last executing test programs: 2m5.426993887s ago: executing program 0 (id=1622): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x1000, &(0x7f0000b31000/0x1000)=nil}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r7}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000001d80)={0x18}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2m5.05924007s ago: executing program 0 (id=1626): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x4) 2m5.002310948s ago: executing program 0 (id=1627): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x5, 0x0, 0x0) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x0, 0x1, {0x1}}) syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m3.578329555s ago: executing program 0 (id=1634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{}]}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000480)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0xfffffffa, @remote, 0x80000000}], 0x6c) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r6, 0x7277, 0x0, 0x28, 0x0, 0x0) syz_clone(0x2080000, &(0x7f00000001c0)="9cc7bc4a627fed746f74f606c933471fd7b11544885e5e14f64bc2b6825b8f7f38650ef8d376f6e9efdd8a860e7bbb8190e6efcd290029e37fe330966e9e990a68ec090e5b5257b7c6b5c85a04f7cc7bb8964219b3cfb8b29d6de3b43073798a9f5efd0b", 0x64, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000280)="388e8da70c125de2e6607e6d3aa14c6764c18ab8770e9ef8283c8e3bf78de4214e3513ffbb3fd6c2bc8775ec23c2ab718687a241a0feb154f8283ea5eb47ab94655a528ecd3b16c6493f2ca319b500b2387d8625ee8e820ea250f47d9be9b62ddaad82137cf9b2e62289870de9eaf80b53bd397ed524") 2m1.879421957s ago: executing program 0 (id=1641): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000014000008"], 0x40}, 0x20000004) 2m0.067559335s ago: executing program 0 (id=1653): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) setreuid(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1}, {r1, 0x400}], 0x2, 0x483a4) prctl$PR_SET_IO_FLUSHER(0x41, 0x2) fcntl$setpipe(r1, 0x407, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2, 0x7f]) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c1905409904e25a0f090102070109021b0001000000000904000001ff53c2"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00000000ffffffff0000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88600, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x7fff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f00000a0000000000000000000000020005000000000002004e20e00000010000000000000000050017002b2000000a004e2200426d80a17b000005fc020020000000000000000000000000f8ffff"], 0x50}}, 0x0) 1m58.892366219s ago: executing program 32 (id=1653): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) setreuid(0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000040)=[{r1}, {r1, 0x400}], 0x2, 0x483a4) prctl$PR_SET_IO_FLUSHER(0x41, 0x2) fcntl$setpipe(r1, 0x407, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2, 0x7f]) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007c1905409904e25a0f090102070109021b0001000000000904000001ff53c2"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00000000ffffffff0000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x88600, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r6, 0x3b87, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x7fff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f00000a0000000000000000000000020005000000000002004e20e00000010000000000000000050017002b2000000a004e2200426d80a17b000005fc020020000000000000000000000000f8ffff"], 0x50}}, 0x0) 14.571140121s ago: executing program 4 (id=2066): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 12.511567346s ago: executing program 4 (id=2070): socket$kcm(0xa, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x80000000}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f00000013c0)=0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) close(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000580)=""/103) close(r0) 11.686927817s ago: executing program 4 (id=2076): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) 9.520918435s ago: executing program 1 (id=2085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc0b, 0x145, 0xd, 0x400007, 0x8, 0x4, 0xfffffffe}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x10000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x66000080) r4 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x48, 0xb, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x2, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x6, 0x8, 0x6, 0x10, 0x80}, 0x11e, &(0x7f0000000380)={0x5, 0xf, 0x11e, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "11c39c1edf1c4843838ea4cbfdd3aa5f"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "d314596653dea6929b41fd40fd134d93"}, @generic={0xea, 0x10, 0xb, "42b7b951b049444ece91563be0b48a298a1898f4cb47783d8a2815c1dea1a8efc4c23ca1dc3be95faf274dcc094fb9dfe27217762a36be3194cfa7b8f43118a11a292416869f2c2a2f033a72e0a95d7ca04d8a3e4ea0327aea2b86d09aa802580baf883670c2d6f0ce2bb07f1446df395f793c589f6bdc6c914592202a1b10b811eea2f45fced3e87916eef31cdadaab943add373817c21d690d689f5660588e6e1afe8a4179f299e802624a492861da2e98ac0d8bc7d2fbf6efc95fe70963de290809a98916be6731fd0cdff92bed6e0b619ef96b51e1a779d8922236c043aadf4026b3a1eacc"}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x416}}]}) unshare(0x10000400) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r7 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100000000000000feffffffffff", @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) 7.762344317s ago: executing program 4 (id=2086): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.415482154s ago: executing program 5 (id=2087): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ptrace$pokeuser(0x6, 0x0, 0x358, 0xfffffe7fffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141442, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r0, 0x2) fcntl$lock(r0, 0x25, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x4f, 0x22, 0x76, 0x10, 0xb05, 0x9202, 0x944f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x2, 0x1, 0xb7, 0xaf, 0xe0, 0xfc, [], [{{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00", @ANYRES8=r1, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x40084) 6.350933117s ago: executing program 2 (id=2089): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x8080) sendmsg$netlink(r2, &(0x7f0000000600)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000680)={0x142c, 0x3d, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x72, 0x0, 0x0, @pid=r3}, @nested={0x23a, 0xa8, 0x0, 0x1, [@generic="515847eb114c951fcb6afe7f57920c028f9ddf36d33fb0f2f8230831e0c0866271bdc3f8493cf8cf98ce8084a3cc50cbb6dd41906385cd4a567781072f2aee686977a7dc190c704cc8ab203539d1c6e67d46f094ca839942f2b7819cc7edf5a4bcb702af23b865ca4b9928919606fee1cb96637f90c2541ee7a4254eb39a8c4eb2b7e8ca7d3022bb469205eba55f440bf90ffdbb4f41fa76dcc8d3", @nested={0x4, 0x40}, @nested={0x4, 0xcc}, @typed={0xd, 0x11e, 0x0, 0x0, @binary="c88e9e2093fb11287a"}, @nested={0x4, 0x6c}, @generic="26fcf520beb826f215ca4646cf39934b93e0784a2fa592554772050e40d0a36f025b7de928e206af92918c7f91e95c34f5da3b8417a8b811d53b6a3849e23888ee9ebdb1db4d4282d50570f5890f819ca289ddf6e431f847fe0ddef59b7e3f2deb5d787751dbb83b236b5c0ae0271cb3e9e8bab9d0ac58d4c0b74183200d823debce77e91e6af727f598c7ecc05d61073e2fe6ef1fb6ea4e1e1c6cd9f7bf1edd640bad91e34735af3ef7039ea1b9", @generic="65b3f4a2dfc904966793e87e44fb400df744b77c4f5f0d0244f676bf9c05af3fe4d07fac47d9788bb78fcaf273fda8882a566cafd30b331bb61eba8bc0fbd8c8b3d40b41c539ff0f026a2736cdb0ec498edddb79e7eb76b310d229389036b7cc898e142a4d8fa0a9e1e0a9b8626d8f11674624eec9f623e46ec71a778699694995aa8cca737b1bd91b7150d5496bc8f9b3b7111333450c40aaa9b5259c7ec57b803788b5cc2a167b26730c3f71b7d52c5fe917881505e21758264b51d06a19cf55b4498d46e25bead3800f1eda850f55f1"]}, @nested={0x1018, 0x116, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x11e}, @generic="8714857af5d4442f043f7b6027dc34fcd209b76d00df3ac498516c8dd5a365edb62025f4808be70a8a209ff2329c521c7334cf1c486e9279162b6272d4c37ffe45da0914e74d823a1c834ff7af58fa5af560c64ec2ba53f1b3fed3a89021e2c61f472f81ac1fd0e488d2302da95262f2bce01f4bbc7671fd2ea3066ba73cc8d379811e907309d13948029d07219ab45559119caed42c9acb00b15e813d24f52086f5b6b865614cad474ba5c170a0f540dbbe3fe0c26c4346d2bc4bb5a5aa18bc1a6b4c541c66661bf53f6c754d3edc2b93f574ec765311f97b0e7bea9175273843b37878d94a596ba7ba48b61a6814c2abf8d3099979c0b6a4313f9cd82d371f1947747f8e8675ad126ee87525732b09cfc238f0d7ffb56b4cb828641ae0ade055a6c96eaf84ff4746d53c3a04bfc1cfe4dd15bebb6c4c456c925fced821bb0807c253eb8821665298f38f6e1f65a7c733f419011786ee3be73254b5aaa3fbda23faf72ee1aa3897edf40ccaec489e31252c49747822df6dea381215fe29fea9cc346cd6db8668e4fbd62b30c213ec9cdead9dd5af2e94913421ca51db2cdc7a8f58209e19fb63687bedfbed5f189edd0bfca8c78b8e99dce3ff172f5084cb43d07c6820c16c25a5b362ceb3fcc998e2b33e4fbb1c36deedb45e890120d9094fa7aecf905ec7285b6443072ea1a3885a7d4ff323228e6ff5ea6c35c9eda31ee0edc173f97da6b9316e7a5d9f85efb54d24fb5ecca5dad746172b3e3e296f0072eb2aac0c70e71e8ff05c0d1a74aa6b4e839116db7e38f331a25e33f4737a2837cde8079af4628fe1e27f8c9621c742bb7e7872e4c5b8f4a74fafa08b484d7b2edbb86f0ed65bb6f37a63927b92dea0cee4db67f70d1c6fd0e95981e16e513555514b21c9005f2c698d8a2a45b1514572de9c51b4456e007e105d48fff441123277e8c184223168b11483187aaad686d2db56a6e2586ced16664e958c0f41dfbd243a7e55e75b7221af142dc082b2778723efc8249633695448bace75f0c59c1264d1cec3c4ed7027ef5265aa9cd52f6261435ca4bdf892290cc3c5455397c30e50340858856e3cb7408f2ea56ae3e4f99f2da23666c0ec8ceeba3002499eabd0b8714f7b320cf6cc8684a18b7c069b94686016235f82e0999d6c469f8f9be3ae01fc0aef25d8a39bebea144d5c873dd42fa0f2a013b4193412211b65c359e75b03f3f7016b3b6506153725c6ff74574af114a8470e8bc602aca3c7ad5c3fbff575ae49167b0d64b5a6259485a1302119326709dc364ca499fbed5803676d594c343287dad6abc098729fcc68659c08452790e9d90b116d50e36839c31ea6b0aaccd284888d9104db0a731982d4ae7304ea6daff677c6c85d59c12a2be9805c43bc90c6a3aaff18652a74ea9089dc617bbf01a67df2587ea448baa341d67950bfbb82e276a020610e1708b1245df274ce0bf9fb93e71e4b20b658be7f2a3526b476074e63a28c659fefbd6d2ccce2805e0e082c6cb111f9ab2b0f86c2658655424237f075ea88dd45dca59ae84218f660fdf51f2c7e95cd8d0820b402f17a672a96a39a6f46cde688af70c1a05479a60c5661bf9ddc42817d3254764e3600e642759d20192f2c1ab75fbabe3b58c88e42878b89c84e6f3e0614d91a07ffca67ef013a01fd3fc62d871888837acaa929d8c5a7174d92cb521048122b14b6e1cbe4fe969ec035c105e8b475e4cba1be74948534ca92a5fc62ed358b5487d40903c5500b36af56a43056e78407db7d2ff33adf0d450b11aa7d28c27374dfd19b0ed8648186c8ae5b0a932860344d175d4b2b1562653ae28d36c75dad94c0653db09809894ee3ee5940fa34e3194031a1bd4aa43e2be5960ce0ae59bd325df169f5e42fddccf1592138e9fd91b9229895e9b7869fdbad6e7db2ea09a1eaee7f05274694054ea59bba4d0e1c37c61fe6d574075738d9002f3359d542df720a3eff495f7ea6dcf2a9d20f0801d4dff354d1944fa28cc0809b0fc5b823a5594ed73b76903e927aafa0f20a2af12927778f3c9e9690f3db15b258fa40a833ed47d3b1042ccbbda98288f7d168486dd92b880d2cbcf8a7deac4bfcc4b18b7c23410b60b3e942cf4b46a00ab20813c911f6b8f622362c59e86dfbfb3d2b433f876e49d67c286d67e81cb6d243f0c78fdcd97bd9e135684e5a91da1cacedfb612352f3c80718fe9aebf2cbe769413a762f686ed9419a05b87fc6a9b7b69abc5e0f03c18ee479db6ae2d6e4ae710a23444dbc3a53e4b5e5d65abe4ad8c680a4a0d2909ce854a53968157bcdcf8bc9f3bac548e0f3d4323f909935c4e6da0466dbb6f0540d8aea0ea69b7c8c95d24892b00b3eedbe5e5867ab128e03a37d3b1787964579aa14d7869301ab097955a25dbe8e9b66cd9b74855ebef9456e7f124ba62c19f1f767343a2a6222e298e1a9b06ad441c07abd5b8e8b5a85c50a7404bcbebc0f2b6f50a15a19c00dd865b3236b4ab87b0999a33a74cc979ab5de10c6e22dd111c01fe524702e572733298255b4c7ba511772af42d084b47ae709e28c02f3a392bb47bee0cc070e8f52df046063e02dc511685c8c4cc82c91ee2dd59fcd8ffe0371729e92a63c67d66ad90e9e1ec33a8d32b5c8c4872175f48162d6347e97241e58482c49366c9f091a546beee1d9eeeaede71369079ea2f8090497e876877a2b85908bddbb8e73878f04e00fe7801ce89112582e293a8b32896c442c05c40efda7e2a38e35349c6cb03c8d7bccd1aa2eda63619a7662406f29bb645e4348ac0da18e13307ad4045ab4927c9c4911c513ef66febf6c132a92553b6d2388227413410ad93b026a7e0457d51276d89cb111e0c0bef22d1b9a5c1d9e1dd7c9c4988fb68029e2ccef7b388cc00902f00aa4614e5fb675174b4309802d692b89a10f8e031b9e7aff79063d72b9712bfadc1e2ca0e703b787aab3598b169090dc86223826c4519f5b980ecc9ba136e868de86b6fa94a8caeb8ea962d1a80551dda6318363afde352b6f3d2cc6c5529ec35b719ff8397d959791fd7925c6426750052ce2b2f4001103f3916edf7346d25fa5efe904c72a91953b541d3f469f9d6ef783de76768c34990b106fe0fb776770538048508c97886590f2e64477bc311c9e6146172e089a028cde0e3eb585571809918d0175c153c01409c8408e96e3780002192179510c650890b7272784ffd4946162d2a06341e615f982a8d5102afe6fe12abbf59844852fc6a4d672407b965760ff5c51f5af418be8c1a60cd254a81c239658b593f09f7a6d25a261d71a955ee3d008c1772c065afecb48e7bd2ee9b6eb4a9bf0895dd148b78cbe3f3afcda94012cd1c9ffc66bf332c4abac6719163aef46d6dfb818f942b6dc8c54feb91998f748f612f1aeb9e0ea2535a951559267ee2de7b71a4a9ca52150582926a5487dca3d4a0f804dda3084809cb41213615da9615ca259d1cefd12bff74de4be60a884b6943f3a13550fff92d2b72ff6ff9472d8907dd5cef504990c3aaf659d0a0b894e2e2a981039a584e813d59efbdf9334171d8c527ce1349b98cd219e7e6494e8932c79a87b46f03a1a246c538ac4e2910944752f98758381aabe3551dcfba99ebc8d1d8f0ea7c69eef5f3bd184c44365018d7082708345e59c5323a81c666d2f12fd56750004ca0dc2611085603d0a7125dae2fc7a97845f56a05b5d96ca9ac8cc0b59e3b7786ba5d52bdc1703c17224b7adfbaccbb6e72bbe84b4ae5723bb9b3ea68c54d0643c4c360af67f875b2826fb64958df028c01e5cdea7d44b31b0938e15ea6ea2f450ffad67e9b9032c6ab5f1019caedce5e9fc1f21d39d7bf1e814a4f5046d45607860e367fc9fc264922ce86572746683933bc6572456f35171346a120e126d5ff37dbfd37c17b6a336ed3b432e3c9c03ca14645b59a8fda1ce7d39df481ee8b83651dbde6cbe0c76e7735f0ab8ae418657601b159bd4c4dd452ae295dcfe94296869c5217a676d7b5df0b5ea96b8929b85d5dda5e493ea8d55d066764ec442848d0d262bea07211d6887518c4f63da09958134eae51059f59e6c44c53d23e38f9106072bb1865c05acc584c1a39e69e63f107c486b57ad5b21718109a2abed579fa8d2ca570957744752f4f3397cf44bd261ee98e21014e63ef82ebcdcc2944b268b67439cd5be021dfb2f7e9e483febacddbeeca2e594982d9687bb00631ad017aea8cb89ecb4b5e12fea83ad1d66881655ec3865b6b85a5cda22fb56212e476eb87170a87ae85a3f9e1b212c59ae128043d6e9fa225f336e73384ac47b17cc874ab1196e6d095b4b2fd9db3919ede5caf54828c32b1eb5fa9d079e45cc035086e933d34592d3594f1ebb5f6baaf398c375a3758718717804ac1ee083a6f1381f6ee8b343e0727ec26dedf3c9cba5772026da47ca686bb606fcb3cb34caaacb43afa5a13e6fd43b86a7b1b9f4d69966103bc43d7c8e8205a36853a151b2462f842f6fb71af01cf1c023fff18b132f323d3cfcf673746fc5a4594f4b693a80be5894c3fe1d424d1f5863d310b9565918aa7c2cc3a132a059cae906886255c0ab9082089a04a5a706bde5438367cc1902fbd6325d7ae10f70511fd577d87e82a2d44d60e2b7ed11e181573fb789474aee66cb971944f4ab99eeceb40690cf4dff112dabbfa3fd4ec9e95f75d4f9a06000c9a76c84b6e95ff270ef25de497e796645ae5c45c7858fb1e1e3027a12ab4f968c4d41572938e3458dba31ca71d80ae6158248208d3dbba86640ef4d1c1fa9bc4c83c9425b408140fcfb4c3511b184dcc8fb044705d6de532965066b797550022c5fc44175024d1a66683d8db888ff01d0d65c3fa4ea09dff65853e959e34dcc0562d4544a047d71c1269a4eb5ce98bc3f6368e6fd9491d74cf5e59eae434315408d7fa80e7638eb8b9c2811349de5ea1fb1a8dd49fe384d1e4eabaa27cb3bffbb0dca74f2b201c9783eefe62e5424b9abcea18a66d25557c246130ff3cdc95404c3e542f2ccd34fdaaf141b7a1d92717acd0e33ef03f6c8941d4d524ecfbafadcd01a4da537967c60701a7638137078af7173f5706b9f40215a72d3fcaf0790bb31e7c1fc80e0ec8b04de599b41f3be4ffdbde9d2119223e4a9dc5e2320eb8a2aeb6c4242ec71291c9e8ab4c834eb3107fd9c38af659ccc70d6d7854fff964ed11124c872248bd9f030034b387dc5d7eb5f3209d3485c9d3821c8a837ab21c376734ce35816620e8b1438d68f4b1b6d3aed151734bd8340dfaf1963195b46b9e21aab324f694a97d300c01968590f87c5e62ebd18e3b2be933c561de7cd04f625e3ef256bcb04dbb672f0fc5c6dfbc02e2bc4e4640ea3c1ec78307bf95d8662f5a8c415ffd597fab012917c49748c21e9c7c2038540eb2bb3adc0cd72d3353deea691b0668f5cc0b29ba5afa70e7b4a7ce56a1ff34c3e5362a3f3814352166c4fe1ceeed680dbf160f6d14b517e52dcdd1c149eaf0d616144cbbc68a1e62f5989e61701de7daa81f198af6c2d701ffdb8d6ab0f4090b65a89927283542935b4d9738253210e570cbc96b42004c965dcfd2e57eb4d02d56dbcf3ab16f7881451242cb75c42b78ee95769eb398142923746bf94d92114bfc84e7b6155f5390867f004307058b6fd7f3b2be42b159e380eb5e761b0092dbc74fdda6c398fb95b3ce68928a3c066fd1827d1c90ea6e7cfd4cc8223930f75abfa34095c49dfaa390022037f0fe9e28064e787c6e54a921ac6c55d8ec2a990ace3ef96b03fc08d8a", @typed={0x8, 0x121, 0x0, 0x0, @u32=0x8742}]}, @nested={0xd0, 0xaa, 0x0, 0x1, [@typed={0xc, 0x10b, 0x0, 0x0, @u64=0x8001}, @generic="2cd89d377405c5181ad2579fc25e076b825d3c1158e736853457aa27981a0605d4463f9e3eeafd3ce76bfccdd3235047d70d17cba308ab97c5a2e4264c69f3bfc14f78672f69b1cf0c59210ee4f0536c2def61719b4d4757eb46634fe116896ed4db729334c70e5a6ccdbd22b202d6c6923edb66d92f2a89e06b0f658d3cdfd6f5836e5512b1342aaced0920d9afd4d59507ada50026a4b75491479b1993fbec1c033639f07a01bac7aa454818657ba97284360e6de0ec95fb1774ee381ab4cc"]}, @nested={0xee, 0xd1, 0x0, 0x1, [@generic="f42880e3b0b01999cf144fb3dc2689b42c7cbfb31df9a7c26f4ee438debbf0a6b27a93edff5aa23b75a43d61", @generic="6b74b6012fc2cc83805cc9006900056b0a572688afc8f04e3aa43bbb1f61c6e44757ad10ead226590abb714551b84880966195f9da44ee920cb732e8e137f3179c862b6fbabf254cfdae32f1c6f53b3f749ab2b06f397aba2f22e8363d22839f60ce8f332d2e03ee2d8744cf4a66e3f5071956cd0b42a0f47f7a698593cec243677decc76ed95d8454bf954483e8e15eee2d013f040a32b6fd9088ea3877c5fdd6ab02c3a050171e2ccba6b6735375d5b37a065aa0252afb434cfef005dc"]}]}, 0x142c}, {&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0800880005000000"], 0x1c0}, {&(0x7f00000000c0)={0x24, 0x36, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0x14, 0x56, 0x0, 0x0, @ipv6=@local}]}, 0x24}, {&(0x7f00000003c0)={0x228, 0x37, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x34, 0x14d, 0x0, 0x1, [@generic="e1535b7d986c6282a7ce02c26d22d6e6cc73536346627d442288e2d80c4b936eb0104d968debeeff4731099a", @typed={0x4, 0x125}]}, @nested={0x177, 0xbe, 0x0, 0x1, [@generic="9aeb13603b6128a4dffd7a0d67d230969aec8da7f449bac69ffea8fbe0281cff23e51544bb9e3944203655f4a558b7a8057725049d534a62ff67839903920311da6ccd03a494598c778a13ebc89bdbc8979b73bb1289a27cfdec9f33868ce242eaea0a5b854f06ec004927b9aaddc96449", @typed={0xc, 0x7, 0x0, 0x0, @u64=0x9}, @generic, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x80}, @nested={0x4, 0x11e}, @typed={0x8, 0x57, 0x0, 0x0, @str=':-$\x00'}, @generic="6d35c81a691dc82e0aec2b610217802736f1fcaf931313241fbfe7063c125a1ab7f56e1a71146251a5b3d234ff5bd6b335fc833057cf7ea5ee19f3cf4de07dcaa0171313682248cc2073abb8dff5c8cbf35d3600ffaf37124b41967d0e56a91f3abf24ac6dc5c35c478f13ccc22b42046c421898d7a2efc3451fe39e323c1ff152a07eefa84e1597411ac0d23f5f8c034b9d1f3983325dbce4f593ed59b039101a29705c6e274ddbb40ea9381d460d5489bab9ffcd38bd75319413aade5bc3cdaea979892d637868a24772cd783d23c8ffac721a3692ed82a12fcc19b833"]}, @generic="7687d5f2cc620f898378ae2fd178acea479902bba3f6d5158d2fb9bc6ced77cd800d4d8b41416ada77342f341473ca7b957284b73b56c25d127a2b6dd4a11f3afb37073e0c5315a33edca446bde8cba679afb382bee0ce812f899d619a3f4b0cd515d741d85444d037"]}, 0x228}, {&(0x7f0000001ac0)={0x1b0, 0x3b, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x62}, @nested={0x170, 0x3b, 0x0, 