNumber: syz [ 884.940429][ T24] usb 3-1: config 0 descriptor?? [ 884.979706][T14825] m920x_read = error: -19 [ 884.996993][T14825] dvb-usb: error -19 while querying for an remote control event. [ 885.200063][T12842] m920x_read = error: -19 [ 885.204479][T12842] dvb-usb: error -19 while querying for an remote control event. [ 885.389772][T12842] m920x_read = error: -19 [ 885.394359][T12842] dvb-usb: error -19 while querying for an remote control event. [ 885.604188][T12842] m920x_read = error: -19 [ 885.608828][T12842] dvb-usb: error -19 while querying for an remote control event. [ 885.783551][T12842] m920x_read = error: -19 [ 885.801018][T12842] dvb-usb: error -19 while querying for an remote control event. [ 885.847380][ T24] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 886.029710][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 886.052530][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 886.061744][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.081707][T12842] m920x_read = error: -19 [ 886.108400][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 886.115854][T12842] dvb-usb: error -19 while querying for an remote control event. [ 886.174526][ T24] pvrusb2: ********** [ 886.190199][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 886.219656][ T24] pvrusb2: Important functionality might not be entirely working. [ 886.240263][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 886.254009][ T24] pvrusb2: ********** [ 886.331030][ T5884] m920x_read = error: -19 [ 886.475120][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 886.688902][T12842] m920x_read = error: -19 [ 886.782351][T12842] dvb-usb: error -19 while querying for an remote control event. [ 886.993310][T12842] usb 3-1: USB disconnect, device number 48 [ 887.049629][T14825] m920x_read = error: -19 [ 887.054273][T14825] dvb-usb: error -19 while querying for an remote control event. [ 887.241041][ T5884] m920x_read = error: -19 [ 887.245808][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 887.419976][ T5884] m920x_read = error: -19 [ 887.424480][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 887.590527][ T5884] m920x_read = error: -19 [ 887.597684][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 887.759722][ T5884] m920x_read = error: -19 [ 887.764143][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 887.918423][ T29] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 887.930028][ T5884] m920x_read = error: -19 [ 887.934431][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 888.072393][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 888.080781][ T29] usb 3-1: config 0 has no interfaces? [ 888.091221][ T29] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.111901][ T5884] m920x_read = error: -19 [ 888.116347][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 888.140663][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.148782][ T29] usb 3-1: Product: syz [ 888.155834][ T29] usb 3-1: Manufacturer: syz [ 888.169944][ T29] usb 3-1: SerialNumber: syz [ 888.197975][ T29] usb 3-1: config 0 descriptor?? [ 888.283399][ T5884] m920x_read = error: -19 [ 888.287828][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 888.457573][ T5884] m920x_read = error: -19 [ 888.462178][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 888.636178][ T5884] m920x_read = error: -19 [ 888.640721][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 888.800756][ T5884] m920x_read = error: -19 [ 888.805200][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 888.991045][ T5884] m920x_read = error: -19 [ 888.995717][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 889.157369][ T5884] m920x_read = error: -19 [ 889.161961][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 889.182236][T18223] lo: Caught tx_queue_len zero misconfig [ 889.329825][T12842] m920x_read = error: -19 [ 889.334358][T12842] dvb-usb: error -19 while querying for an remote control event. [ 889.528349][T12842] m920x_read = error: -19 [ 889.539647][T12842] dvb-usb: error -19 while querying for an remote control event. [ 889.720010][ T5884] m920x_read = error: -19 [ 889.724654][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 889.901162][T12842] m920x_read = error: -19 [ 889.905799][T12842] dvb-usb: error -19 while querying for an remote control event. [ 890.069827][T12842] m920x_read = error: -19 [ 890.075069][T12842] dvb-usb: error -19 while querying for an remote control event. [ 890.266811][T12842] m920x_read = error: -19 [ 890.282534][T12842] dvb-usb: error -19 while querying for an remote control event. [ 890.403930][ T2345] pvrusb2: Invalid write control endpoint [ 890.412197][ T24] usb 6-1: USB disconnect, device number 79 [ 890.470588][ T5884] m920x_read = error: -19 [ 890.476228][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 890.563082][ T797] usb 3-1: USB disconnect, device number 49 [ 890.639892][ T2345] pvrusb2: Invalid write control endpoint [ 890.645946][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 890.659809][ T5884] m920x_read = error: -19 [ 890.665977][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 890.771083][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 890.788021][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 890.807307][ T2345] pvrusb2: Device being rendered inoperable [ 890.821039][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 890.828308][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 890.870087][ T5884] m920x_read = error: -19 [ 890.874545][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 890.943828][ T2345] pvrusb2: Attached sub-driver cx25840 [ 890.949363][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 890.972384][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 891.110155][ T5884] m920x_read = error: -19 [ 891.114579][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 891.165642][T18290] loop8: detected capacity change from 0 to 8 [ 891.213127][T18290] Dev loop8: unable to read RDB block 8 [ 891.231854][T18290] loop8: unable to read partition table [ 891.250147][T18290] loop8: partition table beyond EOD, truncated [ 891.290389][T18290] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 891.310350][ T5884] m920x_read = error: -19 [ 891.324074][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 891.410047][ T24] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 891.519993][ T5884] m920x_read = error: -19 [ 891.526886][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 891.628893][T18298] netlink: 'syz.2.3092': attribute type 10 has an invalid length. [ 891.699982][T12842] m920x_read = error: -19 [ 891.705466][T12842] dvb-usb: error -19 while querying for an remote control event. [ 891.868669][ T24] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 891.968381][T18302] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 891.986605][ T24] usb 6-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 891.998531][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.012939][ T5884] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 892.018390][ T24] usb 6-1: Product: syz [ 892.070546][T18302] team0: Port device batadv1 added [ 892.108469][ T24] usb 6-1: Manufacturer: syz [ 892.121892][ T24] usb 6-1: SerialNumber: syz [ 892.169625][T18302] hub 9-0:1.0: USB hub found [ 892.174647][T18302] hub 9-0:1.0: 1 port detected [ 892.205796][T18307] netlink: 'syz.1.3093': attribute type 10 has an invalid length. [ 892.236947][T18307] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3093'. [ 892.333395][T12842] m920x_read = error: -19 [ 892.340708][T12842] dvb-usb: error -19 while querying for an remote control event. [ 892.529533][T14825] m920x_read = error: -19 [ 892.614726][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 892.659395][ T5884] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 892.686479][ T5884] usb 4-1: config 0 has no interface number 0 [ 892.693181][T14825] dvb-usb: error -19 while querying for an remote control event. [ 892.717806][ T5884] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 892.749163][ T5884] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 892.764182][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.775010][ T5884] usb 4-1: Product: syz [ 892.783796][ T5884] usb 4-1: Manufacturer: syz [ 892.792904][ T5884] usb 4-1: SerialNumber: syz [ 892.819202][ T5884] usb 4-1: config 0 descriptor?? [ 892.833105][T18296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 892.889799][T18314] input: syz0 as /devices/virtual/input/input58 [ 892.899773][T14825] m920x_read = error: -19 [ 892.904206][T14825] dvb-usb: error -19 while querying for an remote control event. [ 892.948359][T18314] SET target dimension over the limit! [ 893.068524][T18296] loop2: detected capacity change from 0 to 7 [ 893.081314][T18296] Dev loop2: unable to read RDB block 7 [ 893.086991][T18296] loop2: AHDI p2 p3 [ 893.097310][T18296] loop2: partition table partially beyond EOD, truncated [ 893.107051][T14825] m920x_read = error: -19 [ 893.111624][ T797] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 893.133296][T18296] loop2: p3 start 335544320 is beyond EOD, truncated [ 893.146383][T14825] dvb-usb: error -19 while querying for an remote control event. [ 893.153111][T18316] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 893.280243][ T797] usb 3-1: Using ep0 maxpacket: 32 [ 893.304619][ T797] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 893.320305][T14825] m920x_read = error: -19 [ 893.333146][T14825] dvb-usb: error -19 while querying for an remote control event. [ 893.345588][ T797] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 893.383021][ T797] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 893.416489][ T797] usb 3-1: config 1 has no interface number 0 [ 893.439632][ T797] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 893.481619][ T797] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 893.505826][T14825] m920x_read = error: -19 [ 893.517918][T14825] dvb-usb: error -19 while querying for an remote control event. [ 893.536207][ T797] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 893.609341][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.672856][ T797] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 893.679958][T14825] m920x_read = error: -19 [ 893.684765][T14825] dvb-usb: error -19 while querying for an remote control event. [ 893.859938][T14825] m920x_read = error: -19 [ 893.898858][T14825] dvb-usb: error -19 while querying for an remote control event. [ 894.109697][ T5913] m920x_read = error: -19 [ 894.114984][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 894.330033][ T5913] m920x_read = error: -19 [ 894.334658][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 894.520111][ T5913] m920x_read = error: -19 [ 894.524527][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 894.735890][T14825] m920x_read = error: -19 [ 894.740530][T14825] dvb-usb: error -19 