last executing test programs: 9m12.242311547s ago: executing program 1 (id=2193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x1f, 0x0, 0xfffffffffc110f4f, 0x6, 0xffff, 0xac, 0xffeffffa, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$packet(r7, &(0x7f0000000240)={0x11, 0xd, r8, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 9m11.464187033s ago: executing program 1 (id=2199): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000840)={0x240, 0x2, 0x0, {{0x500, 0xff, 0xffff, 0xe803, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x03\xe8\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x24, '\xd2\x99\x98\x80\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x974\xbd\xfd\xf0\xadpt\x13\xba3\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x240) 9m11.096149217s ago: executing program 1 (id=2202): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r3, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r6, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, &(0x7f00000001c0)) fchdir(r7) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) 9m6.538050462s ago: executing program 1 (id=2219): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0x9) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9801) unshare(0x2c020400) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x0) 9m6.389386859s ago: executing program 1 (id=2220): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000200)={0xf5, "f2922a86d17b16f69c8392354c0cfa28776ce9d3eb8898213943551a249f8860af5d2a3261641bb97e32d856da2bb0a87002907dd5a73eff8ecea247dbb1dc110bd53fd01ca5ea02fb63f7b090b1364723d33161a919174ac73731e5024647d0c088659afef37fbac91f763649312d8ea5831ea95053747c562468c54ce99097548026a19a7c535722557f55cd8234badfd028fc49d11a1057a360959116b28fe0ba1a0ae448b31d17579bb83f57227e29d4f94092d88f7b05be13af49adbdd77aafe321cd33790cb88adc41b00c472a615c3499b4154b496ff29e0c37bd81cdce838411bffc88d2a65a6e560f33b40f950979c85555d590c3a5df59fad1fb596b98baeeedbc534730b881f3bbad474c322e1b49326bf58097905454c2f37cdab64d7558e7f03b63934ac20249519a4520d677f9e66476dc71c2631c231f25c74e1a044db7c79dbf25e22c547d49824fab14cfee5428a80c19f867430cc6fa540a8860035ae454a78827da6e385ae040d61536b4beca489456b9f14d83ba6a6ffeb6e4d33a824e43f65d41e30a450840b7d90932093fcbb0caf65c147527df17708c70191e64c2ef929874aa79a75192969534d530718b3a23f803a4b2993d6e0c2734fd1f23f812d49bcaf4d89964235957719cb1d7a8fdf02cac38eaf6476ac7ae9a77b6a5bd2fc53b79a053654d11358386077ff8d4fe3f841bb2e836cf75"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) 9m5.964376486s ago: executing program 1 (id=2224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0)={0x0, r5}, 0x10) sendmmsg$unix(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="d471603aa76d79e8b45aa6e34a1f6f8636ac627a4ca40bf43fff1ac2467d78f23ca290e0", 0x24}, {&(0x7f00000007c0)="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", 0x107}], 0x2, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r1]}}, @rights={{0x10}}], 0x50, 0x404c840}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="e82abcbfd754c5e5824060fb26b6f1f91691ab6d2724ae83e1dafebe432e4206a67e68ee6966da1f83dbe54ad862547dec32c17de433cda3115c9960a01eef5a8b136de3454b99dee694187527e9ada1a6322213f928473a1c4d5c9f0c80113a71522c084bba60b1789d4764ee3ccbc7595fc4f60a94acf8b5737493267b5fd06cf6a7aa1bb51262bfb37416e010a81b6dd3ea1795f38284214bfa2d8c9f0763dbbf5a10426622e0ef72e12d89414c2d32da4b3b868a4de0faa9b76fa350782e607577a45e5d69ce2f55ba844ecd459309d125485b9b6a2b82842b06ad5ea95487e54f3ee33ccaa7f5c5904b1cf9c05de353bad63aff372cb7c9974976c2a292c3c914234877d1d944", 0x109}, {&(0x7f00000005c0)="3a32c7f204749c295cc32fefab7d3421406c45c871488a4bf9ace553fcfbef83b37093ce43a8e5783103133ab395b70108ab45", 0x33}, {&(0x7f0000000600)="152f1dbf5d14e3900b2b9ddf263d22d55aabdbe1e5c590a7551e7609db0aff05e25995a376be8fddc67fbc592158e47a55b85a2c78c219070220e94229ec4157c03a1a91d15fec3a3aab0c006618576fb5bf73b1fb", 0x55}], 0x3, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x38, 0x801}}], 0x2, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m5.387474274s ago: executing program 32 (id=2224): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000006c0)={0x0, r5}, 0x10) sendmmsg$unix(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="d471603aa76d79e8b45aa6e34a1f6f8636ac627a4ca40bf43fff1ac2467d78f23ca290e0", 0x24}, {&(0x7f00000007c0)="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", 0x107}], 0x2, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r1]}}, @rights={{0x10}}], 0x50, 0x404c840}}, {{&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000900)="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", 0x109}, {&(0x7f00000005c0)="3a32c7f204749c295cc32fefab7d3421406c45c871488a4bf9ace553fcfbef83b37093ce43a8e5783103133ab395b70108ab45", 0x33}, {&(0x7f0000000600)="152f1dbf5d14e3900b2b9ddf263d22d55aabdbe1e5c590a7551e7609db0aff05e25995a376be8fddc67fbc592158e47a55b85a2c78c219070220e94229ec4157c03a1a91d15fec3a3aab0c006618576fb5bf73b1fb", 0x55}], 0x3, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r6, r5]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x38, 0x801}}], 0x2, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m17.205411778s ago: executing program 3 (id=2391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="4501000014"], 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) timerfd_create(0x0, 0x800) r4 = syz_io_uring_setup(0x20000bdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0xa, 0x0, @fd=r4, 0x6, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='%(0.', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 8m13.369889973s ago: executing program 3 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0xf, 0xa, 0x1, 0x28, @private0, @mcast1, 0x40, 0x6, 0x5, 0x2}}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x8, 0x2, 0x6, @vifc_lcl_ifindex=r3, @remote}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r1, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r1}}, 0x1c) 8m13.06906955s ago: executing program 3 (id=2405): r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x2}, 0xfffe}], 0x1, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c725a81ab0a2302e3be87d318c81f58a0ab2bb467f59fcfd946a7ea9f6b996ed8fa818d63c884b4f", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="f025", 0x2}], 0x1}}], 0x3, 0x8008801) sendmmsg$inet6(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="65b22feddfa9576b823772862a0c120b3dd0ddd17d25dd55b616bc45ea8533f00ef4db9bfac11dffa2701154aaca494f44d8f1e90b6d786d4d868a1f7582424865cca9", 0x43}], 0x1}}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001780)=@nat={'nat\x00', 0x1b, 0x5, 0x3f0, 0x0, 0x280, 0xffffffff, 0x280, 0x160, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, &(0x7f0000000280), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, 0xff, 0x0, 'bond_slave_0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x16, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @private=0xa010102, @rand_addr=0x64010102, @gre_key=0x3095, @port=0x4e23}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_bond\x00', {}, {}, 0x2f, 0x1, 0x10}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x5, @ipv4=@remote, @ipv6=@empty, @gre_key=0x8, @icmp_id=0x7f}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8, 0x1}}, @common=@icmp={{0x28}, {0xb, "9e69"}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @private=0xa010100, @multicast1, @icmp_id=0x65, @icmp_id=0x64}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffff00, 0x0, 'veth1_to_hsr\x00', 'bridge_slave_1\x00', {}, {}, 0x88, 0x2, 0x1a}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x804, 0x205, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e23, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001c00)=ANY=[@ANYBLOB="dc030000", @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf258800000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600080211000000000025003300d008050008021100000008021100000050505050505086860f01310b01031236c80000007e0333005805b800ffffffffffffffffffffffff08021100000000004c8094bba1092885f4f2b2c7da2f87adca98e05d38ae19c9b6756d3b4c120440dd0a642da1f60f4689c1f11a832c10ecd0801130cc43fce33b3839575c4ec13483646e81564c362e3f6a86ca910c2836320d2f4cee7a3112bf4ccf589b7531eb4dc045de57ae906721f688ef6252e2dd0e927e1f7035458cf29e1abb2f630eb0e865ade663c72dd663f96370ec1f552ed48add9ddea63f3ee4b54dd3bd7ef3044a4b93c991b57aca89a4840a3c954a8bac30ecae3ccd9b05df8f94534d233a39656c4779e42823975c39c0a3c37f1177626ee641ace161524853371229fafef6a9f1e8d7f9e131bbcc9f09e76f2baa007251c6d21473d1ba9e7baf7a2ee284387d357826e1ecc16abff136edf53cbe0f83be5d1a4526a64e89c39c2e1e449edc7bf7fe88ae3e869135a1c6816508a07d7c514e8b059bd61a3f6c0940da1f76786161f4456bb25bdba8202087f91ec10b97dd1dbde9abf6d6ec643eba0270e27bf7e5b40d8c499df7123b0578043348ed48f87e2be6059f30d7ac93d7c9c80080415150d163efcfbf076da589884ca8a84f9e1ebeba6ba11f9399bc3ccbd09c06a2b439d59441623bc0ccc09cd3127282d4761de66e38af6d8908f9d10ec85aaf7bd89e50fbc946552916fc33c1e36bd5a364ad1cdf4becad2b0b3dd734e06cc69b066d8093a27abffd7ea72cb84bd474acd286496394e0b6ac11d9a509ff1f6cd05f54de64533d7ed3fd025f9c923a7493632f585fa76c5c14db63917d3813a86a97dc8fd702660029ad0e090bf87dd667b4c2dc29c72a8771c84eaf2cb5ff18f25cdf7744f1fbaae7533227a5eacc490517b8fcf018b20f09e9db62b16f660d8c2b98bec61231eac89f2b18ea8a1ead14d843edbba412546d7f76528a087426f8acac1f21f54c29f2c9c61703dab5d00152821d155fd20af741c401d84a802c0cbd20750bf099e1891a644e49f406ce14d2012750c55422888f245c1204fdc04219547594fea0d16412f85b23f1a66842faf80e86405639f344d12b96cf93533a504a10e30d2150a78e7c2af78a0e405178a44c26d3e15e744a5265aaac501fc0409c18ffdd5f6a5b301b153b538bcb9dbc0d90ab00581c0e68515083d6cca0e1dadc1381833ec895d57e27118eaf751650d989713854af5360c038040aef27c8508bbcbe5b82f7277bb0bddad7b57169b92ff4ea16ac992696cd600a2a22497f7d00000a0006000802110000010000"], 0x3dc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c) 8m12.807858477s ago: executing program 3 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r3, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x6}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x6, 0x8000000000000, 0x80000004000080, 0x0, 0x5, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x29}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x508c1}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x659, @empty, 0x401}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) syz_io_uring_setup(0x16ca, &(0x7f0000000100)={0x0, 0xd37, 0x1, 0x2, 0x2ed, 0x0, r5}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0xcc, 0x464, 0xb39ca21a0049ae81, 0x70bd2a, 0x25dfdbfb, "2b195775e416adadd2a14f54be14f6b195eafff73c04f06f90e8a6abe738b0f8373b9fdc3b9e38463cbbb1712cd596b156e657427556d6ab4f33e0a3edf95e00c0d447ca82db6187d6da2f93972f7de9d0639d3a450d1e76f09a4ecf0ef02f9f7c87f234cb9be914f7870be225d9dd17982f079c26a3d7e506e4d4fb30e4f2864318f17438871b11b1d7f7f16d9448ee9cdd269c4d86e934752b855b74dd5d39d741f7daf4bca2114dc03b0331caa14185bcb0c7c1f974881f", ["", ""]}, 0xcc}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x80, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}) 8m12.497341507s ago: executing program 3 (id=2410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {0x95, 0x0, 0x102}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 8m12.470381912s ago: executing program 3 (id=2411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000240)='lo\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) (fail_nth: 1) 7m57.325650591s ago: executing program 33 (id=2411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000240)='lo\x00') ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r8, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r5, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) (fail_nth: 1) 8.255356552s ago: executing program 6 (id=4067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000000000000000000000000000000000000000003000000000000000700000000000300000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000c40005000a010101000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000560000000000fdffffff01000000ff010000000000000000000000000001000000003c00000002000000ac1414440000000000000000000000000000000001"], 0x17c}}, 0x0) 8.028885664s ago: executing program 6 (id=4070): socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f00000000c0), &(0x7f0000000340)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x80, 0xfffffffd}) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) lseek(r0, 0xdd, 0x4) 7.657128474s ago: executing program 5 (id=4072): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) r1 = userfaultfd(0x401) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x110) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xb) r3 = socket$netlink(0x10, 0x3, 0x11) r4 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f00000001c0)={0x4, {0x19, 0x2, 0x6, 0xffff, 0x2}}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x9, 0x0, 0x0, 0x8}) listen(r4, 0x8) write$binfmt_misc(r2, &(0x7f0000000280)="fd28cf5b5b52a444a8b75676f5e59a99ed67175acd34731c9afc5bfc3eb2fc58a5969f4e31628524d0f69528cfc7e3901295840005253f555134e4b13e42bf37877f18b0fe6b4e673da143cea6523451a8a0400107fb157da8b70a27410d980f44729ee88473208c34dcf1d9601892ca6e0bbf4c303b752df91763096cda698683de453ca47d5b07760362a3c4a207e6509ed5dcf96913adfe0fcd821d19", 0x9e) ioctl$UI_DEV_CREATE(r2, 0x5501) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000440)=0xe8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xfffffff7, 0x0, r2, 0x2, '\x00', 0x0, r2, 0x4, 0x3, 0x2}, 0x50) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000500)) sendmsg$inet6(r2, &(0x7f00000017c0)={&(0x7f0000000540)={0xa, 0x4e24, 0x1000, @remote, 0x6}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000580)="6610693df01ae4d749ff0483676d628a52632c248ccc8d8e0ea6db8d0096db260004d7bb54716de8870d723f6fe74f5a98239af30814124845958efd35d71a73cf96a7f5c2d616b61e370b4033e34db4b2e304beba6bdfee735f03ce5fbe212b6a15250b320f9090b9c426fd025b3500513296aaf05ea7a9b5bd1688be", 0x7d}, {&(0x7f0000000600)="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", 0x1000}], 0x2, &(0x7f0000001640)=[@rthdr={{0x38, 0x29, 0x39, {0x62, 0x4, 0x0, 0xc, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x2a}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r6}}}, @tclass={{0x14}}, @dstopts={{0x28, 0x29, 0x37, {0x3a, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @ra={0x5, 0x2, 0xa}, @pad1, @pad1, @pad1]}}}, @hopopts={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x2, 0x2, [0x3]}}, @jumbo={0xc2, 0x4, 0xfffff800}, @pad1, @ra={0x5, 0x2, 0xfd5c}, @generic={0x8, 0xb, "d389f77293a3fd20eebf48"}, @jumbo={0xc2, 0x4, 0x10000}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x2f, 0x5, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x6, [0x2, 0x5]}}, @hao={0xc9, 0x10, @private1}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2891}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x170}, 0x40004) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001840), r3) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001880)='totmaps\x00') sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000e00}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x50, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x40) bind$vsock_stream(r8, &(0x7f00000019c0)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000001a00)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000001a80)=r9) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000001ac0)={0x9, 0x401, 0x1, 'queue1\x00', 0x4b5}) connect$unix(r2, &(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$packet(r2, &(0x7f0000001c00)={0x11, 0x10, r5, 0x1, 0x7, 0x6, @remote}, 0x14) 7.50898358s ago: executing program 6 (id=4073): syz_emit_ethernet(0x56, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x8, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, r2, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x48, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc243015f70046c1c}, 0x20000040) syz_usb_connect(0x2, 0x3d, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x93, 0xf6, 0xfe, 0x10, 0x108c, 0x159, 0xdb57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x1c, 0xfa, 0x2, 0xf2, 0x78, 0x38, 0x2, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfd, 0xda, [@generic={0x7, 0x5, "fda246483e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0xf, 0xd9}}]}}]}}]}}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, [{0xcf, &(0x7f0000000000)=@string={0xcf, 0x3, "23b9ce7432e5e3c4dbe196b4289527dbbf12650fdfd81e7f2826d83c7fbef5cb3452a33423a34c171bc07454cfa49726eb6fafa25aaff2b095c2fac9696fee6e29371a3ff98f45bed775108a51fa4ebb37598be355655b74201f344ae758781cac8530128751b8a9c18c4cc876f90f3bf0e073ee5948f050d65052914318e721cb48b2fe357f0405fe28a7252493d09a5403f38b9f39dea17f9cd404478de88979a78f239ca9b59c6e4d6c09fdcebfcf4fb7503d7cc09adbbb6c5126286996cccfc8dc3a0a586862eb1fd8bdff"}}, {0x4b, &(0x7f0000000100)=@string={0x4b, 0x3, "97e5d9f63015e58f5467a7421f7d4f291a23ff6585f6fec3eb5c750645be7f537560db63b85bdbb08588165e4753146f52360701a4e6852605e88fdfb68cc2fff5cb9fb29eb87e403e"}}, {0x77, &(0x7f0000000300)=@string={0x77, 0x3, "b3850bbd913935e2ebdaf0b5765c47197005b76a2f4fa5cc268381765779f03e7eb0ee9dc31f3dac55b1b7c023a61242c8f11377c7f7544b4cabcdc6b20979062894c3c2eb44ce3b9f65f4fd5ce622db86834dee422391bad34377bc89d90b54b10ba2da9c1e48f8b7293cdf2326de00fcd439e4c6"}}, {0xe, &(0x7f00000001c0)=@string={0xe, 0x3, "7ab701deb59aadd49f2099d0"}}, {0x1a, &(0x7f00000002c0)=@string={0x1a, 0x3, "fe00ff708c61dfcf5eb77f8146baa593653ceb064bdf91d2"}}]}) 7.475359762s ago: executing program 5 (id=4074): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000001000000000000000000000000000000000003000000000000000700000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000c40005000a010101000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000560000000000fdffffff01000000ff010000000000000000000000000001000000003c"], 0x17c}}, 0x0) 7.2972121s ago: executing program 5 (id=4076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffd, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@arp={@private, @private, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@remote, @multicast2, @loopback}}}, {{@arp={@loopback, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vlan1\x00', 'xfrm0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008011}, 0x4041080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r7, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7ff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0) 6.975342375s ago: executing program 5 (id=4077): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r5, 0x0, 0x1, 0x4}}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x10, @private1, 0x7}}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) r7 = socket$inet6(0xa, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 6.834247986s ago: executing program 5 (id=4079): r0 = socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f0000040004802800"], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0xffffffffffffff93) write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) setitimer(0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000080)) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.475390071s ago: executing program 0 (id=4080): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff0000f3ffbfa1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) 6.426513866s ago: executing program 0 (id=4081): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x4, 0x141a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000001300000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) 6.165250825s ago: executing program 0 (id=4082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03ef0000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000010700000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xf4}}, 