0x1, [@generic="893af743e29f4c7ba9eb2301953a235995fb590412d126ef5efd5b9babd63cb95f03fbc08946d3fca8d065a528eeecda5c098a613a4531399ffe749e077dddac8688b8029503c844d4ad17dc78c677d025e075607c4efe34cdaf16af8f1e640db51a95b594fce177c6c02af21903d2de6b96961566ba9819dbd3313a4e860204caaf7ff3579303eec2e2e0bc9c1a862ab74b5b2e85a395c2df32cba59670359deb5e297b9f915e972774bde703ddbebfa61e3a8841ad62f96d8e01cc6f5c5c155a1181bb07f88a7b6fe328fdad58461515dc12b45152a11916323d6a08787f", @typed={0x8, 0x73, 0x0, 0x0, @pid=r5}, @generic="4f21d49a71656ae560bc7b8c051877f1d206f1100615504ac1101ee8bcc072d72d4f248c53a936cdb47e69aa16f8b5aa451a919dbb66b991adff5bf6d1a82ec1c2bd0b3ad9697bb675152a42c011b51a1a8d77ba92319343ad4689d90522a417cc2222e1d66e", @generic="236b3f013f2fa8242941b60192a107dcb3a45d0b955a8fd0ea1946", @nested={0x4, 0xd9}]}, @generic="b94300403ddfed128f1291acce3b4b0e972e96c9637e2952f94333", @typed={0xf, 0x111, 0x0, 0x0, @str='/dev/adsp1\x00'}]}, 0x1b0}], 0x5, 0x0, 0x0, 0x4000000}, 0x4000c40) 5.979731869s ago: executing program 2 (id=2090): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000d0000000000000000000001000000000000000000000000000033"], 0xfdef) 5.704221749s ago: executing program 5 (id=2091): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5.690522349s ago: executing program 2 (id=2092): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x102, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x56}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.523465842s ago: executing program 2 (id=2093): unshare(0x2040400) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c00000004000000000000001c000000000000000000000008"], 0x68}, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 5.356918255s ago: executing program 1 (id=2095): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x40000000, 0x0, 0x21, 0x0, 0x0, 0x7}) 5.191374491s ago: executing program 4 (id=2096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) 4.879190426s ago: executing program 1 (id=2097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9b6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000040)=[{&(0x7f00000002c0)="8513645b47582e2a97a8ce85d9b4", 0xe}], 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3e, 0x4000, 0x0, 0x0}], 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./cgroup/pids.max\x00', 0x0, 0x4b000, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 4.508335142s ago: executing program 2 (id=2098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000501c0007800c00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) getpid() gettid() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x76, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) 2.833303027s ago: executing program 1 (id=2099): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(0x0, 0x800) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd, 0x4) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000008500000008000000950000"], &(0x7f0000000300)='GPL\x00', 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) timer_create(0x4, &(0x7f0000000580)={0x0, 0x37, 0x0, @tid=r0}, &(0x7f00000005c0)=0x0) timer_getoverrun(r4) 2.65936459s ago: executing program 3 (id=2100): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000060000008"], 0x40}, 0x20000004) 2.356359247s ago: executing program 3 (id=2101): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0016}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000001c40)=@raw={'raw\x00', 0xc01, 0x3, 0x1230, 0x10e8, 0x5002004a, 0x0, 0x10e8, 0x0, 0x1198, 0x3c8, 0x3c8, 0x1198, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'wg2\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x1290) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000000380)={0x2, 0x3, @loopback}, 0x10) listen(r5, 0x729) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000240)=0x8) ppoll(&(0x7f0000000000)=[{r0, 0xa}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x20, 0x29, "fafc00"}, 0x0, 0x1, {0x0}}) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x22a240, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x40000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000000)={0x10, 0x1, r10}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000340)={0x20, r10, &(0x7f0000000280)=[{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x2}], 0xdeadbeef, 0x8, 0x6}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={r7, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x8000, 0xa}, &(0x7f00000001c0)=0x90) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) pwritev(r11, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 2.25440364s ago: executing program 5 (id=2102): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESDEC=0x0]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000000)) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) recvmmsg(r6, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000bc0), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r7) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000140)="240000005a001f001007f4d655c63589ce9e04020800038005000000ffc8bbb86ec81ffd", 0x24) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 2.119709099s ago: executing program 1 (id=2103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"70ca253e230ef7cea884834d6c465f42def02f94c45b1f01cfd13fd2861758c6a3f127481e685c30df940fabe7e21f351b0c7c1b8de44552a95e7bc2997931185cdd971d5e6eb64794c87e1fec87a1a270a7bbbab5be8c0815954251fc2e177c022a16298decd4a2566ade604f962c561b894cdd8c8cf2a10c9da36d16647cdcbf6e575406baf4b5730e3e7e57622384fb84a0e9cd2b8ad525a43aebfbccad8e0e39512d2daeafc434c2f2234c59fa4ddb14477949df126432e20d94eac5ea6b880dbb7862010f40482da409cef850a503d0d8eba1d9b0de9c4fe0c1aa8af96afa487c89608b76c9791ae6bd00939d567acb5b11d54398aa649c9f60131e2ce92df810af5dd279c14f70a97c4735249817a2bf26af0fb9befc6be91ee11e10efaeb20bf2e58e4698b820bc7493d7cb4cd9a67b4517c589ef0bbd2f0deb3f8df2701a65c9cffa95e9d91fec02ad09a5822c683e346bc75160941a0e85ddf2485ee64ac7320e72767a0ed3a0788435f6a137773a9327450b780de47ad36a45a2431f4cec1ba7a1c63676f21456878798e8881ac7d692c182893bbb158790c8b30ae773a4c487bd6c5248d0ac861160f114f2fb0bf313f3eed9040d7ddbca03d2fcf6450b658209e4976ce602d5e976de5b17550fdd711206c667e644e5c58732549a1d9ea03ef6a4b96b9342851bbd4d9d31965ff1a5c96ff57f2af85b15519b08641eb6c3451167a28954ab9c713ce8c9890165717d52ef0557dd5c79d861deb2c66fb1a40b4f4c850970a74b5154b1120222a0b5bf5a1935623cb37042a9e98026b8800c53a187a532d759187da97f679e9525d79db3d253ab8622bca7357d164c51a762426296f9e518687bcc3d34264e16de8c8e2d74454c4ea5278fdcfc9a935fc059fb8476eb0c1d8f61b58a7bbe509b687a00ecf37095f2b4aed0b9a0f4c61f38254448081651bada010e316a23b1a22e598314c581e88a21a8b428ddf33e082499e0e8964543e36ecc72f759ee86432298f175aaf1350f54193965539dca6eaa159765c87ad5a6649b47e80b2dd93b076cccc9cbc95da67f3d52c94c5cd683c38c9f548da3b8714d44b5109f761dab9800a258759a8597e995615ba771d74479c8728d933733fbe62a722807e1839f5a537ebb2ee9d5e93252d64abfab5a7eac00413623924f48f9b304df00634b82c95650eb4bec42d1386c37a993ad5fae4483a9177421c454026af1ccce94b80b785671fc209264ce374a9add2ce2d95a08c31ad5c62d6608c338ff5a28d5400ea4d71f847381a83c2a7ba1437cebd9b665377595d5cd8f82f462b7763bcc5d0453a3ed95a99d316040b8f3578f516e79d53cccf98fd4548902a5deaaca146b799b4cdeeb60a429beb6d912153b793b725eca39b8ab21e34966dca1d24edbb891443cd619ef0435ea2ef563fbf3f3a07dff8f29381b13990a2d909e43dd3f57e176d7808e2d91b1364c1748880d96bc29101b0987f0e280886dd20c40b6bec7e721ebda7954fb1e77e1abb1a47da1ff213f994a22759a7d186f4d0f23e7f042b97051c9b12ca3bd47a30f05a0e8648201450f68b78ed541ed6ea9a920731caec520c2d6991ccbff20cedacbd07e94046ab083a6be822a020c19889f4bef2e057910c81e340a2869197906e2e9da4f8dc11bf778a72aa5590254a72520aa1a80ff8d02eb47e98053b23e9c98358c871e04669606838f8eb599dc0df5287dde674c05636a403fdb22f9b19182db445d732bd397d154d66dc1b9206b638ed38b15a3ed5eb72d28401398f7379541c715faf1b78985df2f41be10ec3c27ce1ea495cfd682a3efb9049ebab3e2b97b371b487c7a56bf16d371742002be0fa27693dadfc10290b37825f2d4a1a7385fdd812d71fcb951a3f329a183132894bdd256dc078e0b6216ebd341fc56c1175c80bd74064610a65655e4140a8c5920a516060f1a02e867de51136d2a82cf0450914a61288d92506ad04fc7e54a4003d3b102345fbe2e3fd5a75714345eefd25ef74aadb17a52ff41c7597163cd7de6e24c26d157176be3c3936c77916f8b51b9cd0ac9c583371a5f68add5561c306867ca4592965bd8932716f45dece476ea210a56386f102039316da5e3e632b0ebaab0856c1803f21c44d67fa9ec35c1aedf79ac427adb62f48cfab8c308faafadd00d24194e95a51f2f7c60a2fec8e094b71f8c1e6b0ba27c32c30e8da05f928d848fa295e3c9594220bafd302bf915d34a1bb20638aafaba3bd55b6f58b0427a863a961372add3d240a72913cf78772487b073d3db96b7447e2a85de6e8df404f49cd79feaddc69ed4e8061a6122d4e12d3cd32f20360b6f57c0d29cdbfd8f0fbb0f58328213680ca465efc7a891fce48174b12473f90850b56f246f83826e13ba4f39041d0344032be484a11473d31dce46cf28166680237199d55ae53b18acc4d67cd0ea8859d0362b68cda330e801e7fcceb0421a029615511900777583c2da500fd048382e54435ad7be5cec1499c6fa3e4688107b9946ea2f81fe935be159fafaacd07dc6a9de0d4d6a02a493e53a572c2880e59b29aebd31fa7e0bbd08119586d923cf76e3bb0ee5083e31e26dd2e103ce687b9aad198d7cb650965ca3a7d63155f4976127e37ce8f4668f4583419b3587cafb33b202816539000c9f45422c4642aa5e3aa6fe82c83f9151476f3c10e4531a419cdd72455c271d20317658c116b3f122c6bfe87db2a63d8235eeed3d3dc92e3b640cffcd0672dad125b9b7d850b8b27f5c1e3c89b121c5449acb9377c33f4a2ea99a580ff98e2d6e937834d556ea2afece5e75850600ddb540693d0f37a45e7cd9c4a186f34e18e334bbb2e9302e6e7159d73e6c654e5e6748e1ba24fec14a9a37701b9dcb3b8cdad2f6e6edcb955ef3f33f2db362c1f08ae514af64c4c02f079726128be3a487320dfaaf7feac2845878c23fa21b1edff5f5df1268cef6e94308a75161f1cb3aee1d8c1d574e1bd15a97df84983768ec12453c1d5418ab30568cee229c3ff0ee163d159165b5841c701a622e63236301e0a05764cf4ab14e4ddb6d6a0c10689f23decbffdfa5c71c7384bd986f76872033f47b920ac84f5decdd029444ec0b5780fcbc298350af77020ea5b328e1d6ea51f5ad6a2aac2c4e6ac3da48c1671fafba498e676b16ae1d11cc7d835f2a5ab0014fc1b408057620356e261e4721e1fd6cc4fb789641bab7c7897d29904d9bdf14c8b62f640da42776c10f4763dce9d0cd7b0231f4281cc48e9e6255a03ee0ae5ff7a13db515e2fcde1664d8030d48fd0936a9eb2b35ae4989d8ce527a5987d46f34f5f67e302ddc86ef8d1358a3929462b8cf302238172f18984c0129204eb84f88e4875c9ed62c4df4dec9b31a35fc47f49f371800e929f6ff6afb7006419581fb776dbd8e3669b799c920605ea26fbfe8b2eceba96e80c430967b4f154f9a8191b0ad02ad0e43b7219d4a1426c71e7dd69b52c35fbce6be14c07f7c38539a9c043e585f0b1baaaab411271962e1e28a9638dab16c568b8911c25d1100f970f629869f4bbe30efbaee3ec3e086477be178a882cbbbf698e6f456a3d0ee5f64325bb238b55f70f51cd4884b3002276c05ce7f8e801cc0238395fd98f884a12e6a980e79f434734a6d29f6724e2e6b4e41d72c7694a03fe1ca3d8ce9df03eafe3d7273b922cf942b224d795445c8716b092be6de27ac9e9e365d2dfa79a702fadc4472f42fe383b16688b4e9cd64ac288a466ed152f1fcc91f8d22912c750bbfe15ca304fcd82ff1c11c12f5df148d74a27caaf75780128fe17ad86c3b7f3d97659ffa1abbe292b2896c82f76d1b503eb80eae07fb1e7f68da96a536817c12d964b9f4ef6b6f901373ac365cbf6d276ad8b295a30de3288bc50ce3744b7d63c183e1fb072463baa366f67bcf6e7aa01c4fc129654413dba4747786ae3967a77a6f5d0bb24b1a18e276e9899a8fdc45df61ef84368964d77204c187b12d06ed7961b239aa3aad6b2ae75edebe0018335b77f9ff7a90a3518417ebad569ca9df6d9d028c347b0bc0754ff05bd30bc10057c339eb09fbdd875cb4a0760aa2e0a88633bf5b4beccbd3146046a490d66278cf75de76671c4ba8124fc9de5427ad120b202b8424e734eddbe08466259e757214f58b47cf3aaa21b8c98f6e8d4f66e9fda897732827855d987e6f8e310fce14a05034cf1d53d211aa4ad56eab17bbd39fc69d950ba5d14bcd5db8605950b6785acd04f00cf054998613dda8a6630102a86550205331444ce0248f2c44d3edec23a935cee7b093e47fd4fd72cae4bd1421adff6f2c13525692c511c19bd4008624510aafcf120801d7f6366806d3e377e2e39f47e341a40f812715e8a1130ee9770f998cea169038f43ba9bbefbff9882a85fe984a39c1930b7255ae8ddce424c1e5468557f072a3a76aa6932cc16a2633b27572a0696bd2a3303deba70cca4cad54b34ddb67acee56a95dde9c157890e36784576a9b8f96163c463c2c8392fb54e34da218c42616b8186c6e45298973af8769446a9fced6440543e4b355c0d1f2288f769ad5c62394f5ac6907d811c9f0e5c228ff01d7837833ffbe3b0fc4e45ee6356fe8fca29b6a5a7f498cce5c765ab77108ede41f455aa325d387bbf175a525104878d344d32e5afdfb68c4108551c2a45089c943456deb57f5dfe634fbcd305c076a4b93bb30286b474317e7daeadd45fa1a3fa21b74832c932773fa4d4f95794355c7692fd58e0b8a331e77d06d590ba1b14ed1349febb6782a695f16d8ebae63dd5e14650783f904e8f4835f941ff1f9d07208541a90f3412308074a882236abfb0540ded765b8ee18aef943ae608d5d8889d3d7d6b4871cdfb548d408dc67fee80ded13ad01e99cd9d6630099566f811d23859c65a87440790729e136e972734047262a8be47c4d8794fd4605b284db6365a8da83da9a3c3f6951e13ece5b2a454aa9e9d3421153e6e822cf05896a59561cea7d7ceec0a5e80141706ce6ff41429806d80fea11b222eda4ee1e3d983970fd31dc529de82e0b37d8b1d58692c1a45bdaee904359020d9bbad4c16ac667ad3c966019e988c498fa9041a7eece51ea6fd9292e522bd3f62876a3b29fb5cc759913495364bb505d200b9a7aa327f252453251099d5d815de77e81c4d75ada7630b4a72b184594d8e97ba8b09fcec10bd873e04b50f9f914067fe92d28691aec9f15c205ec4d59022798715348ed787418c2c7127f7077dbd83e72590675b237a9a0f88603b07679bdfb24e6dfdbc7718fc72d060c3ca002e42d5d93ab5b13ddab1aca5ac8cf245951e0ab9bb80060421053ff84e1b83751b7fa3449c326c5c5d5e0c0261a7e3ed779e376b3522b831e7d33a296e95d06ce7275f1f7d52b69e0116e4ade52cfc508e3bf9717aeb3320e3621c5d2fe06ef071d00c89698af91c37bdf52228f029412d18018baf7daae644fd700ba99331593f470ebf919f7bb360ab433cc5425b38ee89e1bc8c3e82da0b96c41a4506023146da65d5c1ef3b1bc968aa03c60933d6792e34bb221dec52509ece5d0976088acc0c36685f599e900aef4e86377e4206d0e54cf7fa76bbee156ceea501176807879f705ca5fea9ec6464d61b3c8f89ae03bef165e086a53104c0fa87c8007996bfd1c8f43d7d8ac3a7ae4e1bdf94d5fa9092eb580ca5756181d89f22f12b7e8d253958f0b281688e915e729b40cfe98ec9a8c0211b0c10ed3b2e88dc210b757153a797ccc22d349a7a419", 0x1000}}, 0x1006) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000e0000000000000000000001000000000000000000000000000033"], 0xfdef) 2.000077168s ago: executing program 3 (id=2104): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@nat={'nat\x00', 0x670, 0x5, 0x5c0, 0x370, 0x440, 0xfeffffff, 0x248, 0x370, 0x528, 0x528, 0xffffffff, 0x528, 0x528, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff, 'veth0_to_bond\x00', 'ip6tnl0\x00', {}, {}, 0x89}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team_slave_0\x00', {0x0, 0x800, 0xd0, 0x8, 0x7fff, 0xfab, 0x4, 0x0, 0x78}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x8, 0x3, 0x5c, 0x4, 0x1000, 0x0, 0x8, 0x4, 0x78, 0x20}, {0x1}}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x9, 0x1]}}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {0xff}, 0x2}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x84, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@realm={{0x30}, {0xe4, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x620) 1.805284807s ago: executing program 1 (id=2105): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c81, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={[&(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000001c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000d00)={[&(0x7f0000000840)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1.759716086s ago: executing program 3 (id=2106): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="8500000009000000660000000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e}, 0x23) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa2, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71]}) 1.444327773s ago: executing program 3 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000070a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) 976.740956ms ago: executing program 5 (id=2108): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xffd1}], 0x11}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000280)=@n={0x1, 0xa0, @generic=0x3, 0x10}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a09141ab575b19457a1ea931ce436c0209ca0ba394f7ccd728957cf4e8042b10ef547de8f0e9d5144acf07528bc6dd9d72a09c22beffd7d174e779aad3183c3ccf4d8c73ad07bafae61ed40d05cc563c1fa8c483351d6cf2063ad0525efb52e83bf39c51c2f37f5b2f4c28328974aa114f0980e0c4ef016337f35bab8cc2f6ca930f7aa9a1ddf6fe00d7f42f6ab9fa4ec0f88582f885c9f449ab298960e23d0033582a143d7e72870e6d19e705259e02d59f62e875aac538", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x0, 0x37c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000000c0)=""/65}, 0x20) syz_emit_ethernet(0xac, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 839.57393ms ago: executing program 4 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x200400d0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x84, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9b6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r7, &(0x7f0000000040)=[{&(0x7f00000002c0)="8513645b47582e2a97a8ce85d9b4", 0xe}], 0x1) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x3e, 0x4000, 0x0, 0x0}], 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./cgroup/pids.max\x00', 0x0, 0x4b000, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 771.652257ms ago: executing program 3 (id=2110): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d10402064d8c57ff202030109021b0001000000000904"], 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a8090902"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000140)=0x2000) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r4, &(0x7f00000000c0)='1', 0x1) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) landlock_create_ruleset(&(0x7f0000000340)={0x7e64, 0x3, 0x2}, 0x18, 0x0) r5 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r5, 0x15b77000) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000200)=0x6) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x25c25000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) 508.324716ms ago: executing program 5 (id=2111): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x3, 0x100, "3d13f90791588d3151c8acf911a2f4c4df4160e46f5397895d28d34b458f4234", 0x8, 0x3, 0x7, 0x7, 0x6}) io_uring_enter(r0, 0x4d59, 0x82e, 0x14, &(0x7f00000000c0), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7ff, 0x8000]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xa2d97867b44f7437}, 0x24040040) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000802}, 0x240400c4) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f00000003c0)=""/19, &(0x7f0000000400)=0x13) epoll_pwait(r0, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x5, 0x800, &(0x7f0000000480)={[0x101]}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x4, 0x56, 0x9, 0x3, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x20, 0x10, 0x101, 0x67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x2f, 0x9d, 0x4, 0x10, 0x4a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0x1, 0xffffff7f, {{0x18, 0x4, 0x0, 0x2c, 0x60, 0x66, 0x0, 0xfd, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100, {[@lsrr={0x83, 0x1f, 0xc8, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @multicast2, @private=0xa010101, @broadcast]}, @timestamp_addr={0x44, 0x2c, 0x4f, 0x1, 0x2, [{@remote, 0x7da}, {@multicast1, 0x1000}, {@multicast2, 0x9}, {@multicast2}, {@empty, 0x26}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x4, 0xf5, 0x5, 0x9, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x6, 0xa}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={0x0, @initdev, @initdev}, &(0x7f0000000900)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000b00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)={0x178, r4, 