while querying for an remote control event. [ 894.896192][ T24] usb 6-1: selecting invalid altsetting 1 [ 894.900944][T14825] m920x_read = error: -19 [ 894.906627][T14825] dvb-usb: error -19 while querying for an remote control event. [ 894.913051][ T24] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 894.914534][ T24] dvb_usb_lmedm04 6-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 895.011336][ T24] usb 6-1: USB disconnect, device number 80 [ 895.061124][T18335] loop8: detected capacity change from 0 to 8 [ 895.070016][T14825] m920x_read = error: -19 [ 895.096439][T14825] dvb-usb: error -19 while querying for an remote control event. [ 895.107240][ T5835] Dev loop8: unable to read RDB block 8 [ 895.130414][ T5835] loop8: unable to read partition table [ 895.136542][ T5835] loop8: partition table beyond EOD, truncated [ 895.160071][T18335] Dev loop8: unable to read RDB block 8 [ 895.180177][T18335] loop8: unable to read partition table [ 895.207831][T18335] loop8: partition table beyond EOD, truncated [ 895.227008][T18335] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 895.263368][T14825] m920x_read = error: -19 [ 895.277319][T14825] dvb-usb: error -19 while querying for an remote control event. [ 895.444758][ T797] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 895.473304][T14825] m920x_read = error: -19 [ 895.490476][T14825] dvb-usb: error -19 while querying for an remote control event. [ 895.716535][T14825] m920x_read = error: -19 [ 895.725370][T14825] dvb-usb: error -19 while querying for an remote control event. [ 895.779766][T18347] netlink: 'syz.5.3105': attribute type 10 has an invalid length. [ 895.813240][T18347] netlink: 192 bytes leftover after parsing attributes in process `syz.5.3105'. [ 895.843812][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.863082][T14825] usb 3-1: USB disconnect, device number 50 [ 895.872143][T14825] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 895.894017][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.900232][ T5913] m920x_read = error: -19 [ 895.907333][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 895.924327][ T5884] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 895.950830][ T5884] asix 4-1:0.188: probe with driver asix failed with error -71 [ 895.992642][ T5884] usb 4-1: USB disconnect, device number 40 [ 896.120874][ T5913] m920x_read = error: -19 [ 896.125301][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 896.152512][T18351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3107'. [ 896.168814][T18353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.181234][T18351] netlink: 'syz.5.3107': attribute type 6 has an invalid length. [ 896.189162][T18351] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3107'. [ 896.211853][T18353] binder_alloc: 18352: binder_alloc_buf size 12336 failed, no address space [ 896.229898][T18353] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 896.253724][T18355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.299774][ T5884] m920x_read = error: -19 [ 896.304317][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 896.491794][T14825] m920x_read = error: -19 [ 896.496216][T14825] dvb-usb: error -19 while querying for an remote control event. [ 896.518123][T18367] netlink: 'syz.5.3113': attribute type 2 has an invalid length. [ 896.588050][T18370] loop6: detected capacity change from 0 to 524288000 [ 896.753272][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3113'. [ 896.803331][ T5884] m920x_read = error: -19 [ 896.812083][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 896.816823][T18367] : entered promiscuous mode [ 896.853185][ T30] audit: type=1326 audit(1771245987.743:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18375 comm="syz.3.3115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe55b59bf79 code=0x0 [ 896.970566][T18377] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3111'. [ 897.089760][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 897.156591][T18370] bond1: option ad_user_port_key: invalid value (63477) [ 897.171287][T18370] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 897.210171][ T5884] m920x_read = error: -19 [ 897.217586][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 897.268712][T18370] bond1 (unregistering): Released all slaves [ 897.317211][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 897.336333][T18373] : entered promiscuous mode [ 897.394203][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 897.408008][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 897.410071][ T5913] m920x_read = error: -19 [ 897.423253][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 897.440653][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 897.458188][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 897.541325][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.554645][ T5884] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 897.611384][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 897.630694][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.754756][ T5884] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.767439][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.807742][ T5884] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 897.817280][ T5913] m920x_read = error: -19 [ 897.821883][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 897.865238][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 897.884003][ T5884] usb 2-1: SerialNumber: syz [ 897.900850][ T24] usb 6-1: usb_control_msg returned -32 [ 897.929151][ T24] usbtmc 6-1:16.0: can't read capabilities [ 898.000743][ T5913] m920x_read = error: -19 [ 898.005209][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 898.170331][ T5913] m920x_read = error: -19 [ 898.175034][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 898.339984][ T5913] m920x_read = error: -19 [ 898.344466][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 898.430075][T18390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3117'. [ 898.439160][T18390] netlink: 'syz.4.3117': attribute type 5 has an invalid length. [ 898.448431][T18390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3117'. [ 898.538840][T18390] geneve2: entered promiscuous mode [ 898.549768][T14825] m920x_read = error: -19 [ 898.554199][T14825] dvb-usb: error -19 while querying for an remote control event. [ 898.562665][T18390] geneve2: entered allmulticast mode [ 898.614343][T18374] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 898.625946][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 898.637669][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 898.725785][T18367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3113'. [ 898.738942][T14825] m920x_read = error: -19 [ 898.744062][T14825] dvb-usb: error -19 while querying for an remote control event. [ 898.959146][ T5913] m920x_read = error: -19 [ 898.979671][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 899.171762][T14825] m920x_read = error: -19 [ 899.176219][T14825] dvb-usb: error -19 while querying for an remote control event. [ 899.320309][ T6444] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 899.350322][T14825] m920x_read = error: -19 [ 899.374456][T14825] dvb-usb: error -19 while querying for an remote control event. [ 899.486656][ T6444] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 899.514286][ T6444] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 899.543193][ T6444] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 899.607311][ T5913] m920x_read = error: -19 [ 899.608183][ T6444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 899.618041][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 899.661258][ T6444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 899.688344][ T6444] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 899.700674][ T6444] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 899.718274][ T6444] usb 3-1: Product: syz [ 899.730857][ T6444] usb 3-1: Manufacturer: syz [ 899.765681][ T6444] cdc_wdm 3-1:1.0: skipping garbage [ 899.771661][ T6444] cdc_wdm 3-1:1.0: skipping garbage [ 899.779363][ T6444] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 899.786039][ T6444] cdc_wdm 3-1:1.0: Unknown control protocol [ 899.849700][T14825] m920x_read = error: -19 [ 899.854242][T14825] dvb-usb: error -19 while querying for an remote control event. [ 899.905625][T14825] usb 6-1: USB disconnect, device number 81 [ 899.966666][T18400] loop8: detected capacity change from 0 to 8 [ 900.012686][ T5826] Dev loop8: unable to read RDB block 8 [ 900.018515][ T5826] loop8: unable to read partition table [ 900.025893][ T5826] loop8: partition table beyond EOD, truncated [ 900.049784][ T5913] m920x_read = error: -19 [ 900.069144][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 900.081280][T18400] Dev loop8: unable to read RDB block 8 [ 900.092691][T18400] loop8: unable to read partition table [ 900.102193][T18400] loop8: partition table beyond EOD, truncated [ 900.119568][T18400] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 900.123286][T18396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.218162][T18396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.224944][ T5884] usb 2-1: 0:2 : does not exist [ 900.260492][ T5913] m920x_read = error: -19 [ 900.265900][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 900.279938][ T5884] usb 2-1: unit 5 not found! [ 900.301483][ T24] usb 3-1: USB disconnect, device number 51 [ 900.456231][ T5884] usb 2-1: USB disconnect, device number 21 [ 900.481210][ T5913] m920x_read = error: -19 [ 900.489941][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 900.516428][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.599192][T18419] dlm: non-version read from control device 8224 [ 900.862451][ T5913] m920x_read = error: -19 [ 900.866962][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 901.042490][ T5884] m920x_read = error: -19 [ 901.048577][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 901.309057][ T5884] m920x_read = error: -19 [ 901.399782][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 901.559908][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 901.650665][ T5913] m920x_read = error: -19 [ 901.655272][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 901.750686][ T24] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 901.759272][ T24] usb 4-1: config 128 has no interface number 0 [ 901.771119][ T24] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 901.819843][ T24] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 901.845902][ T24] usb 4-1: config 128 interface 148 has no altsetting 0 [ 901.860357][ T5913] m920x_read = error: -19 [ 901.868133][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 901.881533][T18434] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3131'. [ 901.899195][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 