0x0) 6.040775736s ago: executing program 0 (id=4083): socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100}, &(0x7f00000000c0), &(0x7f0000000340)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x80, 0xfffffffd}) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) lseek(r0, 0xdd, 0x4) 5.503390199s ago: executing program 6 (id=4084): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x2082) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) r6 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r6, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) getpeername$inet(r6, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xce, [@private=0xa010101, @empty]}, @generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 5.457990168s ago: executing program 0 (id=4085): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xd, 0x3, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='\\:\x00', &(0x7f0000000100)='@\x00', 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r3 = fspick(r0, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf1c, 0xc, &(0x7f00000001c0)=0x1) r4 = syz_io_uring_setup(0xf74, &(0x7f0000000200)={0x0, 0xc8f3, 0x38, 0x2, 0x2c1, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1000c080) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0xf}, 0xad5}, @in6={0xa, 0x4e24, 0x2e454a6d, @local, 0x2}], 0x38) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000680)={0x0, 0x0, "39e5e6a35cbdd8092e0ce3f437dd27fc4adb0f5221a0d9d2ce8e47884b1c79262b0ab41f1f16a91ad4716e6aa1103e6c0a608cb68dbe9e459c849353b887168c34b3516a2b7d64264d82ded8e0adf89dc0e2aa3b475b514d498cf9238b0d7a723db65d57365e7ae6f3726f6e4d9967b9b94e53800ee0cdc08cdf1150d5921bfbbd51d5615e3f005b5eb42b684ba501e67d12f71ebe232b3f7c9b7296a5fc335bdf803c6d34152ddd94023c9023c157d2bfaaabafccdaf77549a5aabd37281cbdd3197925a00fab8e95df5566040d33b1b478ba1c1b83f1a59541ea5a606b269f8e7713a5f1047df480a14e0e3fe6496470d0d9cbe3de35e24cedfc4169eee073", "698322945930fc5ed04721745c3bfc693908ce42f8a6f898081adca08bf30b3827b331bf53de165f2e719fae5d49e080c1af000744c6bd5e1ca2d1cc5d76be14b9a8b533f2582dc7c4d7bb995b6ed5b85e5c79fcaeb10ebfb507e343b275ee7a62d2d4d3266de812366bd6bed4e02014d74934e33c622aa265dd75faba751ba01d069fe3a280c3fd913c257c40739c43c9a6266d8723e6e605a36583f8abbb63bb62a82430ed429c192822d60b95471a120777e3098ef5957f2b5944aac4f8a3ea421538ad0a99cb6407a8cd1fc61600e932c23fa3f97575c3a051a0ebb4b6a61d80436ba2d0a83c4e24fb06cf352c70b05e95b7f7c5bae68a848f3faaf7437a64f51daf20517450208caef2ee67391c89a5a0f828db804bb468ec26bfa2de0dd3b048f904a6a10d4335cc211f5629926cc43032f11913c1df40fe953fa5a531ad1c4ffaaff538f818dc65d87694dfb1ff2520798fc5cbc62a302863d3415578151c34822bbb9402f6932edf8e8e85419c03aca6a2b5b4705e52e5fdeadf943f33edf34eb8add09444751be2051b01d12edba4e480271316b61853b2b0f4c5066e470a4dbb0a02bec6b39b0343da56f7ab16b3f66dbde7662827a39414c1f29e5071815ed77bfe63e2199213fdf81879b2ca0fd6c58d1beaa1f623a38b709c785e29331d9e5725ddc168a2381efeabd46541ac82e83e433ee14a5857e650729aa5c68c734cf9014a0a4cdb62ff54a3f2463fec93f9c6fc328848a96bc607e05ebd99512e8e0731e64fc29b9edb385dfb2856a2ed8e4691fb6eae5c6cb09769cf83704224b292682101c58a6205107e70148b5231479cf17a6106bcd8a39733493422ba7aa98b239c0e4ba4859ecfaa8e80e35e2d2823539c1dd334bad399c6adf5cec30085b814e3e2fd004346ca5f56ee34f53715750bec3716427959c42fba79e30f973dadeed8ee72b1af2186ad2363e743b9fec9c9b8c5a9f74e793255b8c97feada6356d01ed2fee5787534d5c9e88554bdc0011e634058144d881899357f51aeb256888bac27c772641727b3651f8597bb41843e2b8027ec9ae4da6166370e65dd702adb5d67042163ed2d6b85a11ca99502418f817664908527f8f88d345b789a9d9292603a3015c832dd07ca9180d8f428037df487a162865291df7b7b6cc145be3682df206ab52ca2dd081a2d192839e96d79f2a59005345a488ae366323b7383bcec110610f9aa40dcb4bdeed51be3562ad6d704fa7264287ddc7d3fc9dd63d4c93197d2eaf55410fd2b32722500b419987af324e09340e8ecfc0c733e2fa42c4d6e23c99deeb80d38752ee09a5c9e5c0974180817d584f076ffc23f98696e7593ccc04bf48985dcff74f1bc76268c8f17c72e71b7fbd057097409b7dbd40d6a909562d95c3a196889eac81124352ed9699f41c57a792359dc2d21ac2ad252c5434305de1c2b30753ad10d7cea04d29a579003840b993525dfccbcf6227b801100a5719a09778d7e3f71aa5844313d28b87d33565ed3a038ce5565f4c59d774b4de03f5d29d98184fd6645bc27eea9840175632978c19b7d1477ade0ba8c7433ebb8833f81f30489fd3bd02253c534397fee745ab07cbfb1203b72563f03a9ea871026999f984e9d867805d4e1b76ba965c59f452e57a5eb7accafa3b54ab34781b97cb8ae439950665d1198c57077411ec8cf2a8675924f4081aa509a15062a80a58264ad9d73539a0580a69ec69192c92fea937fae5d1fa2ac69bf7f76ab45a3fba92b71fb429ab65f633eac12e983767dcd781bd594dd974464ab20bb73dcc7418eb376299aa906009108f0e4d01c8efb09afd56ba463caf39b8d66c567286a76620269830e69faa9b4414ae03b812f64e6caae56ffa61875f1fb06f788c5b365a4fbc9c2ebc7ec3475ea8b80dffb8978616749c3bd5ce6649d5321055fd45f5edd684adcafc9e89919ca8a4f8eb6c36c2fe8cf071afc818b702c9aee62c7cbdf29a56f78ae9cb9ebccf22f332bac687c98c7fc26eadf7c01f471952776a22c45e609fa5af982f395fac8cbef3421c0745f0cbde39de2da4ac343d339f3332d2fcfe02331b56f04fd70806b7d6b310158a97dd711c6f13018444983019a5bc36001d488d3bf5b4ad51f8fc0349044c0961f8abfb2e32f97c3d2a16d513f37f199476a67d3e3cc53c624fe08bf187c50e049a588fb1911a9c83f29725f5963e94f46fd395a47a3d7bbb011b3f3547fef98e71afe3adb18de04618f16584bcc17923e4304c7be8990e086153134d0f165f42a1e74ec1bc7f50ee19fbdde46223f8f567d927a38f82df4e08857f49fb76462e3e90180018e96a58f3c450a618f5c3407385f5c855a6d2be4b45ed7161b44ff3687790fb17df21fdf9190a67f798ca8d9c1a07eabe846c2be1b603fab7718906e5eca96d70efaa075b45540221fd944b3e000c26c9b1dab6c170908727321a2897f5ce2e2d6aa7654af831468f34227f2491625af4c6936ec2601eeab002162a5302b2ebf3927fa78d4d9737b11fd3c4fcdce58024a8ca85c9811e4925dffc1c3cde0fa23244dfe17bf140ee99821d345f643fc4fb416296eddef04f22293d4e2c6ac9679ea4f417b2f885f38f77a99c4581540d4927741420da200dbc14ae40b591999a556cdf48ca7d1a4109833f3a8a1480f9621c78617d1848efad51e483e2ce836dd03ebc981474dbe1c0a2dc7644c6c10eafc384ae7da1c808c90f343feb58f5f039ed05e27ebace69dc981e9faff4964d79eb2680a6b126fa209f1ed0f23855eda924ce315df21bf130ad6f6f8b93a7960c0a7136bff04e3f7e58c082c82e71bbeee278dd806056bd03e524a48f9f70b7f9cc2766983e3afc1d16fdaeeee6f00052b4e5da7824d7791d745076ba08a25b1b2ce22c244c30d943c865d490db06b3add944fec30d10517bf8dcea1e7fe95692821bd7e823d8040eaf0cb501d0809ed7fcd5b72f1df8a5fb58295a96b996bf1c4bf6ed03b6318a3f88e9924830bf86f6c564ae3b05ee137cd5b914f732dfc65f81cf2f39466e92061797c99319c622140ea07af8931ddf1e4246446778630d9b5be9bdb353ba23e0ca314e162864828c80099dafd33684da3233186037d4ee9937f577458207cd802beac076fec652ccdac9307c7495891e298486ba29dbe5708862d6c6cd4c076776cbadffa393c08f6653750b00a6572531a93418bdf6d752c1a0b4237dd1c87153e89d1c109a98972bba207f92a62284d79489c8f6d1be94cee0c7908c1f8efa967b46536366233ab5344d61784e62d6e803a3e49cf1d0757890067f53844783962174efdc9e16c149f766d0197a5748211e2146643b75557b6b98174e08a8a801828c5d59a58a519be3843a9afdf2aa134de67f2db0e43fc14b2e2f594f13e378e1e5e2f6d5020b3f633b208a34f814234be73dc2eeb16386959e59f8d230085b8072af20d001a29f639cb6395739ab8a5676df7a35bdaa00a42a77cfd0e2997882e8b9f9c22a4b6870bfe45fc30140bf6664d507f8387f453c3658c55442eaf2ad67454d97bc142d20875b92bf0cba33fd1064b0a243841414c126c3196f666961949d0ebe20c468b41f7ee1d7ae509fe39891b26e1473bdac50d1968cd6c1a3b896c21ee48ad352f03ec9ac8d403c69f5f6ea0b09623dbbfbe44dbfb7bccb977acbd25648e0c2fe561076c610982cb84ab104509497d2f8a08f950b15877e35c00d1846748e3a3b45d3bcfeb7161d08884c850fa4b0b743b817c06b6441bb1fe7eeb185d16ebd74b00e2b4fbacb1cb0630055cc5d678427174b6ef88e33a720d84dc7ce51c6be493dc4bc429edd9821a6172c45dffc5da98c6752f7c386c2852caeb78f013c830eaedf2065e35dc8428d7a1b89c021bc1a97b9f652f1d928d888f98e9b2a1c371fb034d966947295214704dfb84b33180dead3db05c69fd6eb821338d9332ec38da1b4945d47e391a981c1dc71ed4768b9d009a176bf67da4b506a9758153aef3cfe28c5772faaf0462a72c0ae0455134639c70c05b3e4c70807e59a8ddb98d88130f6e4f416ecfe64db9389d93dabb273a2898e488e81ec054566c1aef92bb38d1920124b3d9a6f12cf88f3f9f5095d1b02e66fdc8db1bc984edbbffb32df75fb8129901ece4b29beb3cc7bb36656e75d8b2f61bf873e613e3542ecf3e32ea17b8df764e95fc654b5521eb1f333b73219d15502b4fb46df1abe0360c1d02188412db70240ea7daa106b9bcc786330fdce2cde387f79d6c6ba386070f09bcb511f55c8343b4b160c64cfc6cc6d5c9d92ccbe1a2dab969cce15a3f635bfc9fdc27baaa11d324f622a3d62518d6e96ed2f67a82984754fe15c24824bcbaeac38bfd979b4697477f02730b025628f9084701b7346ee19ba0a9d9dbd7fb0586a288233cd8569bb126e28b4187ca64cc15faced5257c9fe537d565009789237fa02047683216b65f6ef21cfade7193fb36ce95fedfac6af11ff4e27a991a7e884d86c5d59dc82ed1cba1bb29f38e6c95d609b61dfded947cb89d2a48a8622c4a429453d6df1f57247a3f6abef49a3719bb617520b22f28a60ce0c14c27a6526817df287fd9e43c9db184f57673313158287654068fe227682a58d81ff2d21add720b5bddc581de34a869729ba9e3cce582ff2786ac4b0c26ef236d4b297852e240ad6c0916a5cbc793ece743cd03c05ac27975ee2fd98d0b901e746dc19e08e9b19ebde46d88f77c31833e9aeadc58bd05843579370075b4da0d8a03a3ec09c9bd7a430404cbd729c4f3be4a28d280b8b72267d07a89b205ae949aad74155e96b94dd5ea1e6b511e1f516d821e5ea8f8f62cbd47034981addd12a722a353f3e6a92a9d788a361f64a1245689a7a3fbc3d981ea61455d246d1e3c2239829b6b25235e1cc68c4c2e034b9febe38045f6060569cf7b6fc4a840423b94c12b0e89cad4f4320821d6e3024dfe0dbadc6745a3fde98f56e5d6ad17b87a09e33172e45f4f872f669f90cf0b1bc54315e6ae087f4ce7e40ed3e179521abc4cc6ca7921fed09ab706fdfae1098b3a798f3648ac8d56624b815941f580358497c87ada21c373468c515f53e834e632252e2989243cf98e818ac8f48094e89c26c4a1f9e61572167a91fc7ab52614a05a86706ac2d2a2ea4524a6df8541f5a64efdad84ce2095dfdc11e14dada827526bc0c54bfecc69afc8588366c04f33e19a913ed8496b83f4c3598d9a9101af511daa79cb4dfb2dabe1d2e66cd2c00d7bff2d85ac299d4cfcbec3b7e00f4a4faa7da904e7688120f13342422c3266d8b1a0826da4c596274dd20192262416325f357233be09bf986af212b48bc803f62f79a6d55aef932ac2be2d1f14a879b974a3fd729d08ba6806a52d5434"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001680)={r5, r6, "0eec7713f84b139fbec32d2b05f492857b40600192dd6046ba6a3625a1eee94d87a13588b0c46c7ee1246695dfa6042bfb0bf9ab324a3ac74d1b3486bc128cbe51180043669748546c470ba72828fd5b37d0a86edf68149a9d26dd08a0a44a82eb83ffc24d03800ff35cca72a6182eddea1b016ede919a0bcd0ceb6f583ec79cbf2c5ece35b06a269435e17ae3f1d2717c856e96964ef0b86dfa59034f6b0f3955c19782950b7671afe69dbe9596b4ccc528000665e1bfb3cd384c69e6bedfea57f1be627d21cff6dc52ad944a51b84633bfe1159cbbc2e594d54a14d30129d981d9c626a4b3ea36e37d48d4f069284db92049d01ec8151423038b4381c6b5db", "dec32b1985cc31798338582894298f316e19feb4e31b2e88d66b48302646a64eeacc67d1934edc411927eeecf60863087b2caeadfcd5c7fa13ad98200e0f2c7ddd0b82d26a2dedab0392d8d8d0d438c609c2b27f2c62402885f943e549220249c96db002cba09a20be112cdfc31121ccac4fa365cb914c9ebff2dc9dc5a564f5223152d7265c2c60d3a33f71edcbe9b5830a2e3eecb05d2a610ecc8df9361d7f54ac09656a4969750f29640b6ac0c52b595438f5bc9556c522ff8b3d02c973adcf26fac09cc5ae85fa120e104aab1c3dbc2ee7d1984e5fb96de37e3353d872982a8120af863e2270db1682524784fba41422d25ecb08c9ea1a94fee4277b3fcc736d6ac5d3d7dbe49a8ed0703284b10d0160e41d4dc70f5eace9100ac8179733f704414b87e4ae54aced9da76599796558a964d2c4a50368091d1d1e659cddbdf70e56716b29f4dba38d660cc40b82ca8598738877978121b88b3b1ee6bd4c4bbf54d6523def906b2d798bc8608a8303dca7cdf6bd36d7bfc1adfa7a666546aa7d70bc2247eff7e27d65f70898d09e10286d6c19254290b31ce630fdc205cc2c1c1a5282ab33bc04528a0c27c5c9de8c5fbcc0a30290277115b373e6f7edc088785cd447e81860c96b3b2e69271dcbe18c60c1058ea8b01ddd39d9aad07709ea726d990d65ce2fda9c5eb6efafd946082e7972d81c819825bf4625bca8081b7d3a1f98430eb1a58780b148caaa507b4531552d1e920b2344ca586dbbc72442148b222fdafaa075a3a8fda2573d87f9add0b3c726e05d2fc227ae1677293f5f9f0a0b939ab541edd75873456bd785e6addbc0236a956eb4375c694241baeaa4608db1b2f955a911045a11b3d04775efba65be09ba6e6b7866d676a9b20f07d86dd0437860449a77f1e7b099f182c96dc2d62b1db8f70fea0b9016860617c44e7c1caa3fd64612ed9445f4bf01d2fbccd5efcf9a7ee5eb5b41fd966f5649c713a8f90fbf8c449db1e583429337f819b96cd81bc2a0d835b61fbc48d8f30f8c13ee13de38e862bb0884c11caac676b92c8df5a0ac86bec2f890e968ecb026cd589bb437dfdc2286f6a74f24528f7c6d3374d2731454d96477c8870bee4a931efd4b6c2c15c9e440901e57d869b866e461ff4372f3c728595ae2872630f52faf1f242ff1624d6503cd0bd8aa015dfb24e373c1dd695fa27e2c086c56586de616525a1b4685f74170524ec52dda74c66cf8a5c071cfffc06508bdee6a1b7ce7dfa9e6bea70a909f1cc02553741e0f4b886c301735153d064802810e05ceff8e608765d02d9c89e1ebea8d98f6224a11998fd4149033b76dc834a61f8012a5be1e478b29c621d76e755789ba895ed0e0cccbef50c7067dc21b5d73927ebdf99c3fc436dc943e0990d0183485b35070c4ad9d3b5b80f75d2af36e256af21a6ccc42e649a7482357b97ac74b1bf58fb17a0559b85875dae26d49f80c5bc20b4a7d3df6acd0a7bafd6d392ee303b57516685f0089ab2e31a372945e6e5730833a2f6fcfd46ddc8059955734f6413e16e0ce75b84d9da1c97fcefd298d51fe66a96616a21e925a2077114806acb9b42103be625c84af4965170265b51da733e8a299098083c7f04cc9a03509b0ba90c15903e18c7a9986cdeaedcedee7d369eb484eaa28763cabcfca7ff41f5bf45470a685740e6325f49731f7952347f7da38dd34b6fa1c85c68988617fcd8eb7d3515a1badd8ad4a32809043e7db2e00643b6dd7b83a9b32c9284b17390c44242c6f40c309019b62fa4c35187bdba84a0bb96735132ab9e69b563e6f1887b31a29f3ed689817d61842c7084315bbc4e18a4bd9788dae53c717011e7f1f2f7b4eeef9036337a9cec8924793332359ea2bdba984a27b4d1467e416945e7b19208b01f7f9f45cfdc57419623f1c8de81d5e2eee3dad27106d847c7dec06c4a478b2a48de3179a8b7491a7affadc88108db8a8ffb521bbadc9b0c413495892830cf611eb4f86fa08c3f6bbb77422fa1891d7eb86f1092305bb6bfcd433eebbd9b792d4c7e76d321eea54a60a7249abfc8bb24dc156bdd7ce2aaaaaebd9a24ae4e975d14ffe492d5cbb8e54c64aed693cbcf9d34f393ac594975454c31fac040c2ea31e7387f643e951d048062e931aba1b49f32cfea04b6ed2c8ff832e210309749f6d55cb01c4e73f491952c407a4bfa6342dcfb20baf24419d3a19367d9b9e764e405a2ca6437dfe1bcd95c33adc92c2fa0be89543276d8662069cd7644c57de9d7b4c6e3240b7a8945f424087cda08412a66ec33bdaa5a40d98701cb9e3d90313eedf694207df69e25f5eeb36fed1ff3bbdee0b200d465c1c4ca41c330a6b14432dbe6714214559f7e26885deb601db3d794b1bbf56ce75a076144dcc57f15acfeecc5466c171a35c357ca23018492bb5f87e2efd0f51b144741e1cbb4f57b640d3507fb91a5c7e730fc1ee3f57688c1d5e73e807cab023abdb1d6780f71af74cbb2c531ac63f2d1d223fb1ee8becdf988f66c2311fba26fca0138522b375af6fba99b172aeae94c75f317bc3454a004fd74a8a82fbe16d06d3a1b443d43277798687eb5fe35d6e731dca5d1d59c99eda8aad32e5e0dfb0c74319acfd4621b6ee694cab9f44c3d080ae3bb55240f4a2e957e381815cf99d44ea9db2590e81baae0593d65c53b0bee6d4a1b43175a8ba8e5fc858f6f05ba780e47ede0a657a1fee34c15242cadb0eee63e0d8408cf497f0ecb161e36135ad3e0d76c700f7d68cdc34733f77bc1b438f03b530dbb5744f88be2b7a7b772ff61fda218267d590fbd043db96c88984e258f46efaa5ccdd0f5e3f88713b67e30c4386581a81c3635e9d08adfae3108ea6df624f40629888f2e3d2ac35761f82aa2af1552d6cc7427eb46076d3f450090ecc07135d311f3f27fc3111578941d9593eb339d3c5a82ec0d29ed693b7deb670c2cc1d8f1e7f902b4ac9bfc2b0f37bb1c2373d776129876dbd4e11a475cf32aff8cd72acc6b8626aa91a68ecf70e178bcf03dc5cb85bb4940f3f23e546699b43b697aea45618b5b6e77eb89e8681944ef9000b1f4fd0ebf6fae98b6f9c74ee767416a8b8ba9d27742bd6ca047aaf503e158b3b4424986b92133c5be4a19a0ac90c804efd95a17be9324af8af1a1d6128dcff1f6f13b4b9883e68276d815be012557ec6588138d5cbb9be4efca30fe5a02ffd11a20511e0213d1ca69c9381c0daefac0c36d0829ea1d7e8236c50b1862e1df3b01c9853f357e0af2713f7e8c2dee0a6948645b5f3f876338e74e245014e83ea24cead89d57ffa4db1ca71e5bf4c6800a1782b2d344b1e4687dd5e6802624be0349d863976dde6771cd988f02199d402e82c024d0920fc231043c330f52f500c53945f3b67d12543ccda9ba6a2deeb007fa0a2035c036c59caa6e127d6a116584bf179888f2e3c6f691782e3f0086bc35e2878196fc681a81b704f7b24b6b98ec2a5ffdc5316de77826a493d80d1ed50408e84193a55eaf6bedd409b374eb4aa32a70b165b2aefc5205402cbdb48fd7db451e5bc6e47e707c01e5edc0261f6d35cd0bdfb58c3007a1190c67f1ed40310d5512ffaa8d10eef7e89fdc92ffee865730d2ea70e7ad54b289b286cf51532d3248bd10da37c150b29a38b26dee2b90129fc5bd6b1c33b52c957fd66285942f2e5c99b8a9933be83bfed3155f202d3c11a223c8e8cd154cb416aeeec0fe1c59b2196360e2b5ab092ad93f90a9a4b8b292f54f445ccbe8072f60494cd3fc136636985b49e636403369a551c74ffe19124d44449d0c32fa242ed82849898996e33e76a710ab4daf7fb31190bfe95b33fa93bc052ff862c14934c913f822b1d842b3a895e6147fd314664797961c84fd5caadf9ea39ad4a940ddb0446dcdeeee5624f88c0c1cc43a8a764a6d69619d449089c0322d1b2693173765c924d5377779e8c176de5708499cb7f8b4017be335f3f55f9ea9a8cbb0d69d31f2408923c7f366309aeaa9041c4cefa42b88a94d1155243373f8b95e1e43d79abfe6c3834617f5aaa3530a26a82894f6d66e20758575395eada7cacd650651f526ef230e1aedff8eba4da3064ba7838911c741b2cd575b8b9ea29660c09d8a6a47bbbe97bf220b0750ae73d43f10ee6d94a951bc2ac5a32160e891e5eb1b4000c3bdcc167e2329dff727d1ce17529204ceb87fae379a2d06ea3e8e89a5114d5ba0a2d9769b527d53e0e5b1f825024d710c134b17b29d8c09ac4c5336c40fe21ff1f1c3fb350546a4ffc463c19a45fb3bd2c1d7df4463154c81150ef08b311bee78ac69e8598a731141c929734114de3c5d8b6030c053a448bf3c1fc4efc1b35c9c9c0e8ab84a0cdda1324ef76b2cb4614ba5c5647e6b1de6f1f0ad48007e523fc0d94d2924ec9a428f3add27de8a45bd88800cd2e08be5018a68df3a3e5941915ed84b60a682ca5c4e4824dbac6ceef1d1b9df1184722ec2693b35505afe31461fe118a4d00f9008ac68da57c17337b31cb5a9ea37d1b1c0b4cbcab7895bb66e44073ef5eb59123cda1a7bddde171a132622edf9429fd55da8eff4f71adb6930e38fa68bf7f9a39077dce42992dfea7cec5a4792393e47cc983da19a0f447296bdd01f6e7df925d7539282a36a2db533e741ffdd0d82599b420bf75de5c92e13855c4b6ec282e9bc5d3c52ae704e42bcae51f79dd2ed3688314a3bfabc75ede224803d388383fc3a2ed3bbe2e956095af2a9110bd753199b713c06f84848ed08df0994a3ca9363a9f30ec4e7c276b8cf99327691b9bebcdc6f9a61704f05f01ed25db7745cd94d6bdfe16128d6e651f592cabb71549be268f5f713d5a2499ee1325aed9704faa2c9bd024f419d4a926cceb92e29f9f43313f155b6f8ab991de7a9d038eff23d7c6513cee262d02e528ccc647cb46b24a7cfe494d7e0e4300c31024920f8e7321e9fab4be630ae9e548af8354273e3437542330e3da4b71d3a3228aaf206b43435a86b1c11d0bafdb207400f8c4a34211a96cfe5786dceba2e88f1a3586e00376240b313da1eb087cdecdbf4fa8308ff99c3eadbb607cfcd99e35f77c882e04041276df34250fd09e6ea057f97ffc60f9d9886820a7fe2cb660b4cb6a456111e08195fe50da13e4384bfdaa6d8e916dfefe4cef20f4018de65316bf31ac01c2cc00e95890db2851d324d9a329e87c7f1120ca7ffa650ea8a42ee81915563bb6179839b44fe7f0266bada96f7cf5c0222e194ba5a4a4fcfff7a63461bd253169446b25ede7d9582f1469667a6a3297bd73ef6ddf30910cc11bfa15507c523473570f6180960844dd321edfad15ab57b160477dad09c412edfd4646c10da1273734c11ab1d65ff27eec046e7c28529d875f4ea7425c3ab3c615bf61e7f05779"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000002680)=0xa, 0x4) fcntl$setstatus(r4, 0x4, 0x40400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000026c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002700)=0x28) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002740)={r7, 0x7034a880, 0x20}, &(0x7f0000002780)=0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000027c0), 0x206000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000002800)=0x55c, 0x4) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000002840)={0x7ff, 0xa10003, "d8c01d360a65cc04ecc9b730018f42f2b0002c9331ed84f1", {0x9, 0x6}, 0x9}) ioctl$KVM_CAP_HYPERV_SEND_IPI(r1, 0x4068aea3, &(0x7f00000028c0)) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000002980)={0xd58000, 0x0, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000002940)={0xa2090b, 0x4, '\x00', @value64=0x3}}) r9 = syz_clone(0x4aa40000, &(0x7f00000029c0)="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", 0xfa, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)="310c1b0d169e7821399d075cdbb9b2658c425a66976542ad154adc9122ca99b5d855fb9bdf268a4f843f299f9ebdcfc10dcd09d40a8897e45fc1478e4501d33d9a5a59fe925db1b0755560e2ff11a779e9c81a55da7a94ae7df3271dcd7e074c3f719c47ba03d089a97baf85f516d6a7a5c6e7fedd128d41913a41") prlimit64(r9, 0x5, &(0x7f0000002bc0)={0xffff, 0xfffffffffffffffb}, &(0x7f0000002c00)) prlimit64(r9, 0xc, 0x0, &(0x7f0000002c40)) r10 = signalfd4(r0, &(0x7f0000002c80)={[0x1]}, 0x8, 0x80800) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000002cc0)=[r3, r3, r8, r3, r1, r2, r2, r8, r10], 0x9) connect$inet6(r1, &(0x7f0000002d00)={0xa, 0x4e24, 0xffff8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) ioctl$FIBMAP(r1, 0x1, &(0x7f0000002d40)=0xff) 5.305191567s ago: executing program 2 (id=4086): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000002000000000000000000000000000000000003000000000000000700000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000c40005000a010101000000000000000000000000000000006c00000000000000ac141408000000000000000000000000000000000000560000000000fdffffff01000000ff010000000000000000000000000001000000003c"], 0x17c}}, 0x0) 5.01320927s ago: executing program 2 (id=4087): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xf0, 0xffffffff}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000010046) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r4 = syz_io_uring_setup(0x422, &(0x7f00000000c0)={0x0, 0x20079af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x600) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff0000000000000300", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 4.066087466s ago: executing program 4 (id=4088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) futimesat(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="08000500020000008ae0987d05d4957bee287e903b34013670af8ce57960a83905b68e56e12cc676660391f829957d911e9fdfeeab"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c4c1}, 0x80) 3.534687572s ago: executing program 4 (id=4089): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) eventfd(0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}}, 0x0) r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x100, 0x9, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 3.197119425s ago: executing program 6 (id=4090): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x1ff, 0x10, 0x10, 0x0, @in={0x2, 0x4ea3, @loopback}, @in={0x2, 0x4e21, @broadcast}}}, 0x118) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)={0x1ec, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa6, 0xa8, @random="fb42b4cc7c19211159963eef7e3633b061b09bf65646b5713509a7fa0c403ed21f79b1bee9c3cd3564b287545b6fee75e062bb0d8d03f23a3aefa72fe41acc45fc972446344af2d9d8a6994773b2bb8421afbabdb9310be345748b9e79840ca1fc9b44af0c6ad49f1d1f4868a2640ebf668bb4b3e4ac42a1ee0bf7eeb54bf257ae84b39511d9159325db0f19b8bf799aa08d2ce8bb07a7a5738ffd31500c3a914528"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x9d, 0xa8, @random="459e022b8e99c3f4794745fbb1aaf059750075b74911714d9a05aed2616736355860adfa2245e0ebef588f16e4675f9edd5507f7dc41aff57f0507ca2be1e046f8e019d388eb6bddf4a36d0930c31b60b2de1eea95bc4bf22b169e70ca80acebe44cf88b11251fa48ef87742bc2b2e3c0414d5a3be776137fb8c3f9d326cbc553b20ba53887fadf135ec6a8cd8ba3f57bed5a0c277fbf5b239"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000010) 2.935322431s ago: executing program 4 (id=4091): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff00000018bfa1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xfed, &(0x7f0000001840)=""/4077}, 0x94) 2.697890195s ago: executing program 5 (id=4092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) unshare(0x8040480) r2 = socket$unix(0x1, 0x1, 0x0) cachestat(r2, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff0106}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) 2.49752667s ago: executing program 4 (id=4093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03f00000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000010700000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xf4}}, 0x0) 2.434819618s ago: executing program 2 (id=4094): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xfffffffe}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000210000000000000000"}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 2.417630094s ago: executing program 6 (id=4095): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_disconnect(r1) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000300)='./file0\x00', 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x40000022, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60600) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x0, 0x7fffffff}]}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000140)="ec3a", 0x2}], 0xa, 0x9, 0x26d0d5f1) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.173816861s ago: executing program 0 (id=4096): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4000}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$l2tp(0x2, 0x2, 0x73) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000000c0)=@fd={0x2, 0x9, 0x4, 0x100, 0x5, {}, {0x3, 0xc, 0x3, 0x2, 0x2, 0x4, '<3`L'}, 0xaf, 0x4, {}, 0x67a80000, 0x0, r3}) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0xfa, 0xfffffffe, 0x10, @empty, @local, 0x8, 0x8, 0x87, 0x8}}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5cfedbc930000000003d040000000000000000000000bc5e118bb2c19bc20ef506da17f7e5b2fdc0e702420fc1712533dd829d36dc0d6c621bc5a6589a5231f8508d4921850e55e0c3da03ed930df0439004696eaf91c37584a4caa2010181a0c67992", @ANYRES32=r9, @ANYBLOB="100a0500000000000000230003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4005}, 0x20040040) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.083835521s ago: executing program 4 (id=4097): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100009f09a00871041303d581010203010902120001000000000904"], 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000080)={0xfffffffffffffffc, 0x1b4}) (async) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000000080)={0xfffffffffffffffc, 0x1b4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x3}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}}) 2.077582862s ago: executing program 2 (id=4098): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8929, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="141161002e00010026bdf000fc52000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 916.50081ms ago: executing program 2 (id=4099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) futimesat(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="08000500020000008ae0987d05d4957bee287e903b34013670af8ce57960a83905b68e56e12cc676660391f829957d911e9fdfeeab"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x2d}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c4c1}, 0x80) 475.64275ms ago: executing program 2 (id=4100): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) fcntl$setstatus(r0, 0x4, 0x2400) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000440)='7', 0x1}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(r0, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ftruncate(r6, 0x100000001) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 0s ago: executing program 4 (id=4101): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) eventfd(0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x4}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x40}}, 0x0) r3 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65f, 0x100, 0x9, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): led err ffffffb9 [ 1033.200151][T19138] loop6: detected capacity change from 0 to 524288000 [ 1033.244468][ T5916] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.255827][ T5913] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.284180][T19139] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3497'. [ 1033.337155][T19138] bond2: option ad_user_port_key: invalid value (62367) [ 1033.344266][T19138] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 1033.356011][ T5913] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.368791][ T5916] usb 7-1: USB disconnect, device number 42 [ 1033.437454][T19138] bond2 (unregistering): Released all slaves [ 1033.942106][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3500'. [ 1034.294326][T19151] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 19151 comm: syz.6.3502) [ 1034.331908][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1034.331921][ T30] audit: type=1800 audit(1765259022.045:537): pid=19151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3502" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=83713 res=0 errno=0 [ 1035.023457][ T39] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1035.193075][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 1035.201919][ T39] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1035.212095][ T39] usb 3-1: config 0 has no interface number 0 [ 1035.223425][ T39] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1035.277699][ T39] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1035.331086][ T39] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1035.349018][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.403398][ T39] usb 3-1: Product: syz [ 1035.407602][ T39] usb 3-1: Manufacturer: syz [ 1035.499062][ T39] usb 3-1: SerialNumber: syz [ 1035.540060][ T39] usb 3-1: config 0 descriptor?? [ 1035.577259][T19158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1035.584892][T19158] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1035.615437][ T39] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1036.493121][ T5916] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1036.675568][T19190] xt_hashlimit: max too large, truncated to 1048576 [ 1036.833350][ T5916] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1036.845753][T19191] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1036.878239][ T5916] usb 6-1: can't read configurations, error -71 [ 1037.485320][ T9] usb 3-1: USB disconnect, device number 13 [ 1037.563104][ T5913] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1037.832633][ T5913] usb 5-1: Using ep0 maxpacket: 8 [ 1037.905795][ T5913] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1037.914193][ T5913] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1037.954196][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1037.990246][ T5913] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1038.016669][ T5913] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1038.039265][ T5913] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1038.049940][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.278742][ T5913] usb 5-1: usb_control_msg returned -32 [ 1038.287885][ T5913] usbtmc 5-1:16.0: can't read capabilities [ 1038.451918][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1038.651720][T19213] netlink: 'syz.4.3513': attribute type 7 has an invalid length. [ 1038.663197][T19213] netlink: 'syz.4.3513': attribute type 8 has an invalid length. [ 1038.683187][T19213] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1038.722925][ T8853] usb 5-1: USB disconnect, device number 22 [ 1038.793420][ T5918] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1038.822200][T19217] xt_hashlimit: max too large, truncated to 1048576 [ 1038.939580][T19219] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1039.053099][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1039.066523][ T5918] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1039.082917][ T5918] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1039.110511][ T5918] usb 6-1: config 1 has no interface number 1 [ 1039.131528][ T5918] usb 6-1: too many endpoints for config 1 interface 2 altsetting 12: 66, using maximum allowed: 30 [ 1039.149846][ T5918] usb 6-1: config 1 interface 2 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 1039.172360][ T5918] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1039.191359][ T5918] usb 6-1: config 1 interface 2 has no altsetting 2 [ 1039.205603][ T5918] usb 6-1: Dual-Role OTG device on HNP port [ 1039.222412][ T5918] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.244971][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.282392][ T5918] usb 6-1: Product: syz [ 1039.294084][ T5918] usb 6-1: Manufacturer: syz [ 1039.319139][ T5918] usb 6-1: SerialNumber: syz [ 1039.580591][ T5916] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1039.589820][T19230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.623348][T19231] loop3: detected capacity change from 0 to 7 [ 1039.650981][T19231] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1039.657423][T19230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.667051][T19231] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1039.674139][T19231] loop3: p2 start 393216 is beyond EOD, truncated [ 1039.680676][T19231] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1039.716487][T19231] loop3: p4 start 1048576 is beyond EOD, truncated [ 1039.753258][T19231] loop3: p5 size 524288 extends beyond EOD, truncated [ 1039.798247][ T5916] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1039.812312][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1039.816523][ T5918] usb 6-1: USB disconnect, device number 46 [ 1039.877136][ T5916] usb 7-1: Product: syz [ 1039.886643][ T5916] usb 7-1: SerialNumber: syz [ 1039.990310][ T5916] usb 7-1: config 0 descriptor?? [ 1040.024174][T17938] udevd[17938]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.065065][T19231] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1040.227657][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.283669][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.339196][T19221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3521'. [ 1040.350259][T19221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.361826][T19221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.837952][ T5916] usb 7-1: USB disconnect, device number 43 [ 1041.626065][T19262] netlink: 'syz.6.3530': attribute type 3 has an invalid length. [ 1041.923131][ T10] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 1041.940560][ T30] audit: type=1326 audit(1765259029.625:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.005075][ T30] audit: type=1326 audit(1765259029.625:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.043179][ T30] audit: type=1326 audit(1765259029.625:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.085072][ T30] audit: type=1326 audit(1765259029.625:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.174306][ T30] audit: type=1326 audit(1765259029.625:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.200625][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.214000][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1042.234302][ T10] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1042.244377][ T30] audit: type=1326 audit(1765259029.625:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.267310][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.449582][ T10] usb 7-1: config 0 descriptor?? [ 1042.474305][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1042.482651][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1042.488874][ T30] audit: type=1326 audit(1765259029.625:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.522058][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1042.542388][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1042.550905][ T10] usb 7-1: media controller created [ 1042.556585][ T30] audit: type=1326 audit(1765259029.625:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.582736][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1042.595436][ T30] audit: type=1326 audit(1765259029.625:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19258 comm="syz.5.3531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f822098f749 code=0x7ffc0000 [ 1042.652069][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1042.703662][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1042.711335][T19262] dvb-usb: bulk message failed: -22 (2/0) [ 1043.058478][T19277] loop3: detected capacity change from 0 to 7 [ 1043.095654][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input81 [ 1043.114675][T19277] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1043.121281][T19277] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1043.128506][T19277] loop3: p2 start 393216 is beyond EOD, truncated [ 1043.135231][T19277] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1043.164540][T19277] loop3: p4 start 1048576 is beyond EOD, truncated [ 1043.178090][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1043.195275][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1043.230035][T19277] loop3: p5 size 524288 extends beyond EOD, truncated [ 1043.349627][T19277] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1043.357222][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1043.362974][ T10] dvb-usb: error while querying for an remote control event. [ 1043.525177][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1043.538068][ T5913] dvb-usb: error while querying for an remote control event. [ 1043.753392][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1043.762735][ T5913] dvb-usb: error while querying for an remote control event. [ 1044.003586][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1044.036525][ T5913] dvb-usb: error while querying for an remote control event. [ 1044.247193][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1044.282137][ T5913] dvb-usb: error while querying for an remote control event. [ 1044.509417][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1044.575774][ T9] dvb-usb: error while querying for an remote control event. [ 1044.598000][ T8853] usb 7-1: USB disconnect, device number 44 [ 1044.635217][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1044.697129][T19288] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3538'. [ 1044.775051][ T8853] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1044.829300][T19294] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3540'. [ 1045.476278][T19302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.516760][T19302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.688459][T15131] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1045.877310][T19312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1046.167116][T19319] netlink: 'syz.5.3547': attribute type 1 has an invalid length. [ 1046.179516][T19318] pimreg: entered allmulticast mode [ 1046.212255][T19319] bond1: entered promiscuous mode [ 1046.217842][T19319] bond1: entered allmulticast mode [ 1046.227943][T19319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1046.256102][T19318] pimreg: left allmulticast mode [ 1046.386432][T19321] macvlan3: entered promiscuous mode [ 1046.392518][T19321] macvlan3: entered allmulticast mode [ 1046.409273][T19321] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1046.512099][T19325] ipt_ECN: cannot use operation on non-tcp rule [ 1046.566899][T19322] gtp0: entered allmulticast mode [ 1046.617085][T18503] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1046.782417][T19332] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3551'. [ 1046.803447][T18503] usb 5-1: Using ep0 maxpacket: 16 [ 1046.820211][T18503] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.846783][T18503] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.878267][T18503] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1046.900658][T18503] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1046.910032][T18503] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1046.923315][T18503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.951031][T18503] usb 5-1: config 0 descriptor?? [ 1047.205143][T19342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3554'. [ 1047.264362][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1047.453149][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1047.506853][T19349] loop3: detected capacity change from 0 to 7 [ 1047.519753][T19349] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1047.530964][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1047.564441][T19318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.583087][T19318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.595869][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1047.653683][T19349] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1047.661787][T19318] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3548'. [ 