0x800, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000040) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000b40)={@host}) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040844) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) read$sequencer(r0, &(0x7f0000000d40)=""/63, 0x3f) 143.488472ms ago: executing program 5 (id=2112): pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x3a13, 0xfffffffc], [0x0, 0x0, 0x1000000, 0xffffffff], [0x3, 0xf6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="582ff59cc9ab000000000000000400006f5f62a8296e21d583be923fc14ee4e6d0be710c78c88fd6ad9b6824e2453a220aaa8b104bbf0280b7c471f3d814d4aed4a61ef463a624002efb8d03d5d909bbada077c50211b9a12bdc384a9d75e418cf43f1400458cea8b02e6ab3e1703c9ae6ae4ddf90a8d235404a012f45004fb2db45d856ef92eaf07a678d31a60e49b7b67e924e38f5ec949c8261cb052ef0094639a4af4fdf4844e31a2390a45e7bd9dc9597479811eb92bb21d42e9563a4e39a49ba8c8c02ccb341"], 0x10}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe000, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) 0s ago: executing program 2 (id=2113): socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x3d, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32], 0x40}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8020000000000000000000000000bbfe8000000000000000000000000000aa3c0022eb", @ANYBLOB], 0x0) kernel console output (not intermixed with test programs): ][ T57] usb 1-1: config 0 has no interface number 0 [ 419.505049][ T57] usb 1-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.507753][ T57] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.554199][ T57] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.565469][ T57] usb 1-1: Product: syz [ 419.569677][ T57] usb 1-1: Manufacturer: syz [ 419.587559][ T57] usb 1-1: SerialNumber: syz [ 419.603878][T11950] dvb-usb: bulk message failed: -22 (3/0) [ 419.612883][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 419.620531][ T57] usb 1-1: config 0 descriptor?? [ 419.637063][T11950] dvb-usb: bulk message failed: -22 (17/0) [ 419.684632][ T10] usb 4-1: media controller created [ 419.684850][T11950] dvb-usb: bulk message failed: -22 (3/0) [ 419.698584][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 419.794036][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 419.853112][ T57] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 419.878261][ T10] usb 4-1: selecting invalid altsetting 6 [ 419.905570][ T10] usb 4-1: digital interface selection failed (-22) [ 419.912184][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 419.931912][ T57] usb 1-1: MIDIStreaming interface descriptor not found [ 419.952367][ T10] usb 4-1: setting power OFF [ 419.964548][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 419.992368][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 420.041170][ T10] (NULL device *): no alternate interface [ 420.201716][ T57] usb 1-1: USB disconnect, device number 61 [ 420.208076][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 420.261965][ T10] usb 4-1: USB disconnect, device number 53 [ 421.004473][ T979] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 421.334184][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 421.363208][ T979] usb 3-1: config 106 has an invalid interface number: 33 but max is 0 [ 421.371747][ T979] usb 3-1: config 106 has no interface number 0 [ 421.458712][ T979] usb 3-1: config 106 interface 33 has no altsetting 0 [ 421.495284][ T979] usb 3-1: New USB device found, idVendor=07c4, idProduct=a103, bcdDevice= 9.b9 [ 421.504881][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.514544][ T979] usb 3-1: Product: syz [ 421.535900][ T979] usb 3-1: Manufacturer: syz [ 421.564765][ T979] usb 3-1: SerialNumber: syz [ 421.804215][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 421.866948][T11992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.877255][T11992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.921950][ T979] ums-sddr55 3-1:106.33: USB Mass Storage device detected [ 421.954280][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 421.961305][ T10] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 421.974572][ T10] usb 4-1: config 1 has no interface number 0 [ 421.980733][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 421.996724][ T979] ums-sddr55 3-1:106.33: Quirks match for vid 07c4 pid a103: 8 [ 422.004534][ T10] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 422.019403][ T10] usb 4-1: config 1 interface 105 has no altsetting 0 [ 422.028645][ T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 422.038064][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.048188][ T10] usb 4-1: Product: syz [ 422.052427][ T10] usb 4-1: Manufacturer: syz [ 422.057578][ T10] usb 4-1: SerialNumber: syz [ 422.074726][T12007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 422.094383][T12007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 422.097958][ T979] usb 3-1: USB disconnect, device number 61 [ 422.404249][ T57] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 422.574610][T12007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 422.581924][T12007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 422.617270][ T57] usb 5-1: config 0 has no interfaces? [ 422.625752][ T57] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 422.673385][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.709552][ T57] usb 5-1: Product: syz [ 422.725266][ T57] usb 5-1: Manufacturer: syz [ 422.733561][ T57] usb 5-1: SerialNumber: syz [ 422.753309][ T57] usb 5-1: config 0 descriptor?? [ 422.755478][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1636'. [ 423.547545][T12007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.556190][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 423.568729][T12007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.694598][ T10] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 423.745395][T12021] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 423.824876][ T10] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 423.865143][ T10] usb 4-1: USB disconnect, device number 54 [ 423.880657][ T10] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 424.027115][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 424.044438][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 424.061947][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 424.082083][T12055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.484505][ T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 424.680767][ T24] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 424.730287][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.749909][ T24] usb 3-1: config 0 has no interfaces? [ 424.839499][ T6981] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.882900][T12066] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1645'. [ 425.039369][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 425.064706][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.079545][ T978] usb 5-1: USB disconnect, device number 63 [ 425.198140][ T24] usb 3-1: Product: syz [ 425.291075][ T24] usb 3-1: Manufacturer: syz [ 425.291098][ T24] usb 3-1: SerialNumber: syz [ 425.308629][ T6981] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.331506][ T24] usb 3-1: config 0 descriptor?? [ 425.548052][T12076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1649'. [ 425.738416][ T6981] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.901320][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 425.901337][ T30] audit: type=1326 audit(1751046185.750:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 425.952228][ T30] audit: type=1326 audit(1751046185.780:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.100129][ T30] audit: type=1326 audit(1751046185.790:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.254929][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 426.307399][ T30] audit: type=1326 audit(1751046185.790:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.414328][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 426.421669][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 426.446037][ T30] audit: type=1326 audit(1751046185.790:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.565426][ T30] audit: type=1326 audit(1751046185.790:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.603828][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.650536][ T30] audit: type=1326 audit(1751046185.790:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.676483][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 426.718707][ T30] audit: type=1326 audit(1751046185.790:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.723608][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 426.818866][ T6981] batadv11: left allmulticast mode [ 426.834555][ T6981] batadv11: left promiscuous mode [ 426.842351][ T6981] bridge0: port 13(batadv11) entered disabled state [ 426.851184][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 426.869366][ T30] audit: type=1326 audit(1751046185.790:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 426.937732][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 426.962340][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 426.972483][ T30] audit: type=1326 audit(1751046185.850:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12082 comm="syz.3.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98d158e929 code=0x7ffc0000 [ 427.012290][ T6981] batadv10: left allmulticast mode [ 427.033113][ T6981] batadv10: left promiscuous mode [ 427.054672][ T6981] bridge0: port 12(batadv10) entered disabled state [ 427.074155][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.140392][ T6981] batadv9: left allmulticast mode [ 427.141139][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.158371][ T6981] batadv9: left promiscuous mode [ 427.163745][ T6981] bridge0: port 11(batadv9) entered disabled state [ 427.196399][ T6981] batadv8: left allmulticast mode [ 427.201486][ T6981] batadv8: left promiscuous mode [ 427.229054][ T6981] bridge0: port 10(batadv8) entered disabled state [ 427.270264][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 427.366538][ T6981] batadv7: left allmulticast mode [ 427.391944][ T6981] batadv7: left promiscuous mode [ 427.403092][ T6981] bridge0: port 9(batadv7) entered disabled state [ 427.405697][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 427.422810][ T24] usb 3-1: USB disconnect, device number 62 [ 427.445529][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 427.506598][ T6981] batadv6: left allmulticast mode [ 427.512624][ T6981] batadv6: left promiscuous mode [ 427.521963][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.543901][ T6981] bridge0: port 8(batadv6) entered disabled state [ 427.590518][ T6981] bond2: left allmulticast mode [ 427.595726][ T6981] bond2: left promiscuous mode [ 427.601543][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.620860][ T6981] bridge0: port 7(bond2) entered disabled state [ 427.648383][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 427.692608][ T6981] bridge0: port 6(batadv5) entered disabled state [ 427.702825][ T9] usb 4-1: string descriptor 0 read error: -22 [ 427.709902][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 427.724826][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1658'. [ 427.733937][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.760937][ T6981] batadv4: left allmulticast mode [ 427.790156][ T6981] bridge0: port 5(batadv4) entered disabled state [ 427.804788][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 427.859386][ T6981] batadv3: left allmulticast mode [ 427.872116][ T6981] batadv3: left promiscuous mode [ 427.887679][ T6981] bridge0: port 4(batadv3) entered disabled state [ 427.925783][ T6981] batadv2: left allmulticast mode [ 427.947308][ T6981] batadv2: left promiscuous mode [ 427.965660][ T6981] bridge0: port 3(batadv2) entered disabled state [ 427.985884][ T24] usb 4-1: USB disconnect, device number 55 [ 428.038345][ T6981] bridge_slave_1: left allmulticast mode [ 428.057842][ T6981] bridge_slave_1: left promiscuous mode [ 428.079216][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.121685][ T6981] bridge_slave_0: left allmulticast mode [ 428.130616][ T6981] bridge_slave_0: left promiscuous mode [ 428.148506][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.371403][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 428.384623][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 428.394741][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 428.404718][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 428.412549][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 429.515806][ T6981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.535215][ T6981] bond_slave_0: left promiscuous mode [ 429.551398][ T6981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.576205][ T6981] bond_slave_1: left promiscuous mode [ 429.606412][ T6981] bond0 (unregistering): Released all slaves [ 429.625805][ T6981] bond1 (unregistering): Released all slaves [ 429.763219][T12138] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1663'. [ 429.774460][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 429.844355][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 429.946013][ T6981] bond2 (unregistering): Released all slaves [ 429.978830][T12127] vlan2: entered promiscuous mode [ 430.209432][ T6981] _Z`Ԁ@: left promiscuous mode [ 430.484916][ T5837] Bluetooth: hci2: command tx timeout [ 430.561556][ T6981] tipc: Left network mode [ 431.045622][T12175] vivid-000: disconnect [ 431.487436][T12155] vivid-000: reconnect [ 431.974417][ T5910] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 432.013200][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 432.262358][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.295608][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 432.314452][ T5910] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.329558][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.342788][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.372249][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 432.391802][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.428035][ T9] usb 3-1: config 0 descriptor?? [ 432.564501][ T5837] Bluetooth: hci2: command tx timeout [ 432.588792][ T5910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.638157][T12208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.648712][T12208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.663061][T12210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.681941][T12210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.840344][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.861610][ T9] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 432.868784][ T5910] usb 5-1: Product: syz [ 432.878203][ T9] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 432.890908][ T5910] usb 5-1: Manufacturer: syz [ 432.923743][ T5910] usb 5-1: SerialNumber: syz [ 432.929988][ T9] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 432.967111][ T9] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 432.991295][ T5910] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 433.018107][ T9] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x0 [ 433.028067][ T5910] cdc_ncm 5-1:1.0: bind() failure [ 433.054981][ T9] hid-rmi 0003:06CB:81A7.0010: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 433.102509][ T6981] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 433.154681][ T9] usb 3-1: USB disconnect, device number 63 [ 433.351308][T12216] fido_id[12216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 433.531995][T12125] chnl_net:caif_netlink_parms(): no params data found [ 433.668206][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'. [ 433.699499][ T978] usb 5-1: USB disconnect, device number 64 [ 433.937325][ T6981] hsr_slave_0: left promiscuous mode [ 433.965134][ T6981] hsr_slave_1: left promiscuous mode [ 433.985135][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.114325][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.172574][ T6981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.200388][ T6981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.328025][ T6981] veth1_macvtap: left promiscuous mode [ 434.349762][ T6981] veth0_macvtap: left promiscuous mode [ 434.364479][ T6981] veth1_vlan: left promiscuous mode [ 434.383366][ T6981] veth0_vlan: left promiscuous mode [ 434.646867][ T5837] Bluetooth: hci2: command tx timeout [ 434.935074][ T6981] batadv1 (unregistering): left promiscuous mode [ 435.040894][ T6981] team0 (unregistering): Port device batadv1 removed [ 435.714426][ T5910] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 435.908121][ T5910] usb 5-1: config 0 has no interfaces? [ 435.954333][ T5910] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 435.986285][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.998409][ T5910] usb 5-1: Product: syz [ 436.006104][ T5910] usb 5-1: Manufacturer: syz [ 436.023338][ T5910] usb 5-1: SerialNumber: syz [ 436.036399][ T5910] usb 5-1: config 0 descriptor?? [ 436.303542][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.313812][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.462949][ T6981] team_slave_1 (unregistering): left promiscuous mode [ 436.486426][ T6981] team0 (unregistering): Port device team_slave_1 removed [ 436.566529][ T6981] team_slave_0 (unregistering): left promiscuous mode [ 436.575648][ T6981] team0 (unregistering): Port device team_slave_0 removed [ 436.734221][ T5837] Bluetooth: hci2: command tx timeout [ 437.379134][T12277] loop2: detected capacity change from 0 to 7 [ 437.387631][ T6011] loop2: [ 437.390794][ T6011] loop2: partition table partially beyond EOD, truncated [ 437.400515][T12277] loop2: [ 437.403661][T12277] loop2: partition table partially beyond EOD, truncated [ 438.369864][T12289] vlan3: entered promiscuous mode [ 438.417164][T12125] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.432571][T12125] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.463889][T12125] bridge_slave_0: entered allmulticast mode [ 438.497185][T12125] bridge_slave_0: entered promiscuous mode [ 438.536085][T12125] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.572536][T12125] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.628870][T12125] bridge_slave_1: entered allmulticast mode [ 438.673551][T12125] bridge_slave_1: entered promiscuous mode [ 438.789864][T12125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.849964][T12125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.882900][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1688'. [ 439.075146][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 439.201589][T12125] team0: Port device team_slave_0 added [ 