901.919081][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.942988][ T24] usb 4-1: Product: syz [ 901.947258][ T24] usb 4-1: Manufacturer: syz [ 901.979674][ T24] usb 4-1: SerialNumber: syz [ 902.029953][ T5884] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 902.049821][ T5913] m920x_read = error: -19 [ 902.054321][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 902.219445][ T24] usb 4-1: USB disconnect, device number 41 [ 902.230098][ T5913] m920x_read = error: -19 [ 902.234473][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 902.242357][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 902.262116][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 902.283477][ T5884] usb 3-1: config 7 has an invalid interface number: 128 but max is 0 [ 902.300085][ T5884] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 902.348348][T18438] loop5: detected capacity change from 0 to 7 [ 902.355680][ T5884] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 902.376820][ T5884] usb 3-1: config 7 has no interface number 0 [ 902.387620][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.397318][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.411945][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.421576][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.429807][ T5884] usb 3-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 902.442025][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.442071][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.462014][ T5913] m920x_read = error: -19 [ 902.466387][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 902.472128][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.479713][ T5884] usb 3-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 902.484072][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.495260][ T5884] usb 3-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 902.513627][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.523340][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.528901][ T5884] usb 3-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 902.545183][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.554928][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.585496][ T5884] usb 3-1: config 7 interface 128 has no altsetting 0 [ 902.600250][T18439] loop5: detected capacity change from 7 to 0 [ 902.606879][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 902.616638][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 902.624642][T18438] ldm_validate_partition_table(): Disk read failed. [ 902.632016][ T5913] m920x_read = error: -19 [ 902.636399][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 902.644260][T18438] Dev loop5: unable to read RDB block 0 [ 902.652342][T18438] loop5: unable to read partition table [ 902.662073][ T5884] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 902.672148][T18438] loop5: partition table beyond EOD, truncated [ 902.681991][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.690230][T18438] loop_reread_partitions: partition scan of loop5 (ɍn/C>|n˨,l-"@Iy}c9sGQaG%x?) failed (rc=-5) [ 902.707749][ T5884] usb 3-1: Product: syz [ 902.715889][ T5884] usb 3-1: Manufacturer: syz [ 902.720878][ T5884] usb 3-1: SerialNumber: syz [ 902.739877][T18431] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 902.809712][ T5912] m920x_read = error: -19 [ 902.814186][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 902.839709][ T5913] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 902.962545][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.975341][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.991118][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.000162][T14825] m920x_read = error: -19 [ 903.004674][T14825] dvb-usb: error -19 while querying for an remote control event. [ 903.011436][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.021289][ T5913] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 903.039666][ T5913] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 903.048854][ T5913] usb 5-1: config 220 interface 0 has no altsetting 0 [ 903.060949][ T5913] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 903.072270][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.081394][ T5913] usb 5-1: Product: syz [ 903.085635][ T5913] usb 5-1: Manufacturer: syz [ 903.091083][ T5913] usb 5-1: SerialNumber: syz [ 903.091425][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.110310][ T5912] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 903.118623][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.141090][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.151594][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.161443][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.173383][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.220395][T14825] m920x_read = error: -19 [ 903.228941][ T5884] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 903.239398][T14825] dvb-usb: error -19 while querying for an remote control event. [ 903.247955][ T5884] usb 3-1: MIDIStreaming interface descriptor not found [ 903.260734][T18445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 903.269741][ T5912] usb 6-1: device descriptor read/64, error -71 [ 903.294417][T18445] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 903.359148][ T5913] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 903.368248][ T5913] uvcvideo 5-1:220.0: No valid video chain found. [ 