1047.682255][T19349] loop3: p2 start 393216 is beyond EOD, truncated [ 1047.719828][T19318] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3548'. [ 1047.735458][T19349] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1047.744711][ T9] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1047.754235][T19349] loop3: p4 start 1048576 is beyond EOD, truncated [ 1047.760842][T19349] loop3: p5 size 524288 extends beyond EOD, truncated [ 1047.767748][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.767778][ T9] usb 7-1: Product: syz [ 1047.780147][T19318] tipc: Started in network mode [ 1047.785227][T19318] tipc: Node identity 10000, cluster identity 2 [ 1047.811413][T19318] tipc: Node number set to 65536 [ 1047.816922][ T9] usb 7-1: Manufacturer: syz [ 1047.832920][T18503] hid (null): unknown global tag 0xdf [ 1047.842456][ T9] usb 7-1: SerialNumber: syz [ 1047.849528][T19349] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1047.859541][T18503] hid (null): unknown global tag 0xe [ 1047.907103][ T9] usb 7-1: config 0 descriptor?? [ 1048.097390][T19318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.114794][T19318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.153354][ T5913] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1048.168890][T19318] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3548'. [ 1048.277708][T18503] usb 5-1: USB disconnect, device number 23 [ 1048.313341][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 1048.326679][ T9] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 1048.339238][ T5913] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 1048.347729][ T5913] usb 6-1: config 0 has no interface number 0 [ 1048.387443][ T5913] usb 6-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1048.411354][ T5913] usb 6-1: config 0 interface 200 has no altsetting 0 [ 1048.442380][ T9] usb 7-1: USB disconnect, device number 45 [ 1048.448867][ T5913] usb 6-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1048.477394][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.493246][ T5913] usb 6-1: Product: syz [ 1048.497453][ T5913] usb 6-1: Manufacturer: syz [ 1048.502084][ T5913] usb 6-1: SerialNumber: syz [ 1048.555635][ T5913] usb 6-1: config 0 descriptor?? [ 1048.878176][ T5913] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input83 [ 1048.953904][ T5913] usb 6-1: USB disconnect, device number 47 [ 1049.276569][T19367] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1049.519972][T19379] netlink: 'syz.0.3568': attribute type 1 has an invalid length. [ 1049.557490][T19379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1049.603755][T19379] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1049.636031][T19379] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1049.644192][T19379] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1049.953131][ T5916] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1050.117847][ T5916] usb 6-1: no configurations [ 1050.122700][ T5916] usb 6-1: can't read configurations, error -22 [ 1050.214985][T19397] openvswitch: netlink: Actions may not be safe on all matching packets [ 1050.256035][ T5916] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1050.539865][ T5916] usb 6-1: no configurations [ 1050.557852][ T5916] usb 6-1: can't read configurations, error -22 [ 1050.595615][ T5916] usb usb6-port1: attempt power cycle [ 1050.613431][ T39] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1050.783197][ T39] usb 3-1: device descriptor read/64, error -71 [ 1050.953173][ T5916] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1050.961238][T19408] __nla_validate_parse: 1 callbacks suppressed [ 1050.961260][T19408] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3575'. [ 1051.025332][ T5916] usb 6-1: no configurations [ 1051.066642][ T5916] usb 6-1: can't read configurations, error -22 [ 1051.084354][ T39] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1051.244137][ T39] usb 3-1: device descriptor read/64, error -71 [ 1051.253074][ T5916] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1051.315245][ T5916] usb 6-1: no configurations [ 1051.319881][ T5916] usb 6-1: can't read configurations, error -22 [ 1051.382314][ T5916] usb usb6-port1: unable to enumerate USB device [ 1051.391547][ T39] usb usb3-port1: attempt power cycle [ 1051.447282][T19415] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3577'. [ 1051.699367][T19421] netlink: 'syz.0.3579': attribute type 3 has an invalid length. [ 1051.783127][ T39] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1051.833076][ T39] usb 3-1: device descriptor read/8, error -71 [ 1052.093115][ T39] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1052.126339][ T39] usb 3-1: device descriptor read/8, error -71 [ 1052.244003][ T39] usb usb3-port1: unable to enumerate USB device [ 1054.043115][ T39] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1054.275573][ T39] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.289831][ T39] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1054.301285][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.309787][ T39] usb 6-1: Product: syz [ 1054.314259][ T39] usb 6-1: Manufacturer: syz [ 1054.318893][ T39] usb 6-1: SerialNumber: syz [ 1054.937410][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.003158][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.146818][T19465] netlink: 'syz.6.3590': attribute type 30 has an invalid length. [ 1055.239639][T19468] netlink: 'syz.0.3587': attribute type 10 has an invalid length. [ 1057.701545][ T39] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1057.707780][ T39] cdc_ncm 6-1:1.0: bind() failure [ 1057.717828][ T39] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1057.758242][ T39] cdc_ncm 6-1:1.1: bind() failure [ 1057.775274][ T39] usb 6-1: USB disconnect, device number 52 [ 1057.943356][ T5918] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1058.139775][ T5918] usb 7-1: no configurations [ 1058.144487][ T5918] usb 7-1: can't read configurations, error -22 [ 1058.493173][ T5918] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1058.501002][ T39] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1058.556293][T19500] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3597'. [ 1058.704936][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 1058.712398][ T5918] usb 7-1: no configurations [ 1058.717274][ T5918] usb 7-1: can't read configurations, error -22 [ 1058.728959][ T39] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1058.737975][ T39] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1058.747594][ T5918] usb usb7-port1: attempt power cycle [ 1058.773356][ T39] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1058.874907][ T39] usb 3-1: config 250 has no interface number 0 [ 1058.973319][ T39] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1059.013197][ T39] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1059.037151][ T39] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1059.063801][ T39] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1059.103261][ T39] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1059.126198][ T5918] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1059.153319][ T39] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1059.165469][ T5918] usb 7-1: no configurations [ 1059.175826][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1059.190813][ T5918] usb 7-1: can't read configurations, error -22 [ 1059.203084][ T39] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1059.231920][ T39] usb 3-1: Product: syz [ 1059.238662][ T39] usb 3-1: SerialNumber: syz [ 1059.267272][ T39] hub 3-1:250.228: bad descriptor, ignoring hub [ 1059.280612][ T39] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1059.361583][ T5918] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 1059.401307][ T5918] usb 7-1: no configurations [ 1059.408030][ T5918] usb 7-1: can't read configurations, error -22 [ 1059.422353][ T5918] usb usb7-port1: unable to enumerate USB device [ 1059.471650][ T39] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1059.644128][ T39] usb 3-1: USB disconnect, device number 19 [ 1059.678048][ T39] usblp0: removed [ 1059.786498][T19511] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 1060.084113][ T39] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1060.253077][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 1060.261070][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.284194][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1060.303237][ T39] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1060.320393][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.338491][ T39] usb 6-1: config 0 descriptor?? [ 1061.312091][ T5833] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 1061.357840][T19532] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1061.478249][T19532] bond0: entered promiscuous mode [ 1061.505444][T19532] bond_slave_0: entered promiscuous mode [ 1061.531209][T19532] bond_slave_1: entered promiscuous mode [ 1061.538658][T19532] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1061.557650][T19532] bond0: left promiscuous mode [ 1061.562686][T19532] bond_slave_0: left promiscuous mode [ 1061.572278][T19532] bond_slave_1: left promiscuous mode [ 1061.605591][T19532] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1061.738119][T19541] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3607'. [ 1062.148143][T19541] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3607'. [ 1063.150093][T15370] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1063.323214][T15370] usb 7-1: Using ep0 maxpacket: 16 [ 1063.343907][T15370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1063.378594][T15370] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1063.408063][T15370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.421086][T15370] usb 7-1: Product: syz [ 1063.425445][T15370] usb 7-1: Manufacturer: syz [ 1063.431022][T15370] usb 7-1: SerialNumber: syz [ 1063.444457][T15370] usb 7-1: config 0 descriptor?? [ 1063.466591][T15370] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1063.481597][T15370] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1063.985078][ T39] usbhid 6-1:0.0: can't add hid device: -71 [ 1063.991185][ T39] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1064.167096][T15370] em28xx 7-1:0.0: chip ID is em2874 [ 1064.243593][ T39] usb 6-1: USB disconnect, device number 53 [ 1064.452611][T19593] IPv6: addrconf: prefix option has invalid lifetime [ 1064.528500][T19595] netlink: 'syz.0.3623': attribute type 3 has an invalid length. [ 1064.812512][T15370] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1064.848840][T15370] em28xx 7-1:0.0: board has no eeprom [ 1065.008423][T19605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3624'. [ 1065.173790][T15370] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1065.210614][T15370] em28xx 7-1:0.0: dvb set to bulk mode. [ 1065.231384][ T8853] em28xx 7-1:0.0: Binding DVB extension [ 1065.613538][T15370] usb 7-1: USB disconnect, device number 50 [ 1065.633884][T15370] em28xx 7-1:0.0: Disconnecting em28xx [ 1065.764345][ T8853] em28xx 7-1:0.0: Registering input extension [ 1065.983057][ T8853] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1065.999611][ T8853] Registered IR keymap rc-empty [ 1066.121496][ T8853] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1066.226101][ T8853] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input84 [ 1066.316456][ T8853] em28xx 7-1:0.0: Input extension successfully initialized [ 1066.358897][T15370] em28xx 7-1:0.0: Closing input extension [ 1066.391628][T15370] em28xx 7-1:0.0: Freeing device [ 1068.370328][T19639] IPv6: addrconf: prefix option has invalid lifetime [ 1068.379510][T19641] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1068.396029][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3637'. [ 1069.104781][T18503] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1069.375537][T18503] usb 3-1: Using ep0 maxpacket: 16 [ 1069.402546][T18503] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 17408, setting to 1024 [ 1069.426578][T18503] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1069.455600][T18503] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1069.486272][T18503] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1069.519357][T18503] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1069.546397][T18503] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.557076][T18503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1069.571604][T18503] usb 3-1: SerialNumber: syz [ 1069.596532][T19652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1069.612208][T19652] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1070.064946][T19666] vlan2: entered promiscuous mode [ 1070.101709][T19666] macvlan0: entered promiscuous mode [ 1070.104613][T18503] usb 3-1: USB disconnect, device number 20 [ 1070.194960][T19668] ipt_rpfilter: unknown options [ 1070.377960][T19666] vlan2: entered promiscuous mode [ 1070.873121][ T5916] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1071.002573][T19683] IPv6: addrconf: prefix option has invalid lifetime [ 1071.067204][ T5916] usb 7-1: Using ep0 maxpacket: 8 [ 1071.110971][ T5916] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 1071.165976][T19687] netlink: 'syz.2.3648': attribute type 10 has an invalid length. [ 1071.193091][ T5916] usb 7-1: config 0 has no interface number 0 [ 1071.214956][ T5916] usb 7-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1071.241241][ T5916] usb 7-1: config 0 interface 200 has no altsetting 0 [ 1071.280465][ T5916] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1071.297130][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.314915][ T5916] usb 7-1: Product: syz [ 1071.322340][ T5916] usb 7-1: Manufacturer: syz [ 1071.327296][ T5916] usb 7-1: SerialNumber: syz [ 1071.334751][ T5916] usb 7-1: config 0 descriptor?? [ 1071.447861][T19696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1071.559885][ T5916] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.200/input/input86 [ 1071.609772][ T5916] usb 7-1: USB disconnect, device number 51 [ 1071.664585][ T9] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 1071.867154][ T9] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1071.876135][ T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.888124][ T9] usb 6-1: config 8 has no interface number 0 [ 1071.913910][ T9] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1071.953293][ T9] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1071.963615][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.972256][ T9] usb 6-1: Product: syz [ 1071.978905][ T9] usb 6-1: Manufacturer: syz [ 1071.984235][ T9] usb 6-1: SerialNumber: syz [ 1072.331454][T19706] usb usb8: usbfs: process 19706 (syz.6.3655) did not claim interface 0 before use [ 1072.585809][ T9] usb 6-1: USB disconnect, device number 54 [ 1073.638675][ T30] audit: type=1326 audit(1765259061.355:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19720 comm="syz.4.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28018f749 code=0x7ffc0000 [ 1073.662185][ T30] audit: type=1326 audit(1765259061.385:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19720 comm="syz.4.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28018f749 code=0x7ffc0000 [ 1073.717386][ T30] audit: type=1326 audit(1765259061.385:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19720 comm="syz.4.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff28018f749 code=0x7ffc0000 [ 1073.740572][ T30] audit: type=1326 audit(1765259061.385:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19720 comm="syz.4.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28018f749 code=0x7ffc0000 [ 1073.768659][ T30] audit: type=1326 audit(1765259061.385:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19720 comm="syz.4.3659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28018f749 code=0x7ffc0000 [ 1074.073175][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1074.235228][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1074.245214][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.257866][ T9] usb 6-1: config 0 descriptor?? [ 1074.474186][ T9] ath6kl: Failed to submit usb control message: -71 [ 1074.487449][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1074.497699][ T9] ath6kl: Unable to send get target info: -71 [ 1074.510797][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1074.517755][ T9] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1074.530796][ T9] usb 6-1: USB disconnect, device number 55 [ 1074.542379][T19738] IPv6: addrconf: prefix option has invalid lifetime [ 1074.903254][T18503] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1075.055580][T19750] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3667'. [ 1075.073228][T18503] usb 5-1: Using ep0 maxpacket: 8 [ 1075.085769][T18503] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1075.094701][T18503] usb 5-1: config 0 has no interface number 0 [ 1075.100985][T18503] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1075.111031][T18503] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1075.124672][T18503] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1075.134753][T18503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.142795][T18503] usb 5-1: Product: syz [ 1075.152194][T18503] usb 5-1: Manufacturer: syz [ 1075.159955][T18503] usb 5-1: SerialNumber: syz [ 1075.175922][T18503] usb 5-1: config 0 descriptor?? [ 1075.359658][T19757] netlink: 'syz.5.3669': attribute type 3 has an invalid length. [ 1075.451565][T18503] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input87 [ 1075.518389][T18503] usb 5-1: USB disconnect, device number 24 [ 1075.654770][T15131] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1075.843975][T15131] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.869912][T15131] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1075.895530][T15131] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1075.910149][T19759] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3670'. [ 1076.157669][T15131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.178889][T15131] usb 6-1: config 0 descriptor?? [ 1076.196806][T15131] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1076.238567][T15131] dvb-usb: bulk message failed: -22 (3/0) [ 1076.266929][T15131] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1076.287853][T15131] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1076.304767][T15131] usb 6-1: media controller created [ 1076.325765][T15131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.362091][T15131] dvb-usb: bulk message failed: -22 (6/0) [ 1076.388545][T15131] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1076.411419][T15131] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input89 [ 1076.449402][T15131] dvb-usb: schedule remote query interval to 150 msecs. [ 1076.465450][T15131] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1076.619012][T19757] dvb-usb: bulk message failed: -22 (2/0) [ 1076.634528][T15370] dvb-usb: bulk message failed: -22 (1/0) [ 1076.654756][T15370] dvb-usb: error while querying for an remote control event. [ 1076.842349][T19769] IPv6: addrconf: prefix option has invalid lifetime [ 1076.860564][T15370] dvb-usb: bulk message failed: -22 (1/0) [ 1076.883157][T15370] dvb-usb: error while querying for an remote control event. [ 1077.054188][T15370] dvb-usb: bulk message failed: -22 (1/0) [ 1077.070244][T15370] dvb-usb: error while querying for an remote control event. [ 1077.263116][T15370] dvb-usb: bulk message failed: -22 (1/0) [ 1077.274748][T15370] dvb-usb: error while querying for an remote control event. [ 1077.489209][T15370] dvb-usb: bulk message failed: -22 (1/0) [ 1077.503036][T15370] dvb-usb: error while querying for an remote control event. [ 1077.673288][T15131] dvb-usb: bulk message failed: -22 (1/0) [ 1077.692367][T15131] dvb-usb: error while querying for an remote control event. [ 1077.796559][T19784] usb usb8: usbfs: process 19784 (syz.6.3677) did not claim interface 0 before use [ 1077.943174][T15131] dvb-usb: bulk message failed: -22 (1/0) [ 1077.949508][T15131] dvb-usb: error while querying for an remote control event. [ 1078.029107][T19787] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3680'. [ 1078.114099][T15131] dvb-usb: bulk message failed: -22 (1/0) [ 1078.129039][T15131] dvb-usb: error while querying for an remote control event. [ 1078.393116][T18503] dvb-usb: bulk message failed: -22 (1/0) [ 1078.399127][T18503] dvb-usb: error while querying for an remote control event. [ 1078.423197][T15131] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1078.462884][ T5916] usb 6-1: USB disconnect, device number 56 [ 1078.506289][T19796] loop3: detected capacity change from 0 to 7 [ 1078.528715][ T5916] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1078.593396][T15131] usb 5-1: Using ep0 maxpacket: 8 [ 1078.600014][T19796] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1078.607513][T15131] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1078.620045][T15131] usb 5-1: config 0 has no interface number 0 [ 1078.631157][T15131] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1078.653459][T19796] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1078.660649][T19796] loop3: p2 start 393216 is beyond EOD, truncated [ 1078.667290][T19796] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1078.680400][T19796] loop3: p4 start 1048576 is beyond EOD, truncated [ 1078.690681][T19796] loop3: p5 size 524288 extends beyond EOD, truncated [ 1078.700424][T15131] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1078.863377][T15131] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 1078.873107][T15131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.882602][T15131] usb 5-1: Product: syz [ 1078.887764][T15131] usb 5-1: Manufacturer: syz [ 1078.893229][T15131] usb 5-1: SerialNumber: syz [ 1078.929065][T19796] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1078.962592][T15131] usb 5-1: config 0 descriptor?? [ 1079.029341][T19803] netlink: 666 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1079.212205][T15131] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input90 [ 1079.276127][T15131] usb 5-1: USB disconnect, device number 25 [ 1079.305789][T19807] IPv6: addrconf: prefix option has invalid lifetime [ 1079.800989][T19815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3689'. [ 1080.197762][T19824] xt_hashlimit: max too large, truncated to 1048576 [ 1080.271248][T19824] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1080.362307][T19828] netlink: 'syz.4.3691': attribute type 10 has an invalid length. [ 1081.338367][T19842] netlink: 'syz.6.3693': attribute type 3 has an invalid length. [ 1081.643088][ T5916] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1081.762794][T19844] xt_recent: Unsupported userspace flags (000000de) [ 1081.813512][T19846] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3698'. [ 1081.847861][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.869897][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1081.923456][ T5916] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1081.952146][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.977498][T19848] fuse: Unknown parameter '0xffffffffffffffff' [ 1081.993240][ T5916] usb 7-1: config 0 descriptor?? [ 1082.020503][ T5916] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1082.041611][ T5916] dvb-usb: bulk message failed: -22 (3/0) [ 1082.071595][ T5916] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1082.102867][ T5916] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1082.110875][ T5916] usb 7-1: media controller created [ 1082.119574][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1082.197938][T19858] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3702'. [ 1082.218340][ T5916] dvb-usb: bulk message failed: -22 (6/0) [ 1082.252155][T19842] dvb-usb: bulk message failed: -22 (2/0) [ 1082.360516][ T5916] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1082.393237][ T5916] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input91 [ 1082.441813][ T5916] dvb-usb: schedule remote query interval to 150 msecs. [ 1082.457363][ T5916] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1082.613192][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1082.627762][ T5916] dvb-usb: error while querying for an remote control event. [ 1082.891954][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1082.925904][ T5916] dvb-usb: error while querying for an remote control event. [ 1083.103158][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1083.110364][ T5916] dvb-usb: error while querying for an remote control event. [ 1083.251774][T19871] loop3: detected capacity change from 0 to 7 [ 1083.263777][T19871] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1083.274818][T19871] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1083.281700][T19871] loop3: p2 start 393216 is beyond EOD, truncated [ 1083.288319][T19871] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1083.295379][T19871] loop3: p4 start 1048576 is beyond EOD, truncated [ 1083.302152][T19871] loop3: p5 size 524288 extends beyond EOD, truncated [ 1083.309134][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1083.343699][ T5916] dvb-usb: error while querying for an remote control event. [ 1083.365180][T19871] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1083.553474][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1083.559566][ T5916] dvb-usb: error while querying for an remote control event. [ 1083.723229][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1083.729023][ T5916] dvb-usb: error while querying for an remote control event. [ 1083.923166][ T5916] dvb-usb: bulk message failed: -22 (1/0) [ 1083.929774][ T5916] dvb-usb: error while querying for an remote control event. [ 1084.498690][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1084.639127][ T9] dvb-usb: error while querying for an remote control event. [ 1084.696888][ T5918] usb 7-1: USB disconnect, device number 52 [ 1084.812603][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1085.608012][T19896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3712'. [ 1085.735530][T19898] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3713'. [ 1086.263087][T18503] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1086.356482][T19914] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3715'. [ 1086.366820][T19914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3715'. [ 1086.535534][T18503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.581008][T18503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.595083][T19919] netlink: 'syz.6.3718': attribute type 3 has an invalid length. [ 1086.686574][T18503] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1086.871518][T18503] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1086.883387][ T9] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1086.911425][T18503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.961275][T18503] usb 5-1: config 0 descriptor?? [ 1086.979491][T19921] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3714'. [ 1087.048203][T19923] bridge1: entered allmulticast mode [ 1087.378853][T18503] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xd [ 1087.485887][T18503] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1087.561758][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.596681][T19933] syz.0.3714: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1087.635881][ T5916] usb 5-1: USB disconnect, device number 26 [ 1087.679287][T19935] loop3: detected capacity change from 0 to 7 [ 1087.690979][T19935] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1087.698362][T19935] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1087.715385][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1087.743476][ T9] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1087.756057][T19933] CPU: 0 UID: 0 PID: 19933 Comm: syz.0.3714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.756081][T19933] Tainted: [L]=SOFTLOCKUP [ 1087.756086][T19933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1087.756095][T19933] Call Trace: [ 1087.756100][T19933] [ 1087.756106][T19933] dump_stack_lvl+0x189/0x250 [ 1087.756128][T19933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.756144][T19933] ? __pfx__printk+0x10/0x10 [ 1087.756162][T19933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1087.756179][T19933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1087.756193][T19933] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1087.756208][T19933] warn_alloc+0x214/0x310 [ 1087.756224][T19933] ? stack_trace_save+0x9c/0xe0 [ 1087.756243][T19933] ? __pfx_warn_alloc+0x10/0x10 [ 1087.756260][T19933] ? kasan_save_track+0x4f/0x80 [ 1087.756272][T19933] ? kasan_save_track+0x3e/0x80 [ 1087.756282][T19933] ? __kasan_kmalloc+0x93/0xb0 [ 1087.756294][T19933] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1087.756305][T19933] ? xskq_create+0x56/0x170 [ 1087.756319][T19933] ? xsk_setsockopt+0x4dc/0x8d0 [ 1087.756330][T19933] ? do_sock_setsockopt+0x17c/0x1b0 [ 1087.756347][T19933] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1087.756362][T19933] ? do_syscall_64+0xfa/0xf80 [ 1087.756381][T19933] __vmalloc_node_range_noprof+0x134/0x16a0 [ 1087.756414][T19933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1087.756431][T19933] ? __kasan_kmalloc+0x93/0xb0 [ 1087.756448][T19933] vmalloc_user_noprof+0xad/0xf0 [ 1087.756461][T19933] ? xskq_create+0xbf/0x170 [ 1087.756475][T19933] xskq_create+0xbf/0x170 [ 1087.756491][T19933] xsk_init_queue+0xb0/0x110 [ 1087.756506][T19933] xsk_setsockopt+0x4dc/0x8d0 [ 1087.756521][T19933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1087.756536][T19933] ? __pfx_aa_sk_perm+0x10/0x10 [ 1087.756557][T19933] ? aa_sock_opt_perm+0xff/0x1a0 [ 1087.756571][T19933] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1087.756583][T19933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1087.756597][T19933] do_sock_setsockopt+0x17c/0x1b0 [ 1087.756616][T19933] __x64_sys_setsockopt+0x13f/0x1b0 [ 1087.756637][T19933] do_syscall_64+0xfa/0xf80 [ 1087.756654][T19933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.756666][T19933] ? clear_bhb_loop+0x60/0xb0 [ 1087.756680][T19933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.756694][T19933] RIP: 0033:0x7f6e14b8f749 [ 1087.756708][T19933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.756719][T19933] RSP: 002b:00007f6e1256e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1087.756733][T19933] RAX: ffffffffffffffda RBX: 00007f6e14de6360 RCX: 00007f6e14b8f749 [ 1087.756743][T19933] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e [ 1087.756751][T19933] RBP: 00007f6e14c13f91 R08: 0000000000000052 R09: 0000000000000000 [ 1087.756759][T19933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.756767][T19933] R13: 00007f6e14de63f8 R14: 00007f6e14de6360 R15: 00007f6e14f0fa28 [ 1087.756787][T19933] [ 1087.756793][T19933] Mem-Info: [ 1088.065955][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.181861][T19935] loop3: p2 start 393216 is beyond EOD, truncated [ 1088.189076][T19935] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1088.207539][ T9] usb 7-1: config 0 descriptor?? [ 1088.212618][T19935] loop3: p4 start 1048576 is beyond EOD, truncated [ 1088.219715][T19935] loop3: p5 size 524288 extends beyond EOD, truncated [ 1088.230229][T19935] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1088.259820][T19930] fido_id[19930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1088.268832][T19933] active_anon:12814 inactive_anon:0 isolated_anon:0 [ 1088.268832][T19933] active_file:18681 inactive_file:40350 isolated_file:0 [ 1088.268832][T19933] unevictable:768 dirty:228 writeback:0 [ 1088.268832][T19933] slab_reclaimable:6686 slab_unreclaimable:101086 [ 1088.268832][T19933] mapped:38182 shmem:4232 pagetables:1907 [ 1088.268832][T19933] sec_pagetables:0 bounce:0 [ 1088.268832][T19933] kernel_misc_reclaimable:0 [ 1088.268832][T19933] free:1302648 free_pcp:12551 free_cma:0 [ 1088.346660][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1088.353492][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1088.365259][T19933] Node 0 active_anon:49856kB inactive_anon:0kB active_file:74724kB inactive_file:161200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152728kB dirty:912kB writeback:0kB shmem:15392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13368kB pagetables:7476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1088.399462][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1088.411706][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1088.421653][ T9] usb 7-1: media controller created [ 1088.428009][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1088.468047][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1088.474001][T19933] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1088.485986][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1088.512692][T19933] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.546101][T19933] lowmem_reserve[]: 0 2499 2501 2501 [ 1088.564903][T19919] dvb-usb: bulk message failed: -22 (2/0) [ 1088.577418][T19933] 2501 [ 1088.580320][T19933] Node 0 DMA32 free:1293676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48564kB inactive_anon:0kB active_file:74724kB inactive_file:161204kB unevictable:1536kB writepending:912kB zspages:0kB present:3129332kB managed:2559460kB mlocked:0kB bounce:0kB free_pcp:39640kB local_pcp:20728kB free_cma:0kB [ 1088.652012][T19933] lowmem_reserve[]: 0 0 1 1 1 [ 1088.698952][T19933] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1088.730063][T19933] lowmem_reserve[]: 0 0 0 0 0 [ 1088.763741][T19933] Node 1 Normal free:3902428kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12836kB local_pcp:0kB free_cma:0kB [ 1088.786787][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input93 [ 1088.813191][T19933] lowmem_reserve[]: 0 0 0 0 0 [ 1088.823836][T19933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1088.852516][T19933] Node 0 DMA32: 6001*4kB (UME) 4765*8kB (UME) 3252*16kB (UME) 741*32kB (UME) 419*64kB (UME) 380*128kB (UME) 307*256kB (UME) 201*512kB (UME) 99*1024kB (UME) 33*2048kB (UME) 178*4096kB (UM) = 1292876kB [ 1088.900821][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 1088.917913][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1088.968179][T19933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1089.043334][T19933] Node 1 Normal: 205*4kB (UME) 53*8kB (UME) 48*16kB (UME) 214*32kB (UME) 79*64kB (UME) 15*128kB (UME) 6*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3902428kB [ 1089.080154][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1089.096246][ T9] dvb-usb: error while querying for an remote control event. [ 1089.123085][T19933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1089.182158][T19933] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1089.215714][T19933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1089.283278][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1089.289275][ T9] dvb-usb: error while querying for an remote control event. [ 1089.347179][T19933] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1089.383225][T19933] 63263 total pagecache pages [ 1089.421850][T19933] 0 pages in swap cache [ 1089.430831][T19933] Free swap = 124996kB [ 1089.438672][T19933] Total swap = 124996kB [ 1089.445022][T19933] 2097051 pages RAM [ 1089.460221][T19933] 0 pages HighMem/MovableOnly [ 1089.473303][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1089.480246][T19950] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3726'. [ 1089.481107][ T5913] dvb-usb: error while querying for an remote control event. [ 1089.521257][T19933] 425096 pages reserved [ 1089.541436][T19933] 0 pages cma reserved [ 1089.573096][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1089.673175][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1089.678981][ T5913] dvb-usb: error while querying for an remote control event. [ 1089.743050][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1089.822124][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.836796][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.856100][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1089.886953][ T5913] dvb-usb: error while querying for an remote control event. [ 1089.903464][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1089.924065][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.961895][ T9] usb 5-1: config 0 descriptor?? [ 1089.986543][ T9] hub 5-1:0.0: USB hub found [ 1090.082016][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1090.088122][ T5913] dvb-usb: error while querying for an remote control event. [ 1090.725493][ T9] hub 5-1:0.0: 1 port detected [ 1090.730588][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1090.746807][ T5913] dvb-usb: error while querying for an remote control event. [ 1090.943511][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 1090.949466][ T5913] dvb-usb: error while querying for an remote control event. [ 1091.081267][T18503] usb 7-1: USB disconnect, device number 53 [ 1091.128446][T18503] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1091.321538][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1091.330120][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1091.338580][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1091.356993][ T9] usb 5-1: USB disconnect, device number 27 [ 1091.357171][ T3457] usb 5-1: Failed to suspend device, error -19 [ 1092.214349][T19989] binder: 19978:19989 ioctl c018620c 2000000002c0 returned -1 [ 1092.320921][T19990] netlink: 'syz.4.3736': attribute type 10 has an invalid length. [ 1092.478368][T19997] xt_hashlimit: max too large, truncated to 1048576 [ 1092.649491][T19997] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1094.186579][T20016] bridge2: entered allmulticast mode [ 1094.353351][T15370] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1094.503067][T15370] usb 7-1: Using ep0 maxpacket: 16 [ 1094.519249][T15370] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1094.537286][T15370] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.554298][T15370] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1094.574278][T15370] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1094.583788][T15370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.592127][T15370] usb 7-1: Product: syz [ 1094.597769][T15370] usb 7-1: Manufacturer: syz [ 1094.602720][T15370] usb 7-1: SerialNumber: syz [ 1094.691312][T15370] usb 7-1: config 0 descriptor?? [ 1094.938218][T15370] usb 7-1: USB disconnect, device number 54 [ 1095.479034][T20036] IPv6: addrconf: prefix option has invalid lifetime [ 1095.676877][T20046] fuse: Bad value for 'fd' [ 1095.903285][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1095.953134][T15370] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1096.236116][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.249022][T20051] xt_hashlimit: max too large, truncated to 1048576 [ 