439.229875][T12125] team0: Port device team_slave_1 added [ 439.436012][T12125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.479721][ T24] usb 5-1: USB disconnect, device number 65 [ 439.485931][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.596352][T12125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.640605][T12125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.682034][T12125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.764453][T12125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.844442][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 440.092414][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.098877][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.217603][T12125] hsr_slave_0: entered promiscuous mode [ 440.255176][T12125] hsr_slave_1: entered promiscuous mode [ 440.924436][ T5910] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 441.108026][ T5910] usb 5-1: config 0 has no interfaces? [ 441.130532][ T5910] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 441.139855][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.156501][ T5910] usb 5-1: Product: syz [ 441.202044][ T5910] usb 5-1: Manufacturer: syz [ 441.233232][ T5910] usb 5-1: SerialNumber: syz [ 441.271900][ T5910] usb 5-1: config 0 descriptor?? [ 441.708547][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.735818][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.576337][T12125] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.790852][T12398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 443.941217][T12125] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 444.001884][T12398] bridge0: port 8(batadv7) entered blocking state [ 444.009200][T12398] bridge0: port 8(batadv7) entered disabled state [ 444.028401][T12398] batadv7: entered allmulticast mode [ 444.060741][T12398] batadv7: entered promiscuous mode [ 444.075865][T12125] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.108132][T12125] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.288711][T12411] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1715'. [ 444.491258][T12125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.540229][ T12] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 444.549622][ T12] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 444.575469][T12125] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.626078][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.633223][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.663977][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.671129][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.766690][T12416] vivid-000: disconnect [ 444.832043][T12125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.879574][T12125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.904352][ T979] usb 5-1: USB disconnect, device number 66 [ 445.270808][T12396] vivid-000: reconnect [ 445.317308][ T1624] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 445.394346][ T1624] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 445.529241][ T1624] usb 2-1: USB disconnect, device number 46 [ 445.958447][T12438] netlink: 'syz.2.1717': attribute type 4 has an invalid length. [ 446.279887][T12125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.354255][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 446.547439][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 446.577561][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 446.614176][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.622245][ T9] usb 2-1: Product: syz [ 446.679183][ T9] usb 2-1: Manufacturer: syz [ 446.683861][ T9] usb 2-1: SerialNumber: syz [ 446.738745][T12125] veth0_vlan: entered promiscuous mode [ 446.757792][ T9] usb 2-1: config 0 descriptor?? [ 446.796874][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 446.815999][T12125] veth1_vlan: entered promiscuous mode [ 446.841929][ T9] usb 2-1: setting power ON [ 446.874264][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 446.921696][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 446.966874][T12125] veth0_macvtap: entered promiscuous mode [ 446.974979][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 446.984576][T12431] dvb-usb: bulk message failed: -22 (3/0) [ 446.990356][T12431] dvb-usb: bulk message failed: -22 (17/0) [ 447.006753][T12431] dvb-usb: bulk message failed: -22 (3/0) [ 447.013348][ T9] usb 2-1: media controller created [ 447.026923][T12125] veth1_macvtap: entered promiscuous mode [ 447.052654][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 447.165731][T12125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.187922][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.226448][T12125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.268077][ T9] usb 2-1: selecting invalid altsetting 6 [ 447.273866][ T9] usb 2-1: digital interface selection failed (-22) [ 447.314453][T12125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.343195][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 447.361064][T12125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.384236][ T9] usb 2-1: setting power OFF [ 447.394510][T12125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.403258][T12125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.412161][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 447.424906][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 447.438035][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 447.456520][ T9] (NULL device *): no alternate interface [ 447.529130][T12459] batadv4: entered promiscuous mode [ 447.594614][T12459] batadv4: entered allmulticast mode [ 447.602054][T12459] bridge0: port 5(batadv4) entered blocking state [ 447.633798][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 447.636922][T12459] bridge0: port 5(batadv4) entered disabled state [ 447.724480][ T9] usb 2-1: USB disconnect, device number 47 [ 448.056650][T12480] loop2: detected capacity change from 0 to 7 [ 448.069664][T12480] loop2: [ 448.073912][T12480] loop2: partition table partially beyond EOD, truncated [ 448.124218][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.211658][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.280881][ T8835] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 448.290235][ T8835] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 448.430031][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.491771][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.542980][T12491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'. [ 449.020070][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 449.134237][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 449.187167][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 449.194964][ T9] usb 2-1: can't read configurations, error -61 [ 449.215309][T12501] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1654'. [ 449.246343][T12503] FAULT_INJECTION: forcing a failure. [ 449.246343][T12503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.296031][T12503] CPU: 1 UID: 0 PID: 12503 Comm: syz.4.1736 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 449.296056][T12503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.296070][T12503] Call Trace: [ 449.296078][T12503] [ 449.296085][T12503] dump_stack_lvl+0x189/0x250 [ 449.296114][T12503] ? __pfx____ratelimit+0x10/0x10 [ 449.296138][T12503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.296162][T12503] ? __pfx__printk+0x10/0x10 [ 449.296179][T12503] ? __might_fault+0xb0/0x130 [ 449.296204][T12503] should_fail_ex+0x414/0x560 [ 449.296227][T12503] _copy_from_user+0x2d/0xb0 [ 449.296244][T12503] ___sys_recvmsg+0x12e/0x510 [ 449.296269][T12503] ? __pfx____sys_recvmsg+0x10/0x10 [ 449.296313][T12503] ? __fget_files+0x3a0/0x420 [ 449.296342][T12503] do_recvmmsg+0x307/0x770 [ 449.296366][T12503] ? __pfx_do_recvmmsg+0x10/0x10 [ 449.296396][T12503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 449.296433][T12503] __x64_sys_recvmmsg+0x190/0x240 [ 449.296457][T12503] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 449.296475][T12503] ? rcu_is_watching+0x15/0xb0 [ 449.296503][T12503] ? do_syscall_64+0xbe/0x3b0 [ 449.296527][T12503] do_syscall_64+0xfa/0x3b0 [ 449.296548][T12503] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.296569][T12503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.296593][T12503] ? clear_bhb_loop+0x60/0xb0 [ 449.296611][T12503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.296631][T12503] RIP: 0033:0x7f56c718e929 [ 449.296646][T12503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.296661][T12503] RSP: 002b:00007f56c800e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 449.296678][T12503] RAX: ffffffffffffffda RBX: 00007f56c73b5fa0 RCX: 00007f56c718e929 [ 449.296689][T12503] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 449.296699][T12503] RBP: 00007f56c800e090 R08: 0000000000000000 R09: 0000000000000000 [ 449.296709][T12503] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 449.296718][T12503] R13: 0000000000000000 R14: 00007f56c73b5fa0 R15: 00007f56c74dfa28 [ 449.296743][T12503] [ 449.324298][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 449.326275][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.530625][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.536616][ C1] hrtimer: interrupt took 232527589 ns [ 449.594412][ T1624] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 449.634263][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 449.636651][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.641855][ T9] usb 2-1: can't read configurations, error -61 [ 449.676496][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 449.688150][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 449.699394][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 449.710579][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 449.723527][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 449.732585][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.753916][ T24] usb 3-1: config 0 descriptor?? [ 449.759740][T12496] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 449.791208][ T1624] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 449.810228][ T9] usb usb2-port1: attempt power cycle [ 449.861576][ T1624] usb 6-1: can't read configurations, error -22 [ 450.005209][ T1624] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 450.189712][ T1624] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 450.198201][ T5910] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 450.217870][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 450.225845][ T1624] usb 6-1: can't read configurations, error -22 [ 450.253275][ T1624] usb usb6-port1: attempt power cycle [ 450.267492][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 450.286713][ T9] usb 2-1: can't read configurations, error -61 [ 450.296452][ T24] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 450.385426][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 450.408512][ T5910] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 450.447394][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.455931][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 450.532295][ T5910] usb 5-1: Product: syz [ 450.532412][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 450.548072][ T5910] usb 5-1: Manufacturer: syz [ 450.569544][ T5910] usb 5-1: SerialNumber: syz [ 450.601500][ T9] usb 2-1: can't read configurations, error -61 [ 450.614577][ T1624] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 450.658382][ T5910] usb 5-1: config 0 descriptor?? [ 450.682924][ T9] usb usb2-port1: unable to enumerate USB device [ 450.707430][ T1624] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 450.741211][ T5910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 450.814980][ T1624] usb 6-1: can't read configurations, error -22 [ 450.898052][ T5910] usb 5-1: setting power ON [ 450.915046][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 450.941031][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1737'. [ 451.024333][ T1624] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 451.085798][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 451.120811][ T5910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 451.135046][ T1624] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 451.148830][ T1624] usb 6-1: can't read configurations, error -22 [ 451.155349][ T5910] usb 5-1: media controller created [ 451.164625][ T1624] usb usb6-port1: unable to enumerate USB device [ 451.242056][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.330485][ T5910] usb 5-1: selecting invalid altsetting 6 [ 451.356461][ T5910] usb 5-1: digital interface selection failed (-22) [ 451.378973][ T5910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 451.407009][ T5910] usb 5-1: setting power OFF [ 451.428685][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 451.458923][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 451.490694][T12538] netlink: 336 bytes leftover after parsing attributes in process `syz.3.1740'. [ 451.510423][ T5910] (NULL device *): no alternate interface [ 451.630669][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 451.634626][ T24] usb 3-1: reset high-speed USB device number 64 using dummy_hcd [ 451.711691][ T5910] usb 5-1: USB disconnect, device number 67 [ 451.798564][T12544] netlink: 'syz.4.1741': attribute type 21 has an invalid length. [ 451.895784][ T24] usb 3-1: device descriptor read/64, error -32 [ 451.990231][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1742'. [ 452.060904][T12549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1743'. [ 452.354199][ T5910] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 452.555807][ T5910] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 452.584328][ T978] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 452.588785][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.667114][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 452.685238][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.704910][ T5910] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.723889][ T5910] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 452.736002][ T1624] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 452.774464][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 452.798295][ T5910] usb 5-1: Product: syz [ 452.802507][ T5910] usb 5-1: Manufacturer: syz [ 452.805795][ T57] usb 3-1: USB disconnect, device number 64 [ 452.841704][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 452.852352][ T978] usb 4-1: config 0 has no interfaces? [ 452.867117][ T5910] cdc_wdm 5-1:1.0: skipping garbage [ 452.904325][ T1624] usb 2-1: Using ep0 maxpacket: 32 [ 452.912718][ T1624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.928591][ T5910] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 452.949002][ T5910] cdc_wdm 5-1:1.0: Unknown control protocol [ 452.959095][ T1624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.010022][ T1624] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 453.036986][T12551] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 453.057422][ T978] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 453.057814][ T5946] usb 5-1: USB disconnect, device number 68 [ 453.083819][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.088215][ T1624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.160687][T12573] vivid-000: disconnect [ 453.224030][ T978] usb 4-1: Product: syz [ 453.239985][ T978] usb 4-1: Manufacturer: syz [ 453.245726][ T1624] usb 2-1: config 0 descriptor?? [ 453.270661][ T978] usb 4-1: SerialNumber: syz [ 453.300095][ T978] usb 4-1: config 0 descriptor?? [ 453.334317][T12561] vivid-000: reconnect [ 454.203569][ T1624] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 454.358318][ T1624] ft260 0003:0403:6030.0012: chip code: 6424 8183 [ 454.634350][ T1624] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 454.836845][ T1624] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 454.954237][ T978] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 455.050583][T12562] ft260 0003:0403:6030.0012: ft260_i2c_read: failed with -38 [ 455.212156][ T978] usb 5-1: config 0 has no interfaces? [ 455.328216][ T978] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 455.363443][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.404242][ T5946] usb 2-1: reset high-speed USB device number 52 using dummy_hcd [ 455.404339][ T978] usb 5-1: Product: syz [ 455.492579][ T978] usb 5-1: Manufacturer: syz [ 455.514772][ T978] usb 5-1: SerialNumber: syz [ 455.548650][ T978] usb 5-1: config 0 descriptor?? [ 455.793238][T12602] netlink: 'syz.5.1753': attribute type 13 has an invalid length. [ 455.870338][T12608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1755'. [ 455.912221][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.023350][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.151500][ T24] usb 4-1: USB disconnect, device number 56 [ 456.169695][T12587] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.215334][T12615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'. [ 456.247446][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 456.331562][T12621] loop2: detected capacity change from 0 to 7 [ 456.339531][T12621] loop2: [ 456.342567][T12621] loop2: partition table partially beyond EOD, truncated [ 456.378101][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 456.388705][ T1624] usb 2-1: USB disconnect, device number 52 [ 456.446048][ T9] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 456.612771][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 456.671136][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 456.721287][ T9] usb 6-1: Product: syz [ 456.735544][ T9] usb 6-1: Manufacturer: syz [ 456.753429][ T9] usb 6-1: SerialNumber: syz [ 456.789710][ T9] usb 6-1: config 0 descriptor?? [ 456.881502][ T1624] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 457.925762][ T1624] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 458.023950][ T57] usb 5-1: USB disconnect, device number 69 [ 458.824217][ T9] usb 6-1: USB disconnect, device number 6 [ 458.967265][T12662] loop6: detected capacity change from 0 to 7 [ 459.019931][T12662] Dev loop6: unable to read RDB block 7 [ 459.062583][T12662] loop6: unable to read partition table [ 459.087206][T12662] loop6: partition table beyond EOD, truncated [ 459.121393][T12662] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 459.163295][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'. [ 459.178440][T12664] batadv8: entered promiscuous mode [ 459.183856][T12664] bridge0: port 9(batadv8) entered blocking state [ 459.208583][T12664] bridge0: port 9(batadv8) entered disabled state [ 459.263062][T12664] batadv8: entered allmulticast mode [ 459.286357][T12667] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1768'. [ 