903.395125][ T5913] usb 5-1: USB disconnect, device number 46 [ 903.409938][T18080] m920x_read = error: -19 [ 903.417357][T18080] dvb-usb: error -19 while querying for an remote control event. [ 903.440349][ T5884] usb 3-1: USB disconnect, device number 52 [ 903.530253][ T5912] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 903.590632][T18080] m920x_read = error: -19 [ 903.595181][T18080] dvb-usb: error -19 while querying for an remote control event. [ 903.669968][ T5912] usb 6-1: device descriptor read/64, error -71 [ 903.760539][ T5884] m920x_read = error: -19 [ 903.769403][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 903.790693][ T5912] usb usb6-port1: attempt power cycle [ 903.818379][T18460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3141'. [ 903.849593][ T5913] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 903.908802][T18465] trusted_key: syz.4.3143 sent an empty control message without MSG_MORE. [ 903.930683][ T5884] m920x_read = error: -19 [ 903.935443][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 903.945379][T18462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3142'. [ 904.021641][ T5913] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 904.030770][ T5913] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 904.041280][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 904.050420][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 904.062131][ T5913] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 904.077633][ T5913] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.089860][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.098999][ T5913] usb 4-1: Product: syz [ 904.103783][ T5884] m920x_read = error: -19 [ 904.109071][ T5884] dvb-usb: error -19 while querying for an remote control event. [ 904.117246][ T5913] usb 4-1: Manufacturer: syz [ 904.129405][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 904.137469][ T5913] cdc_wdm 4-1:1.0: skipping garbage [ 904.145153][ T5913] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 904.157429][ T5913] cdc_wdm 4-1:1.0: Unknown control protocol [ 904.164387][ T5912] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 904.189845][ T6444] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 904.192257][ T5912] usb 6-1: device descriptor read/8, error -71 [ 904.269184][T18469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'. [ 904.280319][ T5913] m920x_read = error: -19 [ 904.284713][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 904.369670][ T6444] usb 5-1: Using ep0 maxpacket: 16 [ 904.378798][ T6444] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 904.392971][ T6444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.409841][ T6444] usb 5-1: Product: syz [ 904.414073][ T6444] usb 5-1: Manufacturer: syz [ 904.418790][ T6444] usb 5-1: SerialNumber: syz [ 904.444614][ T6444] usb 5-1: config 0 descriptor?? [ 904.458748][ T6444] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 904.469153][ T6444] usb 5-1: Detected FT-X [ 904.479940][ T5912] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 904.487767][ T5913] m920x_read = error: -19 [ 904.492661][ T5913] dvb-usb: error -19 while querying for an remote control event. [ 904.520744][ T5912] usb 6-1: device descriptor read/8, error -71 [ 904.560983][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 904.567652][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 904.570635][ T797] usb 4-1: USB disconnect, device number 42 [ 904.573766][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 904.630169][ T5912] usb usb6-port1: unable to enumerate USB device [ 904.662242][ T5912] m920x_read = error: -19 [ 904.670008][ T6444] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 904.684393][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 904.686524][ T6444] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 904.719875][ T6444] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 904.732163][ T6444] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 904.752033][ T6444] usb 5-1: USB disconnect, device number 47 [ 904.763753][ T6444] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 904.774974][ T6444] ftdi_sio 5-1:0.0: device disconnected [ 904.861415][ T5912] m920x_read = error: -19 [ 904.867623][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 904.938249][ T30] audit: type=1326 audit(1771245995.843:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18475 comm="syz.2.3146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a8d39bf79 code=0x0 [ 905.034592][ T5912] m920x_read = error: -19 [ 905.042899][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 905.221982][ T5912] m920x_read = error: -19 [ 905.226399][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 905.316956][T18482] vivid-000: ================= START STATUS ================= [ 905.329229][T18482] vivid-000: Test Pattern: 75% Colorbar [ 905.338882][T18482] vivid-000: Fill Percentage of Frame: 100 [ 905.345989][T18482] vivid-000: Horizontal Movement: No Movement [ 905.353299][T18482] vivid-000: Vertical Movement: No Movement [ 905.359275][T18482] vivid-000: OSD Text Mode: Counters Only [ 905.365643][T18482] vivid-000: Show Border: false [ 905.371087][T18482] vivid-000: Show Square: false [ 905.376066][T18482] vivid-000: Sensor Flipped Horizontally: false [ 905.389952][ T5912] m920x_read = error: -19 [ 905.394367][ T5912] dvb-usb: error -19 while querying for an remote control event. [ 905.403566][T18482] vivid-000: Sensor Flipped Vertically: false [ 905.414062][T18482] vivid-000: Insert SAV Code in Image: false [ 905.420669][T18482] vivid-000: Insert EAV Code in Image: false [ 905.427818][T18482] vivid-000: Insert Video Guard Band: false [ 905.433933][T18482] vivid-000: Reduced Framerate: false [ 905.439368][T18482] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 905.447306][T18482] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 905.459339][T18487] ================================================================== [ 905.467470][T18487] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 905.474902][T18487] Write of size 4 at addr ffff88802c4f7708 by task syz.4.3149/18487 [ 905.482928][T18487] [ 905.485280][T18487] CPU: 0 UID: 0 PID: 18487 Comm: syz.4.3149 Tainted: G L syzkaller #0 PREEMPT(full) [ 905.485309][T18487] Tainted: [L]=SOFTLOCKUP [ 905.485317][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 905.485329][T18487] Call Trace: [ 905.485338][T18487] [ 905.485346][T18487] dump_stack_lvl+0xe8/0x150 [ 905.485377][T18487] print_report+0xba/0x230 [ 905.485401][T18487] ? try_module_get+0x46/0xc0 [ 905.485428][T18487] kasan_report+0x117/0x150 [ 905.485450][T18487] ? try_module_get+0x46/0xc0 [ 905.485486][T18487] kasan_check_range+0x264/0x2c0 [ 905.485507][T18487] try_module_get+0x46/0xc0 [ 905.485534][T18487] dvb_device_open+0xef/0x350 [ 905.485555][T18487] ? do_raw_spin_unlock+0xf5/0x210 [ 905.485574][T18487] chrdev_open+0x4cd/0x5e0 [ 905.485594][T18487] ? __pfx_chrdev_open+0x10/0x10 [ 905.485613][T18487] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 905.485642][T18487] ? __pfx_chrdev_open+0x10/0x10 [ 905.485661][T18487] do_dentry_open+0x785/0x14e0 [ 905.485688][T18487] vfs_open+0x3b/0x340 [ 905.485708][T18487] ? path_openat+0x2df0/0x3860 [ 905.485738][T18487] path_openat+0x2e08/0x3860 [ 905.485771][T18487] ? __pfx_stack_trace_save+0x10/0x10 [ 905.485790][T18487] ? stack_depot_save_flags+0x33/0x810 [ 905.485820][T18487] ? __pfx_path_openat+0x10/0x10 [ 905.485846][T18487] ? __x64_sys_openat+0x138/0x170 [ 905.485868][T18487] ? do_syscall_64+0x14d/0xf80 [ 905.485886][T18487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.485908][T18487] ? __lock_acquire+0x6b5/0x2cf0 [ 905.485933][T18487] do_file_open+0x23e/0x4a0 [ 905.485962][T18487] ? __pfx_do_file_open+0x10/0x10 [ 905.485998][T18487] ? _raw_spin_unlock+0x28/0x50 [ 905.486023][T18487] ? alloc_fd+0x64b/0x6c0 [ 905.486049][T18487] do_sys_openat2+0x113/0x200 [ 905.486072][T18487] ? __pfx_do_sys_openat2+0x10/0x10 [ 905.486098][T18487] ? do_user_addr_fault+0xc6f/0x1340 [ 905.486122][T18487] __x64_sys_openat+0x138/0x170 [ 905.486147][T18487] do_syscall_64+0x14d/0xf80 [ 905.486164][T18487] ? trace_irq_disable+0x3b/0x150 [ 905.486189][T18487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.486206][T18487] ? clear_bhb_loop+0x40/0x90 [ 905.486226][T18487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.486244][T18487] RIP: 0033:0x7fa0fa15c84e [ 905.486261][T18487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 905.486278][T18487] RSP: 002b:00007fa0faf7ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 905.486298][T18487] RAX: ffffffffffffffda RBX: 00007fa0faf7b6c0 RCX: 00007fa0fa15c84e [ 905.486312][T18487] RDX: 0000000000000002 RSI: 00007fa0faf7ac00 RDI: ffffffffffffff9c [ 905.486325][T18487] RBP: 00007fa0faf7ac00 R08: 0000000000000000 R09: 0000000000000000 [ 905.486337][T18487] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 905.486349][T18487] R13: 00007fa0fa416038 R14: 00007fa0fa415fa0 R15: 00007fa0fa53fa48 [ 905.486370][T18487] [ 905.486377][T18487] [ 905.779790][T18487] Allocated by task 1: [ 905.783886][T18487] kasan_save_track+0x3e/0x80 [ 905.788620][T18487] __kasan_kmalloc+0x93/0xb0 [ 905.793238][T18487] __kmalloc_cache_noprof+0x31c/0x660 [ 905.798652][T18487] bus_add_driver+0x162/0x670 [ 905.803352][T18487] driver_register+0x23a/0x320 [ 905.808143][T18487] i2c_register_driver+0xbb/0x1a0 [ 905.813278][T18487] do_one_initcall+0x250/0x8d0 [ 905.818072][T18487] do_initcall_level+0x104/0x190 [ 905.823031][T18487] do_initcalls+0x59/0xa0 [ 905.827384][T18487] kernel_init_freeable+0x2a6/0x3e0 [ 905.832597][T18487] kernel_init+0x1d/0x1d0 [ 905.836989][T18487] ret_from_fork+0x51e/0xb90 [ 905.841610][T18487] ret_from_fork_asm+0x1a/0x30 [ 905.846411][T18487] [ 905.848755][T18487] The buggy address belongs to the object at ffff88802c4f7600 [ 905.848755][T18487] which belongs to the cache kmalloc-256 of size 256 [ 905.862822][T18487] The buggy address is located 56 bytes to the right of [ 905.862822][T18487] allocated 208-byte region [ffff88802c4f7600, ffff88802c4f76d0) [ 905.877629][T18487] [ 905.879979][T18487] The buggy address belongs to the physical page: [ 905.886436][T18487] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c4f6 [ 905.895245][T18487] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 905.903780][T18487] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 905.911352][T18487] page_type: f5(slab) [ 905.915357][T18487] raw: 00fff00000000040 ffff88813fea3b40 dead000000000100 dead000000000122 [ 905.923960][T18487] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 905.932566][T18487] head: 00fff00000000040 ffff88813fea3b40 dead000000000100 dead000000000122 [ 905.941260][T18487] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 905.949953][T18487] head: 00fff00000000001 ffffea0000b13d81 00000000ffffffff 00000000ffffffff [ 905.958729][T18487] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 