1096.262385][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1096.293116][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.343623][T15370] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1096.356819][T15370] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1096.435599][ T9] usb 7-1: config 0 descriptor?? [ 1096.449179][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1096.460797][T15370] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1096.479621][T15370] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.40 [ 1096.493153][T15370] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.505485][T15370] usb 5-1: Product: syz [ 1096.513183][T15370] usb 5-1: Manufacturer: 䛃헡廴 [ 1096.522911][T15370] usb 5-1: SerialNumber: syz [ 1096.992035][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1097.014577][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1097.021826][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1097.053984][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1097.103106][ T5918] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1097.201248][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1097.216239][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1097.243153][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1097.267683][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1097.288933][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1097.308114][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1097.331597][T20045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.336914][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1097.394076][T20045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.517671][ T5918] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.540597][ T5918] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1097.562489][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1097.583139][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.713924][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1097.733826][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1097.751001][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1097.764700][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1097.797383][ T9] pwc: Registered as video103. [ 1097.803125][ T5918] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1097.829974][T20056] kAFS: unable to lookup cell '(,cL' [ 1097.850663][ T5916] usb 3-1: USB disconnect, device number 21 [ 1097.886634][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input94 [ 1097.944496][ T9] usb 7-1: USB disconnect, device number 55 [ 1097.983428][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1098.034330][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1098.055388][ T5918] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1098.068522][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.078565][ T5918] usb 6-1: Product: syz [ 1098.083032][ T5918] usb 6-1: Manufacturer: syz [ 1098.087677][ T5918] usb 6-1: SerialNumber: syz [ 1098.124391][ T5918] usb 6-1: config 0 descriptor?? [ 1098.145982][ T5918] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1098.163147][ T5918] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1098.573160][ T9] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1098.650342][T15370] usbhid 5-1:1.0: can't add hid device: -71 [ 1098.675758][T15370] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1098.757520][ T9] usb 7-1: config 0 has an invalid interface number: 235 but max is 0 [ 1098.770531][ T9] usb 7-1: config 0 has no interface number 0 [ 1098.776836][ T9] usb 7-1: config 0 interface 235 has no altsetting 0 [ 1098.809398][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1098.810202][ T5918] em28xx 6-1:0.0: chip ID is em2874 [ 1098.818723][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.818752][ T9] usb 7-1: Product: syz [ 1098.818769][ T9] usb 7-1: Manufacturer: syz [ 1098.818786][ T9] usb 7-1: SerialNumber: syz [ 1098.821697][ T9] usb 7-1: config 0 descriptor?? [ 1098.853327][T15370] usb 5-1: USB disconnect, device number 28 [ 1098.871050][ T9] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected [ 1098.885168][T20084] usb usb8: usbfs: process 20084 (syz.2.3762) did not claim interface 0 before use [ 1098.896536][ T9] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87 [ 1098.909059][ T9] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7 [ 1098.921014][ T9] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81 [ 1098.930196][ T9] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1 [ 1098.952418][ T9] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85 [ 1099.037580][T20085] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1099.126374][ T9] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1099.161018][ T9] usb 7-1: USB disconnect, device number 56 [ 1099.174702][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1099.188493][ T9] keyspan 7-1:0.235: device disconnected [ 1099.460087][ T5918] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1099.470437][ T5918] em28xx 6-1:0.0: board has no eeprom [ 1099.755439][T20092] netlink: 'syz.0.3765': attribute type 5 has an invalid length. [ 1099.763528][T20092] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1099.793327][ T5918] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1099.848272][ T5918] em28xx 6-1:0.0: dvb set to bulk mode. [ 1099.854175][T15370] em28xx 6-1:0.0: Binding DVB extension [ 1100.141424][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3766'. [ 1100.232917][ T5918] usb 6-1: USB disconnect, device number 57 [ 1100.234073][ T5918] em28xx 6-1:0.0: Disconnecting em28xx [ 1100.345295][T15370] em28xx 6-1:0.0: Registering input extension [ 1100.493350][T15370] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1100.501253][T15370] Registered IR keymap rc-empty [ 1100.524036][T15370] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1100.552307][T15370] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input95 [ 1100.599389][T15370] em28xx 6-1:0.0: Input extension successfully initialized [ 1100.642237][ T5918] em28xx 6-1:0.0: Closing input extension [ 1100.686273][ T5918] em28xx 6-1:0.0: Freeing device [ 1101.574232][T20116] fuse: Bad value for 'rootmode' [ 1102.850832][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3776'. [ 1102.927818][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3776'. [ 1102.942191][T20131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3777'. [ 1103.029369][T20133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3777'. [ 1103.194721][T20136] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3779'. [ 1104.123534][T20148] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3781'. [ 1104.793125][ T5916] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1104.987870][ T5916] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1105.005887][ T5916] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1105.038775][ T5916] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1105.048860][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.057186][T20178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1105.074254][ T5916] usb 7-1: Product: syz [ 1105.103250][ T5916] usb 7-1: Manufacturer: syz [ 1105.114919][ T5916] usb 7-1: SerialNumber: syz [ 1105.178219][ T5916] usb 7-1: config 0 descriptor?? [ 1105.188326][T20165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1105.199917][T20165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1105.437604][T20165] netlink: 'syz.6.3786': attribute type 2 has an invalid length. [ 1105.514027][T20165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1105.543416][T20165] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1106.158730][ T5916] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1106.760616][ T5916] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1106.809904][ T5916] usb 7-1: USB disconnect, device number 57 [ 1107.214230][T20200] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1107.224963][T20200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1107.693767][T20212] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1107.703187][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1107.890207][T20212] bond2: option arp_validate: invalid value (18446744073491447809) [ 1107.939250][T20212] bond2 (unregistering): Released all slaves [ 1109.183238][ T5916] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1109.370050][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.381918][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1109.402303][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1109.436767][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1109.543908][ T5916] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1109.580172][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.594673][ T5916] usb 5-1: Product: syz [ 1109.604261][ T5916] usb 5-1: Manufacturer: syz [ 1109.608982][ T5916] usb 5-1: SerialNumber: syz [ 1109.623585][T20229] IPVS: You probably need to specify IP address on multicast interface. [ 1109.640104][ T5916] usb 5-1: config 0 descriptor?? [ 1109.653557][T20229] IPVS: Error connecting to the multicast addr [ 1109.673330][T20229] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3808'. [ 1109.676476][ T5916] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected [ 1109.793447][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1109.805466][ T5916] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1109.844120][ T5916] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1109.953098][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1109.960348][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.986120][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.033548][ T9] usb 6-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 1110.042894][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.070760][ T9] usb 6-1: config 0 descriptor?? [ 1110.300175][T20248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1110.311175][ T9] hid-generic 0003:05F6:3201.002A: hidraw0: USB HID v1.01 Device [HID 05f6:3201] on usb-dummy_hcd.5-1/input0 [ 1110.355409][T20248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1110.502107][ T8853] usb 6-1: USB disconnect, device number 58 [ 1111.389593][ T9] usb 5-1: USB disconnect, device number 29 [ 1111.412879][ T9] garmin_gps 5-1:0.0: device disconnected [ 1111.421249][T20276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3820'. [ 1111.431732][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3820'. [ 1112.644520][T20290] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1113.629125][ T9] hid-generic 0000:0003:0001.002B: unknown main item tag 0x0 [ 1113.653553][ T9] hid-generic 0000:0003:0001.002B: unknown main item tag 0x0 [ 1113.803419][ T9] hid-generic 0000:0003:0001.002B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1114.030297][T20316] fido_id[20316]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1114.976221][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1115.173056][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1115.192824][ T9] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1115.250820][T20336] loop3: detected capacity change from 0 to 7 [ 1115.273589][T20336] loop3: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1115.290123][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.304811][T20336] loop3: p1 start 1953824768 is beyond EOD, truncated [ 1115.328170][ T9] usb 6-1: Product: syz [ 1115.338888][T20336] loop3: p2 start 393216 is beyond EOD, truncated [ 1115.372750][T20336] loop3: p3 start 4294901824 is beyond EOD, truncated [ 1115.414147][T20336] loop3: p4 start 1048576 is beyond EOD, truncated [ 1115.422031][ T9] usb 6-1: Manufacturer: syz [ 1115.436813][ T9] usb 6-1: SerialNumber: syz [ 1115.454236][ T9] usb 6-1: config 0 descriptor?? [ 1115.459592][T20336] loop3: p5 size 524288 extends beyond EOD, truncated [ 1115.476590][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1115.573231][ T8853] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1115.706088][T20346] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 1115.747558][ T8853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.758857][ T8853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.783507][ T8853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1115.783901][ T9] gspca_topro: reg_w err -71 [ 1115.843284][ T9] gspca_topro: Sensor soi763a [ 1115.852448][ T9] usb 6-1: USB disconnect, device number 59 [ 1115.889470][ T8853] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1115.890491][T20336] loop3: p6 start 1869768547 is beyond EOD, truncated [ 1115.972464][T20354] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3842'. [ 1115.984273][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3842'. [ 1116.087558][ T8853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.162377][ T8853] usb 5-1: config 0 descriptor?? [ 1116.278283][ T30] audit: type=1326 audit(1765259103.995:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1116.308970][T17938] udevd[17938]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 1116.506312][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.513478][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.614773][T20338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.624190][T20338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.646175][ T8853] hid-udraw 0003:20D6:CB17.002C: unbalanced collection at end of report description [ 1116.676636][ T30] audit: type=1326 audit(1765259104.215:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1116.706305][ T8853] hid-udraw 0003:20D6:CB17.002C: parse failed [ 1116.722768][ T8853] hid-udraw 0003:20D6:CB17.002C: probe with driver hid-udraw failed with error -22 [ 1116.768797][ T30] audit: type=1326 audit(1765259104.215:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1116.813284][ T5913] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1116.866482][ T8853] usb 5-1: USB disconnect, device number 30 [ 1116.919698][ T30] audit: type=1326 audit(1765259104.215:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1116.990939][ T30] audit: type=1326 audit(1765259104.215:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1117.051596][ T30] audit: type=1326 audit(1765259104.215:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1117.092562][ T5913] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.105225][ T5913] usb 7-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 1117.144224][ T5913] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 1117.163211][ T30] audit: type=1326 audit(1765259104.215:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c97d8df90 code=0x7ffc0000 [ 1117.198451][ T5913] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 1117.218713][ T30] audit: type=1326 audit(1765259104.215:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c97d8f34b code=0x7ffc0000 [ 1117.281918][ T5913] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.322499][ T5913] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1117.336875][ T30] audit: type=1326 audit(1765259104.215:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c97d8f34b code=0x7ffc0000 [ 1117.404895][ T5913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.436782][T20358] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1117.455155][ T5913] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1117.474579][ T30] audit: type=1326 audit(1765259104.225:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20357 comm="syz.6.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8c97d8f34b code=0x7ffc0000 [ 1117.486777][ T5913] usb 7-1: invalid MIDI in EP 0 [ 1117.771215][T17387] udevd[17387]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.794009][ T5913] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1117.820627][ T5913] usb 7-1: USB disconnect, device number 58 [ 1117.903225][T15131] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1118.063321][T15131] usb 5-1: Using ep0 maxpacket: 16 [ 1118.159544][T15131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1118.173971][T15131] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1118.184628][T15131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.192754][T15131] usb 5-1: Product: syz [ 1118.197784][T15131] usb 5-1: Manufacturer: syz [ 1118.202544][T15131] usb 5-1: SerialNumber: syz [ 1118.230098][T15131] usb 5-1: config 0 descriptor?? [ 1118.257673][T15131] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1118.283103][T15131] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1118.322032][T20376] binder: 20375:20376 ioctl c0306201 200000000440 returned -14 [ 1118.913912][T15131] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1119.675600][T15131] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1119.699169][T15131] em28xx 5-1:0.0: board has no eeprom [ 1119.783667][T15131] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1119.830308][T15131] em28xx 5-1:0.0: dvb set to bulk mode. [ 1119.860809][T18503] em28xx 5-1:0.0: Binding DVB extension [ 1119.900604][T15131] usb 5-1: USB disconnect, device number 31 [ 1119.955857][T18503] em28xx 5-1:0.0: Registering input extension [ 1119.964168][T15131] em28xx 5-1:0.0: Disconnecting em28xx [ 1119.969702][T15131] em28xx 5-1:0.0: Closing input extension [ 1120.059314][T15131] em28xx 5-1:0.0: Freeing device [ 1120.125484][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3859'. [ 1120.233440][T20411] veth4: entered promiscuous mode [ 1120.283220][T20411] veth4: entered allmulticast mode [ 1120.368485][T20415] fuse: Bad value for 'fd' [ 1120.434024][T20415] macsec1: entered promiscuous mode [ 1120.449502][T20415] macsec1: entered allmulticast mode [ 1120.505464][T20419] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3861'. [ 1121.423448][T15131] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1121.826443][T15131] usb 5-1: Using ep0 maxpacket: 8 [ 1121.883931][T15131] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 1121.898692][T15131] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.981623][T20432] IPv6: addrconf: prefix option has invalid lifetime [ 1122.035726][T15131] usb 5-1: config 127 has no interface number 1 [ 1122.042120][T15131] usb 5-1: config 127 interface 171 has no altsetting 0 [ 1122.189772][T15131] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1122.652098][T15131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.701278][T15131] usb 5-1: Product: syz [ 1122.729202][T15131] usb 5-1: Manufacturer: syz [ 1122.737903][T15131] usb 5-1: SerialNumber: syz [ 1122.883114][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1123.136866][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1123.148541][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1123.201154][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1123.257839][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1123.307887][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1123.342586][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1123.357381][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1123.365735][ T9] usb 3-1: Product: syz [ 1123.378720][ T9] usb 3-1: Manufacturer: syz [ 1123.414724][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1123.432780][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1123.460818][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1123.496260][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1124.178279][ T9] usb 3-1: USB disconnect, device number 22 [ 1124.428022][T15131] xr_serial 5-1:127.171: xr_serial converter detected [ 1124.503885][T15131] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1124.510361][T15131] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1124.618844][T15131] usb 5-1: USB disconnect, device number 