459.599324][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1770'. [ 459.807804][ T8835] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 459.817655][ T8835] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 459.972265][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 459.984413][T12684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.090805][T12689] vlan2: entered promiscuous mode [ 461.137750][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.161686][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.196781][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.386415][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.435846][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.459040][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.520434][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.571987][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.612555][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.651304][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.846027][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.855472][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 461.899789][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 462.044955][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 462.052415][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 462.135497][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 462.142950][ T978] hid-generic 0003:0004:0009.0013: unknown main item tag 0x0 [ 462.204485][ T978] hid-generic 0003:0004:0009.0013: hidraw0: USB HID v0.07 Device [syz0] on syz0 [ 462.272878][T12737] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1785'. [ 463.701359][T12755] netlink: 'syz.2.1790': attribute type 11 has an invalid length. [ 464.087550][T12760] vlan3: entered promiscuous mode [ 464.391480][T12775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.824642][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 465.062989][ T24] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 465.082194][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.208694][ T24] usb 6-1: config 0 has no interfaces? [ 465.274453][ T24] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 465.285695][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.330745][ T24] usb 6-1: Product: syz [ 465.340698][ T24] usb 6-1: Manufacturer: syz [ 465.354013][ T24] usb 6-1: SerialNumber: syz [ 465.416435][ T24] usb 6-1: config 0 descriptor?? [ 466.764270][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 466.807313][T12802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1798'. [ 467.024285][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 467.036804][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 467.140201][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 467.325022][ T5910] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 467.494860][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 467.563963][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.595498][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.614772][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 467.646153][ T24] usb 6-1: USB disconnect, device number 7 [ 467.668864][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.712457][ T5910] usb 4-1: config 0 has no interfaces? [ 467.726782][ T5910] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 467.743618][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.809256][ T5910] usb 4-1: Product: syz [ 467.832530][ T5910] usb 4-1: Manufacturer: syz [ 467.848808][ T5910] usb 4-1: SerialNumber: syz [ 467.869228][ T5910] usb 4-1: config 0 descriptor?? [ 467.941031][ T9] usb 5-1: usb_control_msg returned -32 [ 467.945097][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.971973][ T9] usbtmc 5-1:16.0: can't read capabilities [ 468.097682][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.136641][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.162056][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.219039][T12828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1803'. [ 468.398941][ T24] usb 5-1: USB disconnect, device number 70 [ 468.547115][T12835] vlan3: entered promiscuous mode [ 469.354951][T12859] netlink: 'syz.1.1807': attribute type 10 has an invalid length. [ 469.371931][T12859] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1807'. [ 469.467113][ T978] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 469.637755][ T978] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 469.646239][ T978] usb 3-1: config 0 has no interface number 0 [ 469.802511][ T978] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 469.836085][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.871401][ T978] usb 3-1: Product: syz [ 469.881556][ T978] usb 3-1: Manufacturer: syz [ 469.889981][ T978] usb 3-1: SerialNumber: syz [ 469.909400][ T978] usb 3-1: config 0 descriptor?? [ 470.130880][ T978] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 470.241911][ T978] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 470.276853][ T978] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 470.357375][ T978] usb 3-1: media controller created [ 470.416065][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.480059][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1813'. [ 470.548530][T12879] bridge0: port 6(batadv5) entered blocking state [ 470.572698][T12879] bridge0: port 6(batadv5) entered disabled state [ 470.589655][T12879] batadv5: entered allmulticast mode [ 470.613732][T12879] batadv5: entered promiscuous mode [ 470.845583][ T978] DVB: Unable to find symbol dib7000p_attach() [ 470.851799][ T978] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 470.860603][ T978] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 470.869780][ T978] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 470.882089][ T978] usb 3-1: media controller created [ 470.894659][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 470.912133][ T978] dib0700: the master dib7090 has to be initialized first [ 470.943087][ T978] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 470.946357][ T1624] usb 4-1: USB disconnect, device number 57 [ 471.103515][ T36] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 471.112919][ T36] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 471.184929][ T978] rc_core: IR keymap rc-dib0700-rc5 not found [ 471.227701][ T978] Registered IR keymap rc-empty [ 471.232892][ T978] dvb-usb: could not initialize remote control. [ 471.294151][ T978] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 471.579748][T12897] loop2: detected capacity change from 0 to 7 [ 471.655842][T12897] loop2: [ 471.658902][T12897] loop2: partition table partially beyond EOD, truncated [ 471.763310][T12903] vlan3: entered promiscuous mode [ 471.771051][ T978] usb 3-1: USB disconnect, device number 65 [ 471.929478][ T978] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 472.508906][T12922] program syz.4.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.619377][T12922] bridge0: port 7(batadv6) entered blocking state [ 472.653913][T12922] bridge0: port 7(batadv6) entered disabled state [ 472.677560][T12922] batadv6: entered allmulticast mode [ 472.800748][T12922] batadv6: entered promiscuous mode [ 472.838204][T12938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.035698][T12940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.286020][ T13] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 473.295603][ T13] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 473.384648][ T5910] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 473.635662][ T5910] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 473.722761][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.734249][ T978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.907246][ T5910] usb 2-1: config 0 has no interfaces? [ 474.025521][ T978] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 474.033830][ T978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.044767][ T978] usb 6-1: config 0 has no interfaces? [ 474.097907][ T978] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 474.107094][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.115276][ T978] usb 6-1: Product: syz [ 474.124859][ T978] usb 6-1: Manufacturer: syz [ 474.129526][ T978] usb 6-1: SerialNumber: syz [ 474.169023][ T5910] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 474.185474][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.292144][ T978] usb 6-1: config 0 descriptor?? [ 474.294360][ T5910] usb 2-1: Product: syz [ 474.301533][ T5910] usb 2-1: Manufacturer: syz [ 474.314142][ T5910] usb 2-1: SerialNumber: syz [ 474.383580][ T5910] usb 2-1: config 0 descriptor?? [ 475.924365][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 476.465498][T12983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 476.633688][ T978] usb 6-1: USB disconnect, device number 8 [ 477.014241][ T24] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 477.088911][ T5910] usb 2-1: USB disconnect, device number 53 [ 477.218087][ T24] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 477.246975][ T24] usb 3-1: config 0 has no interface number 0 [ 477.276316][ T24] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 477.303913][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.344630][ T24] usb 3-1: Product: syz [ 477.355440][ T24] usb 3-1: Manufacturer: syz [ 477.373203][ T24] usb 3-1: SerialNumber: syz [ 477.387162][ T24] usb 3-1: config 0 descriptor?? [ 477.506678][ T978] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 477.622869][ T24] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 477.641852][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 477.658650][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 477.677449][ T978] usb 5-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 477.705213][ T24] usb 3-1: media controller created [ 477.735031][ T978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.791338][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 477.837396][ T978] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 477.889914][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 477.922740][ T978] usb 5-1: SerialNumber: syz [ 478.027580][ T24] DVB: Unable to find symbol dib7000p_attach() [ 478.033832][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 478.084978][ T24] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 478.124670][ T24] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 478.133478][ T24] usb 3-1: media controller created [ 478.177636][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.211647][ T978] usb 5-1: cannot find UAC_HEADER [ 478.234662][T13016] loop2: detected capacity change from 0 to 7 [ 478.261901][T13016] loop2: [ 478.265939][ T24] dib0700: the master dib7090 has to be initialized first [ 478.287222][T13016] loop2: partition table partially beyond EOD, truncated [ 478.294771][ T24] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 478.312681][ T978] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 478.386110][ T978] usb 5-1: USB disconnect, device number 71 [ 478.522744][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 478.564804][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 478.571296][ T24] Registered IR keymap rc-empty [ 478.678781][ T24] dvb-usb: could not initialize remote control. [ 478.698784][ T24] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 479.464071][ T24] usb 3-1: USB disconnect, device number 66 [ 480.284631][ T24] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 481.322097][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1852'. [ 482.144210][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 482.172423][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1860'. [ 482.184308][ T1624] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 482.191993][ T5910] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 482.326574][ T9] usb 4-1: config 0 has no interfaces? [ 482.354878][ T1624] usb 5-1: Using ep0 maxpacket: 8 [ 482.360107][ T5910] usb 6-1: Using ep0 maxpacket: 16 [ 482.376819][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 482.398946][ T1624] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.416969][ T5910] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 482.434385][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.442663][ T5910] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.453605][ T1624] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 482.467072][ T9] usb 4-1: Product: syz [ 482.471296][ T9] usb 4-1: Manufacturer: syz [ 482.476454][ T5910] usb 6-1: config 0 has no interface number 0 [ 482.482614][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.493948][ T9] usb 4-1: SerialNumber: syz [ 482.529444][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 482.540082][ T9] usb 4-1: config 0 descriptor?? [ 482.554193][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.569421][ T1624] usb 5-1: config 0 descriptor?? [ 482.588610][ T5910] usb 6-1: Product: syz [ 482.606523][ T5910] usb 6-1: Manufacturer: syz [ 482.625561][ T1624] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 482.631805][ T5910] usb 6-1: SerialNumber: syz [ 482.658772][ T5910] usb 6-1: config 0 descriptor?? [ 482.894374][ T5910] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 482.904529][ T5910] usb 6-1: No valid video chain found. [ 482.991849][ T978] usb 4-1: USB disconnect, device number 58 [ 483.452243][T13112] syz_tun: entered promiscuous mode [ 483.465219][T13112] batadv_slave_0: entered promiscuous mode [ 483.478123][T13112] batadv_slave_0: left promiscuous mode [ 483.558909][T13112] syz_tun: left promiscuous mode [ 483.924506][ T1624] gspca_vc032x: reg_w err -110 [ 483.929941][ T1624] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 483.960195][ T978] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 483.968041][ T24] usb 6-1: USB disconnect, device number 9 [ 484.146182][ T978] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 484.180777][ T978] usb 4-1: config 0 has no interface number 0 [ 484.217568][ T978] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 484.251747][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.291413][ T978] usb 4-1: Product: syz [ 484.311629][ T978] usb 4-1: Manufacturer: syz [ 484.345657][ T978] usb 4-1: SerialNumber: syz [ 484.386556][ T978] usb 4-1: config 0 descriptor?? [ 484.622511][ T978] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 484.666637][ T978] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 484.691446][ T978] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 484.727117][ T978] usb 4-1: media controller created [ 484.749383][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.954460][ T10] usb 5-1: USB disconnect, device number 72 [ 484.971701][ T978] DVB: Unable to find symbol dib7000p_attach() [ 484.995599][ T978] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 485.065141][ T978] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 485.107315][ T978] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 485.155792][ T978] usb 4-1: media controller created [ 485.192925][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 485.254851][ T978] dib0700: the master dib7090 has to be initialized first [ 485.294047][ T978] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 485.474213][ T978] rc_core: IR keymap rc-dib0700-rc5 not found [ 485.480556][ T978] Registered IR keymap rc-empty [ 485.500156][ T978] dvb-usb: could not initialize remote control. [ 485.546207][ T978] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 485.748357][T13159] vivid-000: disconnect [ 485.920232][T13144] vivid-000: reconnect [ 486.561111][ T978] usb 4-1: USB disconnect, device number 59 [ 486.873502][ T978] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 487.086016][ T5837] Bluetooth: unknown link type 13 [ 487.098941][ T5837] Bluetooth: hci3: connection err: -111 [ 487.105386][ T5837] Bluetooth: unknown link type 13 [ 487.111896][ T5837] Bluetooth: hci3: connection err: -111 [ 487.117690][ T5837] Bluetooth: unknown link type 13 [ 487.122777][ T5837] Bluetooth: hci3: connection err: -111 [ 487.128968][ T5837] Bluetooth: unknown link type 13 [ 487.134024][ T5837] Bluetooth: hci3: connection err: -111 [ 487.139778][ T5837] Bluetooth: unknown link type 13 [ 487.161240][ T5837] Bluetooth: hci3: connection err: -111 [ 487.167719][ T5837] Bluetooth: unknown link type 13 [ 487.172774][ T5837] Bluetooth: hci3: connection err: -111 [ 487.178512][ T5837] Bluetooth: unknown link type 13 [ 487.183581][ T5837] Bluetooth: hci3: connection err: -111 [ 487.190433][ T5837] Bluetooth: unknown link type 13 [ 487.196687][ T5837] Bluetooth: hci3: connection err: -111 [ 487.202348][ T5837] Bluetooth: unknown link type 13 [ 487.207628][ T5837] Bluetooth: hci3: connection err: -111 [ 487.213290][ T5837] Bluetooth: unknown link type 13 [ 487.218480][ T5837] Bluetooth: hci3: connection err: -111 [ 487.225069][ T5837] Bluetooth: unknown link type 13 [ 487.230130][ T5837] Bluetooth: hci3: connection err: -111 [ 487.235899][ T5837] Bluetooth: unknown link type 13 [ 487.240931][ T5837] Bluetooth: hci3: connection err: -111 [ 487.246583][ T5837] Bluetooth: unknown link type 13 [ 487.251608][ T5837] Bluetooth: hci3: connection err: -111 [ 487.257388][ T5837] Bluetooth: unknown link type 13 [ 487.262412][ T5837] Bluetooth: hci3: connection err: -111 [ 487.268183][ T5837] Bluetooth: unknown link type 13 [ 487.273322][ T5837] Bluetooth: hci3: connection err: -111 [ 487.279154][ T5837] Bluetooth: unknown link type 13 [ 487.285903][ T5837] Bluetooth: hci3: connection err: -111 [ 487.299912][ T5837] Bluetooth: unknown link type 13 [ 487.305310][ T5837] Bluetooth: hci3: connection err: -111 [ 487.311036][ T5837] Bluetooth: unknown link type 13 [ 487.316469][ T5837] Bluetooth: hci3: connection err: -111 [ 487.322140][ T5837] Bluetooth: unknown link type 13 [ 487.327316][ T5837] Bluetooth: hci3: connection err: -111 [ 487.333347][ T5837] Bluetooth: unknown link type 13 [ 487.338543][ T5837] Bluetooth: hci3: connection err: -111 [ 487.345068][ T5837] Bluetooth: unknown link type 13 [ 487.350156][ T5837] Bluetooth: hci3: connection err: -111 [ 487.355958][ T5837] Bluetooth: unknown link type 13 [ 487.364274][ T5837] Bluetooth: hci3: connection err: -111 [ 487.369959][ T5837] Bluetooth: unknown link type 13 [ 487.376118][ T5837] Bluetooth: hci3: connection err: -111 [ 487.376686][T13183] syzkaller1: entered promiscuous mode [ 487.381760][ T5837] Bluetooth: unknown link type 13 [ 487.396757][ T5837] Bluetooth: hci3: connection err: -111 [ 487.402756][ T5837] Bluetooth: unknown link type 13 [ 487.407915][ T5837] Bluetooth: hci3: connection err: -111 [ 487.413603][ T5837] Bluetooth: unknown link type 13 [ 487.419001][ T5837] Bluetooth: hci3: connection err: -111 [ 487.424756][ T5837] Bluetooth: unknown link type 13 [ 487.429812][ T5837] Bluetooth: hci3: connection err: -111 [ 487.435584][ T5837] Bluetooth: unknown link type 13 [ 487.440651][ T5837] Bluetooth: hci3: connection err: -111 [ 487.446553][ T5837] Bluetooth: unknown link type 13 [ 487.451635][ T5837] Bluetooth: hci3: connection err: -111 [ 487.457472][ T5837] Bluetooth: unknown link type 13 [ 487.462981][ T5837] Bluetooth: hci3: connection err: -111 [ 487.468723][ T5837] Bluetooth: unknown link type 13 [ 487.473826][ T5837] Bluetooth: hci3: connection err: -111 [ 487.479663][ T5837] Bluetooth: unknown link type 13 [ 487.484783][ T5837] Bluetooth: hci3: connection err: -111 [ 487.490428][ T5837] Bluetooth: unknown link type 13 [ 487.495541][ T5837] Bluetooth: hci3: connection err: -111 [ 487.503421][T13183] syzkaller1: entered allmulticast mode [ 487.641295][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 488.585667][ T978] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 488.774585][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 488.781373][ T978] usb 2-1: config 2 has an invalid interface number: 85 but max is 3 [ 488.794754][ T978] usb 2-1: config 2 has an invalid interface number: 34 but max is 3 [ 488.880990][ T978] usb 2-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 488.929542][ T978] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 4 [ 489.005170][ T978] usb 2-1: config 2 has no interface number 0 [ 489.204461][ T1624] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 489.215344][ T978] usb 2-1: config 2 has no interface number 1 [ 489.221544][ T978] usb 2-1: config 2 interface 34 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 489.363089][ T978] usb 2-1: config 2 interface 85 has no altsetting 0 [ 489.388318][ T1624] usb 3-1: config 0 has no interfaces? [ 489.407049][ T978] usb 2-1: config 2 interface 34 has no altsetting 0 [ 489.407463][ T1624] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 489.433845][ T1624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.446730][ T978] usb 2-1: New USB device found, idVendor=5050, idProduct=8003, bcdDevice=92.c2 [ 489.456388][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.476697][ T978] usb 2-1: Product: syz [ 489.480921][ T978] usb 2-1: Manufacturer: syz [ 489.495003][ T978] usb 2-1: SerialNumber: syz [ 489.503922][ T1624] usb 3-1: Product: syz [ 489.530252][ T1624] usb 3-1: Manufacturer: syz [ 489.554371][ T1624] usb 3-1: SerialNumber: syz [ 489.588993][ T1624] usb 3-1: config 0 descriptor?? [ 489.847732][ T978] ftdi_sio 2-1:2.85: FTDI USB Serial Device converter detected [ 489.959838][ T978] ftdi_sio ttyUSB0: unknown device type: 0x92c2 [ 489.971892][ T978] ftdi_sio 2-1:2.34: FTDI USB Serial Device converter detected [ 489.987254][ T978] ftdi_sio ttyUSB1: unknown device type: 0x92c2 [ 490.019642][ T978] usb 2-1: USB disconnect, device number 54 [ 490.042575][ T978] ftdi_sio 2-1:2.85: device disconnected [ 490.115698][ T978] ftdi_sio 2-1:2.34: device disconnected [ 490.450805][T13234] netlink: 'syz.5.1885': attribute type 4 has an invalid length. [ 491.136031][ T5910] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 491.370266][ T5910] usb 2-1: config 0 has no interfaces? [ 491.396206][ T5910] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 491.424253][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.435494][ T5910] usb 2-1: Product: syz [ 491.494262][ T5910] usb 2-1: Manufacturer: syz [ 491.559275][ T5910] usb 2-1: SerialNumber: syz [ 491.603822][ T5910] usb 2-1: config 0 descriptor?? [ 491.604422][ T978] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 491.817393][ T978] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.827376][ T978] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 491.838212][ T978] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.875967][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.901920][ T978] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 491.919058][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 491.932353][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.952991][ T978] usb 4-1: Product: syz [ 491.959779][ T978] usb 4-1: Manufacturer: syz [ 491.965363][ T978] usb 4-1: SerialNumber: syz [ 492.187844][ T978] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 492.827262][T13285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1891'. [ 493.253005][T13292] loop6: detected capacity change from 0 to 7 [ 493.309508][T13292] Dev loop6: unable to read RDB block 7 [ 493.412136][T13292] loop6: unable to read partition table [ 493.424644][T13292] loop6: partition table beyond EOD, truncated [ 493.435024][T13292] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 493.466064][ T5910] usb 3-1: USB disconnect, device number 67 [ 494.621471][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 494.689044][ T978] usb 2-1: USB disconnect, device number 55 [ 494.957011][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 495.255095][T13326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1900'. [ 495.298497][ T978] usb 4-1: USB disconnect, device number 60 [ 495.324295][ T979] usblp0: removed [ 495.571882][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.633580][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 495.691916][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.729729][ T24] usb 6-1: config 0 descriptor?? [ 495.803849][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 496.380501][T13319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.604570][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 497.773333][ T1624] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 497.946220][ T1624] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.956910][ T1624] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.028578][ T979] usb 6-1: USB disconnect, device number 10 [ 498.116859][ T1624] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 498.173110][ T1624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.203875][ T1624] usb 2-1: config 0 descriptor?? [ 498.225413][T13379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1914'. [ 498.250823][T13379] bridge0: port 3(batadv1) entered blocking state [ 498.331253][T13379] bridge0: port 3(batadv1) entered disabled state [ 498.454381][T13379] batadv1: entered allmulticast mode [ 498.481663][T13379] batadv1: entered promiscuous mode [ 498.552830][T13384] program syz.2.1916 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 498.580461][ T1624] usb 2-1: USB disconnect, device number 56 [ 498.662918][T13384] bridge0: port 10(batadv9) entered blocking state [ 498.668200][ T6011] udevd[6011]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.713380][T13384] bridge0: port 10(batadv9) entered disabled state [ 498.742856][T13384] batadv9: entered allmulticast mode [ 498.773225][T13384] batadv9: entered promiscuous mode [ 498.883439][T13389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1919'. [ 498.913814][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 498.923436][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 499.082004][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1917'. [ 499.224730][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 499.227480][ T13] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 499.241831][ T13] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 499.387005][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 499.406069][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 499.430270][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.524385][ T24] usb 5-1: Product: syz [ 499.552108][ T24] usb 5-1: Manufacturer: syz [ 499.581036][ T24] usb 5-1: SerialNumber: syz [ 499.649513][ T24] usb 5-1: config 0 descriptor?? [ 499.780365][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 499.849094][ T24] usb 5-1: setting power ON [ 499.934315][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 499.961765][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 499.995191][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 500.003726][ T24] usb 5-1: media controller created [ 500.102173][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 500.190175][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 500.190194][ T30] audit: type=1326 audit(1751046260.040:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 500.231672][ T24] usb 5-1: selecting invalid altsetting 6 [ 500.238649][ T24] usb 5-1: digital interface selection failed (-22) [ 500.254517][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 500.266686][ T30] audit: type=1326 audit(1751046260.080:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 500.295838][ T24] usb 5-1: setting power OFF [ 500.311261][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 500.341332][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 500.354959][T13422] vlan3: entered promiscuous mode [ 500.738430][T13428] vivid-000: disconnect [ 500.751328][ T24] (NULL device *): no alternate interface [ 500.759689][ T30] audit: type=1326 audit(1751046260.080:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 500.967663][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 500.986680][ T30] audit: type=1326 audit(1751046260.080:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 501.012909][ T24] usb 5-1: USB disconnect, device number 73 [ 501.063662][ T30] audit: type=1326 audit(1751046260.080:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 501.111395][T13413] vivid-000: reconnect [ 501.394351][ T30] audit: type=1326 audit(1751046260.080:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 501.457906][T13433] netlink: 'syz.4.1930': attribute type 3 has an invalid length. [ 501.528697][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.541754][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 501.562887][T13433] netlink: 'syz.4.1930': attribute type 3 has an invalid length. [ 501.562891][ T30] audit: type=1326 audit(1751046260.080:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 501.562932][ T30] audit: type=1326 audit(1751046260.080:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 501.654764][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 501.675785][T13435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1931'. [ 501.741508][ T30] audit: type=1326 audit(1751046260.080:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 501.903632][ T30] audit: type=1326 audit(1751046260.080:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13417 comm="syz.1.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1dee58e929 code=0x7ffc0000 [ 502.010294][T13444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 502.088510][T13444] bridge0: port 8(batadv7) entered blocking state [ 502.112453][T13444] bridge0: port 8(batadv7) entered disabled state [ 502.151750][T13444] batadv7: entered allmulticast mode [ 502.161764][T13444] batadv7: entered promiscuous mode [ 502.296538][T13451] xt_l2tp: wrong L2TP version: 0 [ 502.586380][ T9] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 502.677010][ T36] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 502.686473][ T36] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 502.724325][ T9] usb 3-1: device descriptor read/64, error -71 [ 502.977246][ T9] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 503.144783][ T9] usb 3-1: device descriptor read/64, error -71 [ 503.265602][T13472] warning: `syz.1.1944' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 503.277652][ T9] usb usb3-port1: attempt power cycle [ 503.634287][ T979] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 503.662579][T13480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 503.682188][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 503.754295][ T9] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 503.794185][ T979] usb 6-1: Using ep0 maxpacket: 32 [ 503.802705][ T9] usb 3-1: device descriptor read/8, error -71 [ 503.838931][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.907396][T13489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1951'. [ 503.917606][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.955687][ T979] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 504.005887][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.044322][ T9] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 504.099033][ T9] usb 3-1: device descriptor read/8, error -71 [ 504.117135][ T979] usb 6-1: config 0 descriptor?? [ 504.321466][ T9] usb usb3-port1: unable to enumerate USB device [ 504.544540][ T1624] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 504.608711][T13476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.627686][T13500] loop2: detected capacity change from 0 to 7 [ 504.730987][T13500] loop2: [ 504.734061][T13500] loop2: partition table partially beyond EOD, truncated [ 504.771661][ T1624] usb 5-1: config 0 has no interfaces? [ 504.814819][ T1624] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 504.880787][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.948773][T13504] input: syz1 as /devices/virtual/input/input42 [ 504.993771][ T1624] usb 5-1: Product: syz [ 505.039348][ T1624] usb 5-1: Manufacturer: syz [ 505.071124][ T1624] usb 5-1: SerialNumber: syz [ 505.128943][ T1624] usb 5-1: config 0 descriptor?? [ 505.914366][ T24] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 506.082238][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 506.091118][ T24] usb 4-1: config 1 has an invalid interface number: 3 but max is 2 [ 506.106412][ T24] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 506.139589][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 506.161869][ T24] usb 4-1: config 1 has no interface number 1 [ 506.193118][ T24] usb 4-1: config 1 interface 3 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 506.278980][ T979] usbhid 6-1:0.0: can't add hid device: -71 [ 506.297548][ T979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 506.338307][ T24] usb 4-1: config 1 interface 3 has no altsetting 0 [ 506.370221][ T979] usb 6-1: USB disconnect, device number 11 [ 506.379653][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.392035][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.435905][ T24] usb 4-1: Product: syz [ 506.535149][ T24] usb 4-1: Manufacturer: syz [ 506.539956][ T24] usb 4-1: SerialNumber: syz [ 506.992325][ T24] usb 4-1: 0:2 : does not exist [ 507.055425][ T24] usb 4-1: USB disconnect, device number 61 [ 507.112184][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.194473][ T57] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 507.350775][T13547] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1967'. [ 507.364351][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 507.383800][ T57] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.407505][ T57] usb 6-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.435654][ T57] usb 6-1: config 1 interface 0 has no altsetting 0 [ 507.521705][ T57] usb 6-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.40 [ 507.599765][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.615758][ T57] usb 6-1: Product: syz [ 507.624663][ T57] usb 6-1: Manufacturer: ⠊ [ 507.629472][ T57] usb 6-1: SerialNumber: syz [ 508.007086][ T9] usb 5-1: USB disconnect, device number 74 [ 508.130943][ T57] usbhid 6-1:1.0: can't add hid device: -71 [ 508.145458][ T57] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 508.506735][ T57] usb 6-1: USB disconnect, device number 12 [ 508.827019][T13576] AppArmor: change_hat: Invalid input '0' [ 508.928914][T13580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.008540][T13580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.154314][ T1624] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 509.304271][ T1624] usb 6-1: Using ep0 maxpacket: 32 [ 509.327434][ T1624] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 509.335888][ T1624] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.400974][T13570] netlink: 'syz.1.1973': attribute type 4 has an invalid length. [ 509.417550][ T1624] usb 6-1: config 0 has no interface number 0 [ 509.449485][ T1624] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 509.459653][ T1624] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.570126][ T1624] usb 6-1: Product: syz [ 509.583011][ T1624] usb 6-1: Manufacturer: syz [ 509.684513][ T1624] usb 6-1: SerialNumber: syz [ 509.710313][ T1624] usb 6-1: config 0 descriptor?? [ 509.726481][ T1624] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 509.737325][ T1624] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 509.950841][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.002000][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.025643][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.041297][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.166697][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.224635][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.257588][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.334579][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.420630][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1979'. [ 510.460400][ T57] usb 6-1: USB disconnect, device number 13 [ 510.610646][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1981'. [ 510.865410][T13603] delete_channel: no stack [ 511.174766][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 511.244749][ T1624] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 511.324289][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 511.335556][ T9] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 511.344928][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.358090][ T9] usb 4-1: Product: syz [ 511.397737][ T9] usb 4-1: Manufacturer: syz [ 511.405953][ T9] usb 4-1: SerialNumber: syz [ 511.414582][ T1624] usb 2-1: Using ep0 maxpacket: 32 [ 511.429357][ T9] usb 4-1: config 0 descriptor?? [ 511.442460][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 511.472432][ T1624] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 511.507675][ T9] usb 4-1: setting power ON [ 511.512908][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 511.523548][ T1624] usb 2-1: config 0 has no interface number 0 [ 511.556164][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 511.618872][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 511.635322][ T9] usb 4-1: media controller created [ 511.648212][T13601] dvb-usb: bulk message failed: -22 (3/0) [ 511.665316][T13601] dvb-usb: bulk message failed: -22 (17/0) [ 511.676171][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 511.704223][T13601] dvb-usb: bulk message failed: -22 (3/0) [ 511.711822][T13601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 511.730149][ T1624] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 511.749030][ T1624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.759047][ T9] usb 4-1: selecting invalid altsetting 6 [ 511.775347][ T1624] usb 2-1: Product: syz [ 511.784441][ T9] usb 