905.967415][T18487] page dumped because: kasan: bad access detected [ 905.973883][T18487] page_owner tracks the page as allocated [ 905.979608][T18487] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18396927474, free_ts 0 [ 905.999444][T18487] post_alloc_hook+0x231/0x280 [ 906.004289][T18487] get_page_from_freelist+0x24dc/0x2580 [ 906.009855][T18487] __alloc_frozen_pages_noprof+0x18d/0x380 [ 906.015682][T18487] allocate_slab+0x77/0x660 [ 906.020211][T18487] refill_objects+0x331/0x3c0 [ 906.024910][T18487] __pcs_replace_empty_main+0x2b9/0x620 [ 906.030512][T18487] __kmalloc_cache_noprof+0x392/0x660 [ 906.035920][T18487] bus_add_driver+0x162/0x670 [ 906.040633][T18487] driver_register+0x23a/0x320 [ 906.045428][T18487] usb_register_driver+0x1e4/0x390 [ 906.050652][T18487] do_one_initcall+0x250/0x8d0 [ 906.055445][T18487] do_initcall_level+0x104/0x190 [ 906.060413][T18487] do_initcalls+0x59/0xa0 [ 906.064777][T18487] kernel_init_freeable+0x2a6/0x3e0 [ 906.070000][T18487] kernel_init+0x1d/0x1d0 [ 906.074354][T18487] ret_from_fork+0x51e/0xb90 [ 906.078971][T18487] page_owner free stack trace missing [ 906.084353][T18487] [ 906.086727][T18487] Memory state around the buggy address: [ 906.092380][T18487] ffff88802c4f7600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.100465][T18487] ffff88802c4f7680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 906.108550][T18487] >ffff88802c4f7700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 906.116641][T18487] ^ [ 906.120992][T18487] ffff88802c4f7780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 906.129111][T18487] ffff88802c4f7800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 906.137192][T18487] ================================================================== [ 906.147118][T18482] vivid-000: Enable Capture Cropping: true [ 906.157579][T18482] vivid-000: Enable Capture Composing: true [ 906.163832][T18482] vivid-000: Enable Capture Scaler: true [ 906.179614][T18482] vivid-000: Timestamp Source: End of Frame [ 906.183097][T18487] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 906.183172][T18487] CPU: 1 UID: 0 PID: 18487 Comm: syz.4.3149 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.183262][T18487] Tainted: [L]=SOFTLOCKUP [ 906.183292][T18487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 906.183327][T18487] Call Trace: [ 906.183361][T18487] [ 906.183385][T18487] vpanic+0x56c/0xa60 [ 906.183494][T18487] ? __pfx_vpanic+0x10/0x10 [ 906.183584][T18487] panic+0xc5/0xd0 [ 906.183668][T18487] ? __pfx_panic+0x10/0x10 [ 906.183765][T18487] ? preempt_schedule_thunk+0x16/0x30 [ 906.183842][T18487] ? preempt_schedule_thunk+0x16/0x30 [ 906.183907][T18487] ? try_module_get+0x46/0xc0 [ 906.184019][T18487] check_panic_on_warn+0x89/0xb0 [ 906.184105][T18487] ? try_module_get+0x46/0xc0 [ 906.184193][T18487] end_report+0x73/0x180 [ 906.184258][T18487] ? try_module_get+0x46/0xc0 [ 906.184346][T18487] kasan_report+0x128/0x150 [ 906.184413][T18487] ? try_module_get+0x46/0xc0 [ 906.184505][T18487] kasan_check_range+0x264/0x2c0 [ 906.184574][T18487] try_module_get+0x46/0xc0 [ 906.184673][T18487] dvb_device_open+0xef/0x350 [ 906.184751][T18487] ? do_raw_spin_unlock+0xf5/0x210 [ 906.184818][T18487] chrdev_open+0x4cd/0x5e0 [ 906.184884][T18487] ? __pfx_chrdev_open+0x10/0x10 [ 906.184951][T18487] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 906.185049][T18487] ? __pfx_chrdev_open+0x10/0x10 [ 906.185113][T18487] do_dentry_open+0x785/0x14e0 [ 906.185203][T18487] vfs_open+0x3b/0x340 [ 906.185276][T18487] ? path_openat+0x2df0/0x3860 [ 906.185371][T18487] path_openat+0x2e08/0x3860 [ 906.185466][T18487] ? __pfx_stack_trace_save+0x10/0x10 [ 906.185496][T18487] ? stack_depot_save_flags+0x33/0x810 [ 906.185592][T18487] ? __pfx_path_openat+0x10/0x10 [ 906.185626][T18487] ? __x64_sys_openat+0x138/0x170 [ 906.363221][T18487] ? do_syscall_64+0x14d/0xf80 [ 906.368015][T18487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.374240][T18487] ? __lock_acquire+0x6b5/0x2cf0 [ 906.379223][T18487] do_file_open+0x23e/0x4a0 [ 906.383770][T18487] ? __pfx_do_file_open+0x10/0x10 [ 906.388837][T18487] ? _raw_spin_unlock+0x28/0x50 [ 906.393725][T18487] ? alloc_fd+0x64b/0x6c0 [ 906.398088][T18487] do_sys_openat2+0x113/0x200 [ 906.402799][T18487] ? __pfx_do_sys_openat2+0x10/0x10 [ 906.408034][T18487] ? do_user_addr_fault+0xc6f/0x1340 [ 906.413347][T18487] __x64_sys_openat+0x138/0x170 [ 906.418226][T18487] do_syscall_64+0x14d/0xf80 [ 906.422843][T18487] ? trace_irq_disable+0x3b/0x150 [ 906.427901][T18487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.433994][T18487] ? clear_bhb_loop+0x40/0x90 [ 906.438785][T18487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.444703][T18487] RIP: 0033:0x7fa0fa15c84e [ 906.449145][T18487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 906.468869][T18487] RSP: 002b:00007fa0faf7ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 906.477315][T18487] RAX: ffffffffffffffda RBX: 00007fa0faf7b6c0 RCX: 00007fa0fa15c84e [ 906.485341][T18487] RDX: 0000000000000002 RSI: 00007fa0faf7ac00 RDI: ffffffffffffff9c [ 906.493342][T18487] RBP: 00007fa0faf7ac00 R08: 0000000000000000 R09: 0000000000000000 [ 906.501335][T18487] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 906.509334][T18487] R13: 00007fa0fa416038 R14: 00007fa0fa415fa0 R15: 00007fa0fa53fa48 [ 906.517343][T18487] [ 906.520985][T18487] Kernel Offset: disabled [ 906.525326][T18487] Rebooting in 86400 seconds..