32 [ 1124.631051][T15131] xr_serial 5-1:127.171: device disconnected [ 1125.396073][T20467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3876'. [ 1127.394337][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1127.394361][ T30] audit: type=1326 audit(1765259115.115:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20496 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1127.511782][ T30] audit: type=1326 audit(1765259115.115:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20496 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1127.623424][ T30] audit: type=1326 audit(1765259115.115:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20496 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1127.722161][ T30] audit: type=1326 audit(1765259115.115:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20496 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1127.862099][ T30] audit: type=1326 audit(1765259115.115:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20496 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1128.283465][ T30] audit: type=1326 audit(1765259115.115:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20496 comm="syz.6.3886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1128.533171][ T8853] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1128.660150][T20518] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3890'. [ 1128.737306][ T8853] usb 7-1: Using ep0 maxpacket: 16 [ 1128.762255][ T8853] usb 7-1: config 0 has no interfaces? [ 1129.010519][ T8853] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1129.019968][ T8853] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1129.071979][ T8853] usb 7-1: Manufacturer: syz [ 1129.155312][ T8853] usb 7-1: config 0 descriptor?? [ 1130.353198][ T5913] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1130.454243][T20535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3894'. [ 1130.555782][ T5913] usb 6-1: Using ep0 maxpacket: 8 [ 1130.638731][ T5913] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1130.650992][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1130.689927][ T9] usb 7-1: USB disconnect, device number 59 [ 1130.753603][ T5913] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1130.779834][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.831134][ T5913] usb 6-1: Product: syz [ 1130.835513][ T5913] usb 6-1: Manufacturer: syz [ 1130.840348][ T5913] usb 6-1: SerialNumber: syz [ 1130.861293][ T5913] usb 6-1: config 0 descriptor?? [ 1131.020042][ T5913] rc_core: IR keymap rc-streamzap not found [ 1131.026059][ T5913] Registered IR keymap rc-empty [ 1131.042273][ T5913] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1131.072523][ T5913] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input97 [ 1131.080111][T20529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.134213][T20529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.334230][ T5890] usb 6-1: USB disconnect, device number 60 [ 1131.857437][T20548] netlink: 'syz.6.3897': attribute type 10 has an invalid length. [ 1131.868698][T20548] team0: Port device macvlan0 added [ 1131.903083][ T8853] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1131.912334][T20548] netlink: 116 bytes leftover after parsing attributes in process `syz.6.3897'. [ 1132.124576][T20559] xt_hashlimit: max too large, truncated to 1048576 [ 1132.173060][ T8853] usb 5-1: Using ep0 maxpacket: 16 [ 1132.191252][ T8853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.280942][T20562] xt_hashlimit: max too large, truncated to 1048576 [ 1132.320403][T20563] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1132.334363][ T8853] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1132.355285][ T8853] usb 5-1: New USB device found, idVendor=22b8, idProduct=689d, bcdDevice=20.6b [ 1132.552606][ T8853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.627001][ T8853] usb 5-1: Product: syz [ 1132.635091][ T8853] usb 5-1: Manufacturer: syz [ 1132.656086][T20562] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1132.665487][ T8853] usb 5-1: SerialNumber: syz [ 1132.706273][ T8853] usb 5-1: config 0 descriptor?? [ 1133.691265][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1134.657569][T20581] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3905'. [ 1134.688724][T20581] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3905'. [ 1135.053094][ T9] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1135.107239][ T8853] usb 5-1: USB disconnect, device number 33 [ 1135.207521][ T9] usb 7-1: config index 0 descriptor too short (expected 65316, got 36) [ 1135.220159][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1135.230941][ T9] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1135.307447][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1135.316690][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.649740][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1135.850093][T17387] udevd[17387]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.899690][ T9] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1135.929793][ T9] usb 7-1: USB disconnect, device number 60 [ 1136.455934][T20612] input: syz0 as /devices/virtual/input/input98 [ 1136.603119][T20612] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 1136.617321][T20612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'. [ 1137.362670][T20628] xt_hashlimit: max too large, truncated to 1048576 [ 1137.512520][T20632] fuse: Unknown parameter '000000000000000000040x0000000000000009' [ 1139.347946][T20650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3919'. [ 1141.619278][T20671] loop6: detected capacity change from 0 to 524288000 [ 1142.963561][T20697] IPv6: Can't replace route, no match found [ 1143.060839][T20703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3933'. [ 1143.685734][T20707] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1143.835741][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3930'. [ 1145.513087][ T39] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1145.705361][ T39] usb 6-1: device descriptor read/64, error -71 [ 1146.013032][ T39] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1146.173053][ T39] usb 6-1: device descriptor read/64, error -71 [ 1146.295398][ T39] usb usb6-port1: attempt power cycle [ 1147.088905][ T39] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1147.186555][ T39] usb 6-1: device descriptor read/8, error -71 [ 1147.193054][T20752] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3945'. [ 1147.426415][ T39] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1147.474086][ T39] usb 6-1: device descriptor read/8, error -71 [ 1147.625945][ T39] usb usb6-port1: unable to enumerate USB device [ 1147.754492][T20759] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3947'. [ 1148.713132][ T39] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 1148.916306][ T39] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1148.938952][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.962288][ T39] usb 7-1: Product: syz [ 1148.983786][ T39] usb 7-1: Manufacturer: syz [ 1149.003208][ T39] usb 7-1: SerialNumber: syz [ 1149.020124][ T39] usb 7-1: config 0 descriptor?? [ 1149.467579][ T39] airspy 7-1:0.0: Board ID: 00 [ 1149.472433][ T39] airspy 7-1:0.0: Firmware version: [ 1149.550399][T20784] loop4: detected capacity change from 0 to 1 [ 1149.636284][T17387] Dev loop4: unable to read RDB block 1 [ 1149.663858][T17387] loop4: unable to read partition table [ 1149.683373][T17387] loop4: partition table beyond EOD, truncated [ 1150.014724][T20784] Dev loop4: unable to read RDB block 1 [ 1150.054897][ T5890] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1150.083085][T20784] loop4: unable to read partition table [ 1150.170321][T20784] loop4: partition table beyond EOD, truncated [ 1150.183874][T20784] loop_reread_partitions: partition scan of loop4 (ݷU@:B${Wɴ) failed (rc=-5) [ 1150.213933][ T5890] usb 3-1: device descriptor read/64, error -71 [ 1150.377391][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'. [ 1150.483181][ T5890] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1150.623911][ T5890] usb 3-1: device descriptor read/64, error -71 [ 1150.734869][ T5890] usb usb3-port1: attempt power cycle [ 1151.018664][ T39] airspy 7-1:0.0: usb_control_msg() failed -110 request 12 [ 1151.048417][ T39] airspy 7-1:0.0: Registered as swradio24 [ 1151.054500][ T39] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1151.143081][ T5904] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1151.163278][ T5890] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1151.196462][ T5890] usb 3-1: device descriptor read/8, error -71 [ 1151.314515][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.330358][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1151.376158][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.433442][ T5890] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1151.462202][ T5904] usb 5-1: config 0 descriptor?? [ 1151.474258][ T5890] usb 3-1: device descriptor read/8, error -71 [ 1151.583528][ T5890] usb usb3-port1: unable to enumerate USB device [ 1151.639261][ T9] usb 7-1: USB disconnect, device number 61 [ 1151.763185][ T5890] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1151.924920][ T5890] usb 6-1: no configurations [ 1151.932492][ T5890] usb 6-1: can't read configurations, error -22 [ 1151.940214][ T5904] lenovo 0003:17EF:60A3.002D: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 1152.069061][T20811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1152.093178][ T5890] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1152.113473][ T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1152.139844][ T39] usb 5-1: USB disconnect, device number 34 [ 1152.263988][ T5890] usb 6-1: no configurations [ 1152.268976][ T5890] usb 6-1: can't read configurations, error -22 [ 1152.277091][ T5890] usb usb6-port1: attempt power cycle [ 1152.295213][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1152.319941][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1152.329636][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.390922][ T9] usb 7-1: config 0 descriptor?? [ 1152.408698][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1152.749208][T20806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.788777][T20806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.813369][ T5890] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1152.848078][ T5890] usb 6-1: no configurations [ 1152.854017][ T5890] usb 6-1: can't read configurations, error -22 [ 1152.958295][T20826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1153.030702][ T5890] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1153.054945][ T5890] usb 6-1: no configurations [ 1153.059595][ T5890] usb 6-1: can't read configurations, error -22 [ 1153.091336][ T5890] usb usb6-port1: unable to enumerate USB device [ 1153.119367][ T5916] usb 7-1: USB disconnect, device number 62 [ 1153.828563][T20842] misc userio: No port type given on /dev/userio [ 1153.893623][ T5890] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1153.913125][T20842] vlan3: entered promiscuous mode [ 1153.918425][T20842] vlan3: entered allmulticast mode [ 1153.926292][T20842] hsr_slave_1: entered allmulticast mode [ 1154.105052][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3969'. [ 1154.122548][ T5890] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1154.132009][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.162998][ T5890] usb 5-1: Product: syz [ 1154.182141][ T5890] usb 5-1: Manufacturer: syz [ 1154.250602][ T5890] usb 5-1: SerialNumber: syz [ 1154.301832][ T5890] usb 5-1: config 0 descriptor?? [ 1154.335996][ T5890] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1155.963356][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1155.978972][T20879] netlink: 'syz.2.3978': attribute type 1 has an invalid length. [ 1156.020283][T20879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1156.037443][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1156.056732][T20879] macvlan2: entered promiscuous mode [ 1156.062840][T20879] macvlan2: entered allmulticast mode [ 1156.086311][T20879] bond1: (slave ip6gretap1): making interface the new active one [ 1156.095629][T20879] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1156.409945][ T5890] usb 5-1: USB disconnect, device number 35 [ 1156.570109][T20897] netlink: 'syz.2.3980': attribute type 10 has an invalid length. [ 1156.654963][T20896] bridge3: entered allmulticast mode [ 1156.862591][T20901] netlink: 'syz.6.3983': attribute type 5 has an invalid length. [ 1156.870657][T20901] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3983'. [ 1157.137979][T20907] netlink: 'syz.4.3985': attribute type 30 has an invalid length. [ 1157.146073][T20907] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3985'. [ 1157.216139][ T39] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1157.436496][ T39] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1157.508162][ T39] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1157.550246][ T39] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1157.607754][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.698750][T20901] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1157.728417][ T39] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1158.417973][T20928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3989'. [ 1159.150692][T20939] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3992'. [ 1159.823126][ T8853] usb 7-1: USB disconnect, device number 63 [ 1160.113475][ T9] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1160.323664][ T8853] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1160.333017][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1160.354478][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1160.376222][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.399800][ T9] usb 6-1: Product: syz [ 1160.416391][ T9] usb 6-1: Manufacturer: syz [ 1160.432083][ T9] usb 6-1: SerialNumber: syz [ 1160.450525][ T9] usb 6-1: config 0 descriptor?? [ 1160.475717][ T8853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1160.491538][ T8853] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b [ 1160.507075][ T8853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.516035][ T8853] usb 5-1: Product: syz [ 1160.520480][ T8853] usb 5-1: Manufacturer: syz [ 1160.525714][ T8853] usb 5-1: SerialNumber: syz [ 1160.556440][ T8853] usb 5-1: config 0 descriptor?? [ 1160.802540][ T8853] usb 5-1: USB disconnect, device number 36 [ 1160.888987][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1160.921211][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1161.059103][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1161.125715][ T9] usb 6-1: media controller created [ 1161.188412][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1161.243673][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1161.251731][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1161.465486][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3999'. [ 1161.487398][ T9] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 1161.517734][T20966] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 1161.537299][T20966] bond0: (slave netdevsim0): Releasing backup interface [ 1161.643916][T20972] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1161.654501][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1161.666973][T15131] usb 6-1: USB disconnect, device number 69 [ 1161.675346][T20966] batman_adv: batadv0: Adding interface: netdevsim0 [ 1161.731286][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1161.816563][T15131] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1161.864645][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1161.903771][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1161.920850][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.993970][ T9] usb 7-1: Product: ꒇ蔤孯♐龾ꮬ槠飧곁‷ᎎ웦﨔溙錧熌區缍໼⣶쬑귛ꍾ˛ᘑ㯐嗼Ωꑨ퀭뒟范㶸鴑瀑휿㠕훊΍쁞挌閇獡ݢ㞵ꍬ䙧﯀蘛봔宨囨ꄆ㪉缀ꜹ☩⒅폹떿簒꠵ࢬ닱蓰礙걎蛕쇃㧷箳鿇椹熼ᘀ숢혫㾖ᾁ쨵㫙걤㈥뜻ȫ劗魌䕀꘱邡긺䁌ಶ녪ꇣ걭둗蟡醭䁀ස띫踖㚤퍒ᜋ [ 1162.043382][T20966] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.116239][ T9] usb 7-1: Manufacturer: 嘋䶟偏眆⴫㗖馷瀒稍ิ縃삱匦䦷飋є灕啠见ꬦ쾁シꛨ怮䣲둾ﲱ㲝姾ऍ庌鵃燋膸娄頣򿢨톖쑇գ੄饬䓱鋏Ӿꐷ時궼䓡︸嵞喙⟷셝瑯褾鱊軖돟䷆谗끹쯜䕿ꣵ픭䮵猱拮쿜惪ꈻ讽텴㪐灧恺嬃涨휥◧苭ꆳ讄黐볋퇋壷㊼䉨頮汆ᷯञ⤭ᆰ엺 [ 1162.312184][T20966] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1162.453967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.506689][ T9] usb 7-1: SerialNumber: 꾨ᐯ㝄㿪鎠怰⊑壐䊄⤢tඬ㴛鏻襳簳錗켟ꓡ菷圩㐉琒햠댚ꈶ渨嗱䨂蕐Ꮴ裉췻㑶䥅袨䏱༯梹ﴑኁ밪ዸ┙滆㙱綒揭뭨㺵礌闵℘鄬㻞㔲㏖⠿쀋಍뛰잗䝳想ﯵᓇ븜ш佧㵺쑮ᑬ梺雬淽ڑ玒ঁ䠫䃙叴琺閾뉶⃔ [ 1162.850561][ T9] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 243 proto 3 vid 0x0525 pid 0xA4A8 [ 1162.904775][ T9] usb 7-1: USB disconnect, device number 64 [ 1162.951120][ T9] usblp0: removed [ 1163.496831][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1163.691053][T20995] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4007'. [ 1163.703154][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1163.711008][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.727000][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1163.750374][ T9] usb 6-1: New USB device found, idVendor=22b8, idProduct=689d, bcdDevice=20.6b [ 1163.767869][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.786502][ T9] usb 6-1: Product: syz [ 1163.790730][ T9] usb 6-1: Manufacturer: syz [ 1163.852203][ T9] usb 6-1: SerialNumber: syz [ 1163.871515][ T9] usb 6-1: config 0 descriptor?? [ 1166.098912][ T30] audit: type=1326 audit(1765259153.815:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21015 comm="syz.2.4013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8d98f749 code=0x0 [ 1166.144182][ T30] audit: type=1326 audit(1765259153.855:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21015 comm="syz.2.4013" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c8d98f749 code=0x0 [ 1166.194509][ T9] usb 6-1: USB disconnect, device number 70 [ 1166.744079][T21035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1166.986786][T21041] netlink: 'syz.5.4018': attribute type 10 has an invalid length. [ 1167.010079][T21041] bond0: (slave netdevsim0): Releasing backup interface [ 1167.033473][ T39] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1167.060026][T21042] netlink: 'syz.5.4018': attribute type 10 has an invalid length. [ 1167.077965][ T8853] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1167.093224][T21041] team0: Port device netdevsim0 added [ 1167.181673][ T39] usb 7-1: device descriptor read/64, error -71 [ 1167.217841][T21042] team0: Port device netdevsim0 removed [ 1167.229334][T21042] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1167.275015][ T8853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.286343][ T8853] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1167.311841][ T8853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.329679][ T8853] usb 3-1: config 0 descriptor?? [ 1167.334825][ T9234] wlan0: Trigger new scan to find an IBSS to join [ 1167.433381][ T9] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1167.433401][ T39] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1167.595094][T21044] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1167.610419][T21044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4020'. [ 1167.625284][ T39] usb 7-1: device descriptor read/64, error -71 [ 1167.733719][ T39] usb usb7-port1: attempt power cycle [ 1167.762036][T21039] binder: 21033:21039 ioctl 4028af11 2000000017c0 returned -22 [ 1167.776104][ T8853] holtek 0003:1241:5015.002E: unknown main item tag 0x0 [ 1167.785551][ T9] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1167.796814][ T9] usb 6-1: config 0 has no interface