4-1: digital interface selection failed (-22) [ 511.791203][ T1624] usb 2-1: Manufacturer: syz [ 511.800346][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 511.808910][ T1624] usb 2-1: SerialNumber: syz [ 511.829522][ T1624] usb 2-1: config 0 descriptor?? [ 511.835500][ T9] usb 4-1: setting power OFF [ 511.840230][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 511.856667][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 511.918875][ T9] (NULL device *): no alternate interface [ 512.027264][T13619] netlink: 'syz.4.1988': attribute type 7 has an invalid length. [ 512.167763][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 512.203276][ T1624] kaweth 2-1:0.235: Firmware present in device. [ 512.254272][ T57] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 512.315220][ T1624] kaweth 2-1:0.235: Statistics collection: 0 [ 512.324730][ T9] usb 4-1: USB disconnect, device number 62 [ 512.384730][ T1624] kaweth 2-1:0.235: Multicast filter limit: 0 [ 512.457306][ T57] usb 3-1: config 1 has an invalid interface number: 4 but max is 2 [ 512.465659][ T57] usb 3-1: config 1 has no interface number 1 [ 512.471750][ T57] usb 3-1: too many endpoints for config 1 interface 4 altsetting 3: 181, using maximum allowed: 30 [ 512.506746][ T1624] kaweth 2-1:0.235: MTU: 0 [ 512.509544][T13630] !: renamed from bond_slave_0 (while UP) [ 512.544181][ T1624] kaweth 2-1:0.235: Read MAC address 00:00:00:00:00:00 [ 512.557671][ T57] usb 3-1: config 1 interface 4 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 181 [ 512.638684][ T57] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 192, changing to 7 [ 512.654375][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1993'. [ 512.716193][ T57] usb 3-1: config 1 interface 4 has no altsetting 0 [ 512.750168][ T57] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.771733][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.821959][ T57] usb 3-1: Product: ࠌ [ 512.847522][ T57] usb 3-1: Manufacturer: 牢̤䠊穚뢃긩캰袶힭讛㫈㤃⃾๷ֻࢤₘ槮슦࿚㬠̤컹쒪ⓩ䏵ធ긞䍧멪酮鏖ꡄ홆잀蘦凧풂 [ 512.924202][ T57] usb 3-1: SerialNumber: Ь [ 513.079555][T13639] syz.4.1996: attempt to access beyond end of device [ 513.079555][T13639] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 513.223493][T13626] netlink: 'syz.5.1990': attribute type 4 has an invalid length. [ 513.975798][T13651] program syz.5.2000 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.013579][T13651] bridge0: port 4(batadv3) entered blocking state [ 514.026556][T13651] bridge0: port 4(batadv3) entered disabled state [ 514.033673][T13651] batadv3: entered allmulticast mode [ 514.047211][T13651] batadv3: entered promiscuous mode [ 514.112074][ T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 514.165122][ T57] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 514.266915][ T57] usb 3-1: USB disconnect, device number 72 [ 514.276923][ T9] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 514.316491][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 514.352882][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 514.362752][ T9] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 514.375580][ T9] usb 5-1: Product: syz [ 514.385457][ T9] usb 5-1: Manufacturer: syz [ 514.390089][ T9] usb 5-1: SerialNumber: syz [ 514.448855][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 514.607881][ T8835] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 514.617501][ T8835] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 514.694782][ T5910] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 514.874278][ T1624] kaweth 2-1:0.235: Error setting receive filter [ 514.887689][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 514.914507][ T1624] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 514.929260][ T5910] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 514.944218][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.963560][ T1624] usb 2-1: USB disconnect, device number 57 [ 514.983190][ T5910] usb 4-1: Product: syz [ 515.003170][ T5910] usb 4-1: Manufacturer: syz [ 515.012804][ T5910] usb 4-1: SerialNumber: syz [ 515.028835][ T5910] usb 4-1: config 0 descriptor?? [ 515.052762][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 515.069461][ T5910] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 515.115721][ T5910] usb 4-1: setting power ON [ 515.140387][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 515.215088][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 515.261234][T13655] dvb-usb: bulk message failed: -22 (3/0) [ 515.261259][T13655] dvb-usb: bulk message failed: -22 (17/0) [ 515.261540][T13655] dvb-usb: bulk message failed: -22 (3/0) [ 515.262329][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 515.268239][ T5910] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 515.268297][ T5910] usb 4-1: media controller created [ 515.293870][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 515.317062][ T5910] usb 4-1: selecting invalid altsetting 6 [ 515.317088][ T5910] usb 4-1: digital interface selection failed (-22) [ 515.317103][ T5910] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 515.317832][ T5910] usb 4-1: setting power OFF [ 515.317854][ T5910] dvb-usb: bulk message failed: -22 (2/0) [ 515.317870][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 515.317884][ T5910] (NULL device *): no alternate interface [ 515.440834][ T5910] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 515.444031][ T5910] usb 4-1: USB disconnect, device number 63 [ 516.435839][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 516.616904][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 516.649352][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 516.762010][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 516.816404][ T5910] usb 5-1: USB disconnect, device number 75 [ 516.841020][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 516.872555][ T5910] usblp0: removed [ 516.924735][ T9] usb 3-1: Product: syz [ 516.928963][ T9] usb 3-1: Manufacturer: syz [ 516.957247][T13689] netlink: 'syz.3.2011': attribute type 4 has an invalid length. [ 516.972825][ T9] usb 3-1: SerialNumber: syz [ 517.002522][T13702] hub 9-0:1.0: USB hub found [ 517.010546][T13702] hub 9-0:1.0: 1 port detected [ 517.047338][ T9] usb 3-1: config 0 descriptor?? [ 517.078239][ T9] usb 3-1: selecting invalid altsetting 0 [ 518.604191][ T979] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 518.740075][T13729] program syz.4.2021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.800310][ T979] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 518.820795][ T979] usb 4-1: config 0 has no interface number 0 [ 518.862382][T13729] bridge0: port 9(batadv8) entered blocking state [ 518.871496][ T979] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.894622][T13729] bridge0: port 9(batadv8) entered disabled state [ 518.901661][T13729] batadv8: entered allmulticast mode [ 518.934472][T13729] batadv8: entered promiscuous mode [ 518.942271][ T979] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 518.982665][ T979] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 519.127152][ T979] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 519.226334][ T979] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 519.274492][ T979] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 519.307331][ T979] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 519.319041][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.333130][ T979] usb 4-1: config 0 descriptor?? [ 519.341520][T13726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.351549][T13726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 519.384875][ T979] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 519.489598][ T8835] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 519.499391][ T8835] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 519.545404][ T979] usb 3-1: USB disconnect, device number 73 [ 519.570187][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.594499][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.628033][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.661295][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.680466][T13743] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2026'. [ 519.691330][T13744] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.747458][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2025'. [ 519.760266][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.769538][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.993788][ T10] usb 4-1: USB disconnect, device number 64 [ 520.002128][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 520.034523][ T57] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 520.407924][ T57] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 520.427125][ T979] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 520.443374][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.466048][ T57] usb 2-1: config 0 has no interfaces? [ 520.721589][T13756] netlink: 'syz.2.2029': attribute type 5 has an invalid length. [ 520.781342][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 520.916291][ T57] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 520.978785][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.090531][ T57] usb 2-1: Product: syz [ 521.180582][T13765] netlink: 'syz.2.2032': attribute type 3 has an invalid length. [ 521.226992][ T57] usb 2-1: Manufacturer: syz [ 521.231695][ T57] usb 2-1: SerialNumber: syz [ 521.237201][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 521.264242][T13765] netlink: 'syz.2.2032': attribute type 3 has an invalid length. [ 521.279063][ T57] usb 2-1: config 0 descriptor?? [ 521.329233][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 521.606015][T13768] netlink: 900 bytes leftover after parsing attributes in process `syz.3.2033'. [ 521.929878][T13753] netlink: 'syz.4.2028': attribute type 4 has an invalid length. [ 522.222200][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'. [ 522.415588][T13777] vlan2: entered promiscuous mode [ 523.021878][ T57] usb 2-1: USB disconnect, device number 58 [ 523.209517][T13788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.604333][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 523.890889][ T10] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 523.899430][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.977336][ T10] usb 5-1: config 0 has no interfaces? [ 524.003672][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 524.019425][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.090225][ T10] usb 5-1: Product: syz [ 524.108148][ T10] usb 5-1: Manufacturer: syz [ 524.146400][ T979] usb 6-1: unable to get BOS descriptor or descriptor too short [ 524.165325][ T979] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 524.172993][ T979] usb 6-1: can't read configurations, error -71 [ 524.203659][ T10] usb 5-1: SerialNumber: syz [ 524.785672][ T10] usb 5-1: config 0 descriptor?? [ 524.978910][T13809] netlink: 900 bytes leftover after parsing attributes in process `syz.1.2045'. [ 525.162654][T13810] C: renamed from team_slave_0 (while UP) [ 525.262240][T13817] loop6: detected capacity change from 0 to 524287999 [ 525.322586][T13821] QAT: Device 127 not found [ 525.391065][T13810] netlink: 'syz.5.2043': attribute type 3 has an invalid length. [ 525.446375][T13810] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2043'. [ 525.525755][T13810] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 525.874294][ T979] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 525.976204][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 525.976250][ T30] audit: type=1800 audit(1751046285.780:517): pid=13835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2049" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 526.003077][ C0] vkms_vblank_simulate: vblank timer overrun [ 526.204164][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 526.344062][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 70, changing to 10 [ 526.355882][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49765, setting to 1024 [ 526.380623][ T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 526.534266][ T979] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 526.554424][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.591605][ T979] usb 6-1: config 0 descriptor?? [ 526.611146][ T979] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input45 [ 526.833144][ T979] usb 6-1: USB disconnect, device number 16 [ 526.918886][ T6011] udevd[6011]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 527.180666][ T10] usb 5-1: USB disconnect, device number 76 [ 527.569508][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 527.637388][T13849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 527.787254][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 528.086651][T13861] netlink: 900 bytes leftover after parsing attributes in process `syz.2.2056'. [ 528.104410][ T979] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 528.237694][T13865] sit0: entered promiscuous mode [ 528.248070][T13865] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 528.288742][ T979] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 528.298247][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.317012][ T979] usb 5-1: config 0 has no interfaces? [ 528.326937][T13865] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2058'. [ 528.337678][T13863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.362500][ T979] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 528.374150][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.426162][ T979] usb 5-1: Product: syz [ 528.430383][ T979] usb 5-1: Manufacturer: syz [ 528.467139][ T979] usb 5-1: SerialNumber: syz [ 528.495432][ T979] usb 5-1: config 0 descriptor?? [ 528.548928][ T9] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 528.717792][ T9] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 528.734227][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.744899][ T9] usb 4-1: config 0 has no interface number 0 [ 528.821236][ T9] usb 4-1: config 0 interface 230 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.858946][ T9] usb 4-1: config 0 interface 230 has no altsetting 0 [ 528.874548][ T9] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 528.884169][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.896856][ T9] usb 4-1: Product: syz [ 528.987201][ T9] usb 4-1: Manufacturer: syz [ 528.993382][ T9] usb 4-1: SerialNumber: syz [ 529.145664][ T9] usb 4-1: config 0 descriptor?? [ 529.222819][ T9] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 529.294999][ T9] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 529.714447][ T10] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 529.864584][ T10] usb 3-1: device descriptor read/64, error -71 [ 530.142967][T13892] loop4: detected capacity change from 0 to 524255232 [ 530.166063][ T10] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 530.335153][ T10] usb 3-1: device descriptor read/64, error -71 [ 530.454522][ T10] usb usb3-port1: attempt power cycle [ 530.824559][ T10] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 530.915390][ T10] usb 3-1: device descriptor read/8, error -71 [ 531.214648][ T10] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 531.227522][ T979] usb 5-1: USB disconnect, device number 77 [ 531.284798][ T10] usb 3-1: device descriptor read/8, error -71 [ 531.384291][ T978] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 531.395328][ T10] usb usb3-port1: unable to enumerate USB device [ 532.031206][ T979] usb 4-1: USB disconnect, device number 65 [ 533.184443][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 533.540768][T13923] vlan3: entered promiscuous mode [ 533.577472][T13925] FAULT_INJECTION: forcing a failure. [ 533.577472][T13925] name failslab, interval 1, probability 0, space 0, times 0 [ 533.643251][T13925] CPU: 1 UID: 0 PID: 13925 Comm: syz.2.2073 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 533.643268][T13925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.643276][T13925] Call Trace: [ 533.643281][T13925] [ 533.643286][T13925] dump_stack_lvl+0x189/0x250 [ 533.643307][T13925] ? __pfx____ratelimit+0x10/0x10 [ 533.643323][T13925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.643337][T13925] ? __pfx__printk+0x10/0x10 [ 533.643351][T13925] ? ref_tracker_alloc+0x318/0x460 [ 533.643367][T13925] should_fail_ex+0x414/0x560 [ 533.643382][T13925] should_failslab+0xa8/0x100 [ 533.643400][T13925] kmem_cache_alloc_noprof+0x73/0x3c0 [ 533.643415][T13925] ? skb_clone+0x212/0x3a0 [ 533.643430][T13925] skb_clone+0x212/0x3a0 [ 533.643444][T13925] __netlink_deliver_tap+0x404/0x850 [ 533.643462][T13925] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.643479][T13925] netlink_deliver_tap+0x19c/0x1b0 [ 533.643490][T13925] netlink_unicast+0x72f/0x8d0 [ 533.643505][T13925] netlink_sendmsg+0x805/0xb30 [ 533.643521][T13925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.643533][T13925] ? aa_sock_msg_perm+0x94/0x160 [ 533.643547][T13925] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.643559][T13925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.643570][T13925] __sock_sendmsg+0x21c/0x270 [ 533.643590][T13925] ____sys_sendmsg+0x505/0x830 [ 533.643605][T13925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.643621][T13925] ? import_iovec+0x74/0xa0 [ 533.643633][T13925] ___sys_sendmsg+0x21f/0x2a0 [ 533.643646][T13925] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.643676][T13925] ? __fget_files+0x2a/0x420 [ 533.643686][T13925] ? __fget_files+0x3a0/0x420 [ 533.643702][T13925] __x64_sys_sendmsg+0x19b/0x260 [ 533.643715][T13925] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.643731][T13925] ? __pfx_ksys_write+0x10/0x10 [ 533.643739][T13925] ? rcu_is_watching+0x15/0xb0 [ 533.643756][T13925] ? do_syscall_64+0xbe/0x3b0 [ 533.643772][T13925] do_syscall_64+0xfa/0x3b0 [ 533.643785][T13925] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.643798][T13925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.643807][T13925] ? clear_bhb_loop+0x60/0xb0 [ 533.643820][T13925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.643829][T13925] RIP: 0033:0x7fc37e18e929 [ 533.643840][T13925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.643849][T13925] RSP: 002b:00007fc37f01d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.643865][T13925] RAX: ffffffffffffffda RBX: 00007fc37e3b5fa0 RCX: 00007fc37e18e929 [ 533.643872][T13925] RDX: 0000000000040084 RSI: 00002000000001c0 RDI: 0000000000000008 [ 533.643879][T13925] RBP: 00007fc37f01d090 R08: 0000000000000000 R09: 0000000000000000 [ 533.643886][T13925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.643895][T13925] R13: 0000000000000000 R14: 00007fc37e3b5fa0 R15: 00007fc37e4dfa28 [ 533.643920][T13925] [ 534.306319][T13939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'. [ 534.540366][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.587944][T13945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.644907][T13950] netlink: 'syz.5.2079': attribute type 3 has an invalid length. [ 534.691222][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'. [ 534.747711][T13950] netlink: 'syz.5.2079': attribute type 3 has an invalid length. [ 534.754751][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2080'. [ 534.764203][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2079'. [ 534.874424][ T9] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 535.074947][ T978] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 535.115956][ T9] usb 4-1: config index 0 descriptor too short (expected 8192, got 77) [ 535.125045][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 535.125816][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.289090][ T9] usb 4-1: config 0 has no interfaces? [ 535.297139][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.299504][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 535.319057][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.333255][ T9] usb 4-1: Product: syz [ 535.391879][ T978] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 535.393337][ T9] usb 4-1: Manufacturer: syz [ 535.400885][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.419992][ T9] usb 4-1: SerialNumber: syz [ 535.428985][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 535.481507][ T9] usb 4-1: config 0 descriptor?? [ 535.551737][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.571578][ T978] usb 5-1: config 0 has no interfaces? [ 535.598717][ T978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 535.608678][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.620211][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.639559][ T978] usb 5-1: Product: syz [ 535.647645][ T978] usb 5-1: Manufacturer: syz [ 535.661843][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.704668][ T978] usb 5-1: SerialNumber: syz [ 535.731126][ T978] usb 5-1: config 0 descriptor?? [ 535.738518][ T24] usb 3-1: config 0 descriptor?? [ 536.215211][ T24] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 537.004597][ T5910] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 537.547962][ T5910] usb 2-1: config 0 has no interfaces? [ 537.565472][ T5910] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 537.619473][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.674297][ T24] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 537.804687][ T24] usb 3-1: device descriptor read/64, error -32 [ 537.823192][ T5910] usb 2-1: Product: syz [ 537.986452][ T5910] usb 2-1: Manufacturer: syz [ 538.026082][ T978] usb 5-1: USB disconnect, device number 78 [ 538.104280][ T24] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 538.264315][ T24] usb 3-1: device descriptor read/64, error -32 [ 538.492261][ T5910] usb 2-1: SerialNumber: syz [ 538.534793][ T24] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 538.584654][ T5910] usb 2-1: config 0 descriptor?? [ 538.616242][ T24] usb 3-1: device descriptor read/8, error -32 [ 538.764567][ T5890] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 538.854251][ T24] usb 3-1: reset high-speed USB device number 78 using dummy_hcd [ 538.904785][ T24] usb 3-1: device descriptor read/8, error -32 [ 538.927855][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 538.948851][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.957947][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.058556][ T24] raw-gadget.2 gadget.2: failed to queue suspend event [ 539.090244][ T5890] usb 6-1: config 4 has an invalid interface number: 37 but max is 0 [ 539.100915][ T5890] usb 6-1: config 4 has no interface number 0 [ 539.116286][ T57] usb 3-1: USB disconnect, device number 78 [ 539.132685][ T5890] usb 6-1: config 4 interface 37 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 539.157213][ T57] raw-gadget.2 gadget.2: failed to queue reset event [ 539.168739][ T5890] usb 6-1: config 4 interface 37 has no altsetting 0 [ 539.174236][ T9] usb 4-1: USB disconnect, device number 66 [ 539.179627][ T5890] usb 6-1: New USB device found, idVendor=0b05, idProduct=9202, bcdDevice=94.4f [ 539.200758][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.228591][ T5890] usb 6-1: Product: syz [ 539.237720][ T5890] usb 6-1: Manufacturer: syz [ 539.247927][ T57] raw-gadget.2 gadget.2: failed to queue resume event [ 539.267248][ T5890] usb 6-1: SerialNumber: syz [ 539.361962][T13957] raw-gadget.2 gadget.2: failed to queue suspend event [ 539.374357][T13985] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 539.394336][ T57] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 539.435995][T13957] raw-gadget.2 gadget.2: failed to queue disconnect event [ 539.631342][ T5890] usb 6-1: USB disconnect, device number 18 [ 540.457520][ T9] usb 2-1: USB disconnect, device number 59 [ 540.954386][T14011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.414497][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 541.444243][ T9] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 541.629301][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 541.701084][T14004] netlink: 'syz.3.2094': attribute type 4 has an invalid length. [ 541.708806][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 541.708836][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.708854][ T9] usb 2-1: Product: syz [ 541.708867][ T9] usb 2-1: Manufacturer: syz [ 541.708902][ T9] usb 2-1: SerialNumber: syz [ 541.736016][ T9] usb 2-1: config 0 descriptor?? [ 541.761972][ T10] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 541.770647][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.785400][T14025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.865154][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 541.974640][ T10] usb 5-1: config 0 has no interfaces? [ 541.980813][ T9] usb 2-1: setting power ON [ 542.034205][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 542.065244][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 542.082438][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 542.120535][ T5910] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 542.163930][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 542.181575][ T9] usb 2-1: media controller created [ 542.196421][ T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 542.236678][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.292679][ T10] usb 5-1: Product: syz [ 542.308161][ T5910] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 542.316936][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 542.334177][ T10] usb 5-1: Manufacturer: syz [ 542.353889][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.367516][ T5910] usb 3-1: config 0 has no interfaces? [ 542.373468][ T10] usb 5-1: SerialNumber: syz [ 542.417673][ T5910] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 542.427566][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.452632][ T10] usb 5-1: config 0 descriptor?? [ 542.485283][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 542.634741][ T5910] usb 3-1: Product: syz [ 542.659356][ T5910] usb 3-1: Manufacturer: syz [ 542.664065][ T5910] usb 3-1: SerialNumber: syz [ 542.787427][ T5910] usb 3-1: config 0 descriptor?? [ 542.879996][ T9] usb 2-1: selecting invalid altsetting 6 [ 542.898635][ T9] usb 2-1: digital interface selection failed (-22) [ 542.918851][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 543.053939][ T9] usb 2-1: setting power OFF [ 543.099957][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 543.135761][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 543.188052][ T9] (NULL device *): no alternate interface [ 543.486490][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 543.710629][T14036] fuse: Bad value for 'user_id' [ 543.729759][T14036] fuse: Bad value for 'user_id' [ 543.751017][ T30] audit: type=1326 audit(1751046303.600:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 543.789921][ T9] usb 2-1: USB disconnect, device number 60 [ 543.947697][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2102'. [ 543.963705][ T30] audit: type=1326 audit(1751046303.600:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 544.204582][ T30] audit: type=1326 audit(1751046303.600:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 544.226962][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.306437][ T30] audit: type=1326 audit(1751046303.600:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 544.328647][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.869048][ T10] usb 5-1: USB disconnect, device number 79 [ 544.874212][ T30] audit: type=1326 audit(1751046303.600:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 544.897389][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.017169][ T30] audit: type=1326 audit(1751046303.600:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 545.164181][ T30] audit: type=1326 audit(1751046303.600:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 545.421436][ T30] audit: type=1326 audit(1751046303.600:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 545.443730][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.449972][ T30] audit: type=1326 audit(1751046303.600:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 545.472947][ T30] audit: type=1326 audit(1751046303.600:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14035 comm="syz.5.2102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f20bed8e929 code=0x7ffc0000 [ 545.495236][ C1] vkms_vblank_simulate: vblank timer overrun [ 545.501352][ T5897] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 545.664184][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 545.680219][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.713803][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 545.724680][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 545.755052][ T5897] usb 4-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 545.764751][ T5897] usb 4-1: Product: syz [ 545.768964][ T5897] usb 4-1: Manufacturer: syz [ 545.773584][ T5897] usb 4-1: SerialNumber: syz [ 545.786559][ T5910] usb 3-1: USB disconnect, device number 80 [ 545.855764][ T5897] usb 4-1: config 0 descriptor?? [ 545.905995][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 545.920604][ T10] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 545.935088][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.940889][ T5897] usb 4-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 545.973875][ T10] usb 5-1: Product: syz [ 545.983416][ T5897] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 545.991497][ T10] usb 5-1: Manufacturer: syz [ 546.025003][ T5897] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 546.031512][ T10] usb 5-1: SerialNumber: syz [ 546.055752][ T10] usb 5-1: config 0 descriptor?? [ 546.060934][ T5897] usb 4-1: media controller created [ 546.075399][T14058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.075507][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2113'. [ 546.098023][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 546.115727][ T10] usb 5-1: setting power ON [ 546.202714][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 546.220651][T14058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.227631][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 546.254926][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 546.273003][T14056] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI [ 546.284910][T14056] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 546.293307][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.4.2109 Not tainted 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(full) [ 546.305347][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 546.315390][T14056] RIP: 0010:__mutex_lock+0x138/0xe80 [ 546.320667][T14056] Code: 20 43 a8 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0d 0c 00 00 83 3d f6 de 3f 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 ec 6d bb f6 4d 39 64 24 60 0f 85 7b 0b 00 [ 546.340256][T14056] RSP: 0018:ffffc90004a9f120 EFLAGS: 00010202 [ 546.346317][T14056] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff99a84303 [ 546.354275][T14056] RDX: ffff888075ac9e00 RSI: ffffffff8db6eec8 RDI: 00000000000000c8 [ 546.362232][T14056] RBP: ffffc90004a9f2b8 R08: ffffc90004a9f227 R09: 0000000000000000 [ 546.370185][T14056] R10: ffffc90004a9f200 R11: fffff52000953e45 R12: 0000000000000068 [ 546.378137][T14056] R13: dffffc0000000000 R14: ffff88805438a158 R15: 0000000000000000 [ 546.386088][T14056] FS: 00007f56c800e6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 546.394995][T14056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.401556][T14056] CR2: 000000110c2b9ce9 CR3: 00000000538d0000 CR4: 00000000003526f0 [ 546.409513][T14056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.417488][T14056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.425469][T14056] Call Trace: [ 546.428738][T14056] [ 546.431649][T14056] ? __mutex_lock+0x330/0xe80 [ 546.436321][T14056] ? dvb_usbv2_generic_write+0x26/0x60 [ 546.441767][T14056] ? __pfx___mutex_lock+0x10/0x10 [ 546.446780][T14056] ? __pfx___mutex_lock+0x10/0x10 [ 546.451794][T14056] ? __mutex_lock+0x330/0xe80 [ 546.456461][T14056] dvb_usbv2_generic_write+0x26/0x60 [ 546.461729][T14056] mxl111sf_ctrl_msg+0x16a/0x2e0 [ 546.466652][T14056] mxl111sf_write_reg+0xa0/0x180 [ 546.471565][T14056] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 546.477090][T14056] ? getreg32+0x22a/0x960 [ 546.481403][T14056] mxl111sf_i2c_xfer+0x461/0x4f00 [ 546.486411][T14056] ? __asan_memset+0x22/0x50 [ 546.490987][T14056] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 546.496424][T14056] ? __lock_acquire+0xab9/0xd20 [ 546.501259][T14056] ? __lock_acquire+0xab9/0xd20 [ 546.506096][T14056] ? is_bpf_text_address+0x26/0x2b0 [ 546.511278][T14056] ? is_bpf_text_address+0x292/0x2b0 [ 546.516545][T14056] ? kernel_text_address+0xa5/0xe0 [ 546.521635][T14056] ? __kernel_text_address+0xd/0x40 [ 546.526811][T14056] ? unwind_get_return_address+0x4d/0x90 [ 546.532427][T14056] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 546.538560][T14056] ? look_up_lock_class+0x74/0x170 [ 546.543652][T14056] ? register_lock_class+0x51/0x320 [ 546.548851][T14056] ? __lock_acquire+0xab9/0xd20 [ 546.553697][T14056] ? do_raw_spin_lock+0x121/0x290 [ 546.558710][T14056] __i2c_transfer+0x874/0x2170 [ 546.563478][T14056] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.568677][T14056] ? __pfx___i2c_transfer+0x10/0x10 [ 546.573862][T14056] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 546.579216][T14056] ? i2c_transfer+0x11d/0x3a0 [ 546.583868][T14056] i2c_transfer+0x25b/0x3a0 [ 546.588352][T14056] ? __pfx_i2c_transfer+0x10/0x10 [ 546.593352][T14056] ? __might_fault+0xb0/0x130 [ 546.598013][T14056] i2c_transfer_buffer_flags+0x105/0x190 [ 546.603625][T14056] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 546.609770][T14056] ? _copy_from_user+0x94/0xb0 [ 546.614515][T14056] i2cdev_write+0x112/0x1b0 [ 546.619004][T14056] vfs_writev+0x4b3/0x960 [ 546.623318][T14056] ? __pfx_i2cdev_write+0x10/0x10 [ 546.628321][T14056] ? __pfx_vfs_writev+0x10/0x10 [ 546.633154][T14056] ? __fget_files+0x2a/0x420 [ 546.637723][T14056] ? __fget_files+0x3a0/0x420 [ 546.642375][T14056] ? __fget_files+0x2a/0x420 [ 546.646943][T14056] do_writev+0x14d/0x2d0 [ 546.651172][T14056] ? __pfx_do_writev+0x10/0x10 [ 546.655933][T14056] ? rcu_is_watching+0x15/0xb0 [ 546.660684][T14056] ? do_syscall_64+0xbe/0x3b0 [ 546.665538][T14056] do_syscall_64+0xfa/0x3b0 [ 546.670059][T14056] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.675251][T14056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.681299][T14056] ? clear_bhb_loop+0x60/0xb0 [ 546.685955][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.691825][T14056] RIP: 0033:0x7f56c718e929 [ 546.696261][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.715859][T14056] RSP: 002b:00007f56c800e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 546.724257][T14056] RAX: ffffffffffffffda RBX: 00007f56c73b5fa0 RCX: 00007f56c718e929 [ 546.732299][T14056] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 000000000000000a [ 546.740278][T14056] RBP: 00007f56c7210b39 R08: 0000000000000000 R09: 0000000000000000 [ 546.748258][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.756247][T14056] R13: 0000000000000000 R14: 00007f56c73b5fa0 R15: 00007f56c74dfa28 [ 546.764231][T14056] [ 546.767261][T14056] Modules linked in: [ 546.771884][T14056] ---[ end trace 0000000000000000 ]--- [ 546.794541][ T10] usb 5-1: media controller created [ 546.799244][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.841133][ T5897] usb 4-1: selecting invalid altsetting 2 [ 546.847622][ T5897] set interface failed [ 546.849526][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 546.902299][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 546.942708][T14056] RIP: 0010:__mutex_lock+0x138/0xe80 [ 546.949802][T14056] Code: 20 43 a8 99 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 0d 0c 00 00 83 3d f6 de 3f 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 ec 6d bb f6 4d 39 64 24 60 0f 85 7b 0b 00 [ 547.191090][T14076] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14076 comm: syz.3.2110) [ 547.204195][T14056] RSP: 0018:ffffc90004a9f120 EFLAGS: 00010202 [ 547.212440][ T10] usb 5-1: selecting invalid altsetting 6 [ 547.221216][ T10] usb 5-1: digital interface selection failed (-22) [ 547.272414][T14056] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffffffff99a84303 [ 547.298424][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 547.304442][T14056] RDX: ffff888075ac9e00 RSI: ffffffff8db6eec8 RDI: 00000000000000c8 [ 547.339169][ T10] usb 5-1: setting power OFF [ 547.365382][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 547.382133][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 547.393028][ T10] (NULL device *): no alternate interface [ 547.419527][T14056] RBP: ffffc90004a9f2b8 R08: ffffc90004a9f227 R09: 0000000000000000 [ 547.435036][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 547.454998][T14056] R10: ffffc90004a9f200 R11: fffff52000953e45 R12: 0000000000000068 [ 547.472049][T14056] R13: dffffc0000000000 R14: ffff88805438a158 R15: 0000000000000000 [ 547.483276][T14056] FS: 00007f56c800e6c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 547.496003][T14056] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 547.502766][T14056] CR2: 00002000000b7000 CR3: 00000000538d0000 CR4: 00000000003526f0 [ 547.512226][T14056] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 547.521555][T14056] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 547.530460][T14056] Kernel panic - not syncing: Fatal exception [ 547.536811][T14056] Kernel Offset: disabled [ 547.541126][T14056] Rebooting in 86400 seconds..