number 0 [ 1167.797018][ T8853] holtek 0003:1241:5015.002E: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 1167.830770][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1167.846302][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.863006][ T9] usb 6-1: Product: syz [ 1167.873944][ T9] usb 6-1: Manufacturer: syz [ 1167.883091][ T5904] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1167.903313][ T9] usb 6-1: SerialNumber: syz [ 1167.926621][ T8853] holtek 0003:1241:5015.002E: no inputs found [ 1167.927371][ T9] usb 6-1: config 0 descriptor?? [ 1168.043120][ T5904] usb 5-1: device descriptor read/64, error -71 [ 1168.093170][ T39] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1168.129266][ T39] usb 7-1: device descriptor read/8, error -71 [ 1168.293189][ T5904] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1168.373435][ T39] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1168.443153][ T5904] usb 5-1: device descriptor read/64, error -71 [ 1168.485512][ T39] usb 7-1: device descriptor read/8, error -71 [ 1168.553684][ T5904] usb usb5-port1: attempt power cycle [ 1168.663470][ T39] usb usb7-port1: unable to enumerate USB device [ 1169.063070][ T5904] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1169.107847][ T5904] usb 5-1: device descriptor read/8, error -71 [ 1169.373090][ T5904] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1169.478503][ T5904] usb 5-1: device descriptor read/8, error -71 [ 1169.647987][ T5904] usb usb5-port1: unable to enumerate USB device [ 1169.779633][ T5904] usb 3-1: USB disconnect, device number 27 [ 1169.990696][T21056] FAULT_INJECTION: forcing a failure. [ 1169.990696][T21056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.013098][T21056] CPU: 0 UID: 0 PID: 21056 Comm: syz.0.4022 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.013134][T21056] Tainted: [L]=SOFTLOCKUP [ 1170.013142][T21056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1170.013155][T21056] Call Trace: [ 1170.013164][T21056] [ 1170.013174][T21056] dump_stack_lvl+0x189/0x250 [ 1170.013208][T21056] ? __pfx____ratelimit+0x10/0x10 [ 1170.013237][T21056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1170.013260][T21056] ? __pfx__printk+0x10/0x10 [ 1170.013303][T21056] should_fail_ex+0x414/0x560 [ 1170.013334][T21056] _copy_from_user+0x2d/0xb0 [ 1170.013365][T21056] __copy_msghdr+0x3c5/0x5b0 [ 1170.013400][T21056] ___sys_sendmsg+0x1a5/0x2a0 [ 1170.013433][T21056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.013460][T21056] ? __lock_acquire+0x6b6/0x2cf0 [ 1170.013529][T21056] ? __might_fault+0xb0/0x130 [ 1170.013563][T21056] __sys_sendmmsg+0x227/0x430 [ 1170.013599][T21056] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1170.013639][T21056] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1170.013703][T21056] __x64_sys_sendmmsg+0xa0/0xc0 [ 1170.013736][T21056] do_syscall_64+0xfa/0xf80 [ 1170.013764][T21056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.013785][T21056] ? clear_bhb_loop+0x60/0xb0 [ 1170.013838][T21056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.013858][T21056] RIP: 0033:0x7f6e14b8f749 [ 1170.013877][T21056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1170.013896][T21056] RSP: 002b:00007f6e12df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1170.013920][T21056] RAX: ffffffffffffffda RBX: 00007f6e14de5fa0 RCX: 00007f6e14b8f749 [ 1170.013935][T21056] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1170.013950][T21056] RBP: 00007f6e12df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.013964][T21056] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000002 [ 1170.013977][T21056] R13: 00007f6e14de6038 R14: 00007f6e14de5fa0 R15: 00007f6e14f0fa28 [ 1170.014013][T21056] [ 1170.346592][ T9] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 1170.355148][ T9] uvcvideo 6-1:0.64: No valid video chain found. [ 1170.367008][ T9] usb 6-1: USB disconnect, device number 71 [ 1170.383564][ T6008] wlan0: Trigger new scan to find an IBSS to join [ 1170.473515][ T5904] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1170.633044][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1170.703728][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1170.735776][ T5904] usb 3-1: can't read configurations, error -61 [ 1170.923085][ T5904] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1170.981139][T21075] fuse: Bad value for 'user_id' [ 1170.987385][T21075] fuse: Bad value for 'user_id' [ 1171.023335][ T5918] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1171.083054][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1171.098657][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.111005][ T5904] usb 3-1: can't read configurations, error -61 [ 1171.121796][ T5904] usb usb3-port1: attempt power cycle [ 1171.204308][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 1171.214910][ T5918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.225226][ T5918] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.241312][ T5918] usb 7-1: New USB device found, idVendor=22b8, idProduct=689d, bcdDevice=20.6b [ 1171.252252][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.268419][ T5918] usb 7-1: Product: syz [ 1171.278511][ T5918] usb 7-1: Manufacturer: syz [ 1171.290861][ T5918] usb 7-1: SerialNumber: syz [ 1171.327114][ T5918] usb 7-1: config 0 descriptor?? [ 1171.443286][ T5890] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1171.563128][ T5904] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1171.604900][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1171.634096][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.636842][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.666291][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.677392][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1171.683003][ T5904] usb 3-1: can't read configurations, error -61 [ 1171.698829][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1171.728993][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1171.775228][ T5890] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1171.793378][ T5890] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1171.816497][ T5890] usb 5-1: Manufacturer: syz [ 1171.836987][ T5890] usb 5-1: config 0 descriptor?? [ 1171.853122][ T5904] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1171.875214][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 1171.896090][ T5904] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1171.913325][ T5904] usb 3-1: can't read configurations, error -61 [ 1171.938461][ T5904] usb usb3-port1: unable to enumerate USB device [ 1172.233468][T21087] binder: 21085:21087 ioctl c0306201 2000000003c0 returned -14 [ 1173.667777][ T5918] usb 7-1: USB disconnect, device number 69 [ 1173.703791][T15370] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1173.873114][T15370] usb 6-1: Using ep0 maxpacket: 16 [ 1173.947739][T21104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1173.963937][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1174.004957][T15370] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.034578][T15370] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1174.099810][T15370] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.147322][T15370] usb 6-1: config 0 descriptor?? [ 1174.243391][ T9] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 1174.294312][T21110] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1174.303615][ T5890] rc_core: IR keymap rc-hauppauge not found [ 1174.309653][ T5890] Registered IR keymap rc-empty [ 1174.322402][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.365791][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.400068][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1174.405675][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1174.461490][ T9] usb 7-1: config 0 has no interface number 0 [ 1174.476082][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100 [ 1174.479902][ T9] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 1174.508710][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.513030][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.543367][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.556297][ T9] usb 7-1: Product: syz [ 1174.560528][ T9] usb 7-1: Manufacturer: syz [ 1174.573836][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.583998][ T9] usb 7-1: SerialNumber: syz [ 1174.603701][ T9] usb 7-1: config 0 descriptor?? [ 1174.603860][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.614532][ T9] snd-usb-us122l 7-1:0.1: usb_set_interface error [ 1174.625340][ T9] snd-usb-us122l 7-1:0.1: probe with driver snd-usb-us122l failed with error -22 [ 1174.643441][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.698614][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.743560][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.776825][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.813524][ T9] usb 7-1: USB disconnect, device number 70 [ 1174.833136][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.883430][ T5890] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1174.918838][ T5890] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1174.951700][ T5890] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1175.016338][ T5890] usb 5-1: USB disconnect, device number 41 [ 1177.817408][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.823848][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.879279][T15370] usbhid 6-1:0.0: can't add hid device: -71 [ 1177.910646][T15370] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1177.943907][T15370] usb 6-1: USB disconnect, device number 72 [ 1180.871557][T21173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4051'. [ 1181.353511][T21188] fuse: Unknown parameter 'rootmode^00000000000000000100000' [ 1181.438823][T21189] openvswitch: netlink: IP tunnel dst address not specified [ 1181.457662][T21184] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1181.501926][T21184] team0: Port device batadv1 added [ 1181.543411][ T30] audit: type=1326 audit(1765259169.245:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1181.594375][ T30] audit: type=1326 audit(1765259169.255:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21176 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c97d8f749 code=0x7ffc0000 [ 1181.709286][T21184] hub 9-0:1.0: USB hub found [ 1181.738006][T21184] hub 9-0:1.0: 1 port detected [ 1182.171913][T21203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4060'. [ 1184.361350][T21242] fuse: Invalid rootmode [ 1184.868246][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4075'. [ 1184.878894][T21245] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1184.913123][T18706] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1184.937847][T21245] team0: Port device batadv1 added [ 1185.289811][T18706] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1185.305985][T18706] usb 7-1: not running at top speed; connect to a high speed hub [ 1185.346104][T18706] usb 7-1: config 129 has an invalid interface number: 28 but max is 0 [ 1185.373953][T18706] usb 7-1: config 129 has no interface number 0 [ 1185.421294][T18706] usb 7-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1185.503149][T18706] usb 7-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1185.537393][T21273] netlink: 'syz.5.4079': attribute type 5 has an invalid length. [ 1185.545609][T21273] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4079'. [ 1185.637217][T18706] usb 7-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1185.675793][T18706] usb 7-1: config 129 interface 28 has no altsetting 0 [ 1185.695972][T18706] usb 7-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1185.713132][T18706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.751750][T18706] usb 7-1: Product: 薳봋㦑뗰屶᥇հ檷伯첥茦皁祗㻰끾鷮ῃ갽녕삷꘣䈒眓䭔ꭌ웍লٹ鐨싃䓫㯎斟ﷴ莆⍂몑䏓뱷吋றẜ⦷☣Þ퓼 [ 1185.779260][T18706] usb 7-1: Manufacturer: ᔰ迥杔䊧紟⥏⌚旿쏾峫ٵ빅卿恵換宸냛袅帖升演㙒ć⚅貶ￂ쯵늟뢞䁾 [ 1185.804775][T18706] usb 7-1: SerialNumber: 띺骵풭₟킙 [ 1185.826324][T21254] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1185.883964][T18503] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1186.017567][T21279] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4082'. [ 1186.067589][T18706] etas_es58x 7-1:129.28: Starting ᔰ迥杔䊧紟⥏⌚旿쏾峫ٵ빅卿恵換宸냛袅帖升演㙒ć⚅貶ￂ쯵늟뢞䁾 薳봋㦑뗰屶᥇հ檷伯첥茦皁祗㻰끾鷮ῃ갽녕삷꘣䈒眓䭔ꭌ웍লٹ鐨싃䓫㯎斟ﷴ莆⍂몑䏓뱷吋றẜ⦷☣Þ퓼 (Serial Number 띺骵풭₟킙) [ 1186.139192][T18706] etas_es58x 7-1:129.28: could not retrieve the product info string [ 1186.157421][T18503] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1186.208526][T18503] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1186.313421][T21282] fuse: Invalid rootmode [ 1186.325644][T18503] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1186.382321][T18706] usb 7-1: USB disconnect, device number 71 [ 1186.400789][T18503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.445791][T18706] etas_es58x 7-1:129.28: Disconnecting ᔰ迥杔䊧紟⥏⌚旿쏾峫ٵ빅卿恵換宸냛袅帖升演㙒ć⚅貶ￂ쯵늟뢞䁾 薳봋㦑뗰屶᥇հ檷伯첥茦皁祗㻰끾鷮ῃ갽녕삷꘣䈒眓䭔ꭌ웍লٹ鐨싃䓫㯎斟ﷴ莆⍂몑䏓뱷吋றẜ⦷☣Þ퓼 [ 1186.866519][T21273] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1186.878597][T18503] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1189.132293][T18503] usb 6-1: USB disconnect, device number 73 [ 1189.823652][T21326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1189.891731][T21331] IPv6: addrconf: prefix option has invalid lifetime [ 1190.176149][T18706] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1190.367762][T18706] usb 7-1: Using ep0 maxpacket: 16 [ 1190.377170][T18706] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1190.385413][T18706] usb 7-1: config 0 has no interface number 0 [ 1190.391590][T18706] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1190.491798][T21339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.546563][T18706] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1190.573135][T18706] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1190.591771][T21339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.643140][T18706] usb 7-1: Product: syz [ 1190.647334][T18706] usb 7-1: SerialNumber: syz [ 1190.696375][T18706] usb 7-1: config 0 descriptor?? [ 1190.723057][ T5916] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1190.740519][T18706] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 1190.782875][T18706] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input101 [ 1190.893348][ T5916] usb 5-1: Using ep0 maxpacket: 8 [ 1190.910291][T21333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.923370][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 1190.951227][T21333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.963358][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.003062][ T5916] usb 5-1: Product: syz [ 1191.007301][ T5916] usb 5-1: Manufacturer: syz [ 1191.011914][ T5916] usb 5-1: SerialNumber: syz [ 1191.057554][ T5916] usb 5-1: config 0 descriptor?? [ 1191.094324][ T5916] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1192.051278][ T5916] pwc: send_video_command error -71 [ 1192.086918][ T5916] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1192.149049][ T5916] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1192.220737][ T5916] usb 5-1: USB disconnect, device number 42 [ 1192.984783][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1192.991778][ C0] ------------[ cut here ]------------ [ 1192.997588][ C0] URB ffff8880116d5800 submitted while active [ 1193.003700][ C0] WARNING: drivers/usb/core/urb.c:380 at 0x0, CPU#0: syz.6.4095/21333 [ 1193.011961][ C0] Modules linked in: [ 1193.016093][ C0] CPU: 0 UID: 0 PID: 21333 Comm: syz.6.4095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1193.027232][ C0] Tainted: [L]=SOFTLOCKUP [ 1193.031756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1193.041844][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 1193.047456][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 47 e5 28 fb 49 83 3e 00 74 40 e8 7c 93 c2 fa 48 8d 3d 35 13 8f 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 61 93 c2 fa eb 05 e8 5a 93 [ 1193.067135][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010083 [ 1193.073327][ C0] RAX: ffffffff86ff1d74 RBX: ffff8880116d5800 RCX: 0000000000040000 [ 1193.081341][ C0] RDX: ffffc900021a1000 RSI: ffff8880116d5800 RDI: ffffffff8f8e30b0 [ 1193.089362][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1193.097383][ C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: 0000000000000820 [ 1193.105400][ C0] R13: ffff888063529030 R14: ffff8880116d5808 R15: dffffc0000000000 [ 1193.113401][ C0] FS: 0000000000000000(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 1193.122443][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1193.129084][ C0] CR2: 000020000018e030 CR3: 000000002c36c000 CR4: 00000000003526f0 [ 1193.137107][ C0] Call Trace: [ 1193.140593][ C0] [ 1193.143454][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1193.148924][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1193.154966][ C0] ? kcov_remote_start+0x97/0x7f0 [ 1193.160231][ C0] cm109_urb_irq_callback+0x709/0xcd0 [ 1193.165803][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1193.171275][ C0] dummy_timer+0x85f/0x45b0 [ 1193.175862][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1193.181336][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1193.186308][ C0] ? debug_object_deactivate+0x6d/0x360 [ 1193.192038][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1193.197024][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1193.202012][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 1193.207305][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1193.213447][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1193.219317][ C0] ? read_tsc+0x9/0x20 [ 1193.223492][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1193.229412][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1193.234558][ C0] handle_softirqs+0x27d/0x850 [ 1193.239339][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1193.244204][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1193.249585][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1193.254886][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1193.259480][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1193.264701][ C0] irq_exit_rcu+0x9/0x30 [ 1193.268946][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1193.274766][ C0] [ 1193.277701][ C0] [ 1193.280634][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1193.286618][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1193.293128][ C0] Code: 74 05 e8 7b 29 6c f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 93 ad 33 f6 65 8b 05 4c 61 20 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1193.312932][ C0] RSP: 0018:ffffc90003c1f600 EFLAGS: 00000206 [ 1193.319121][ C0] RAX: eb31f45cec88e000 RBX: 0000000000000a06 RCX: eb31f45cec88e000 [ 1193.327110][ C0] RDX: 0000000000000006 RSI: ffffffff8d786800 RDI: 0000000000000001 [ 1193.335090][ C0] RBP: ffffc90003c1f690 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 1193.343156][ C0] R10: dffffc0000000000 R11: fffffbfff1f02ecf R12: dffffc0000000000 [ 1193.351219][ C0] R13: ffff888028bda500 R14: ffffffff8ebcba00 R15: 1ffff92000783ec0 [ 1193.359248][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1193.365587][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 1193.370970][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 1193.376355][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 1193.382261][ C0] dummy_pullup+0x19b/0x200 [ 1193.386947][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 1193.391982][ C0] usb_gadget_disconnect_locked+0x143/0x490 [ 1193.397890][ C0] gadget_unbind_driver+0xc7/0x460 [ 1193.403023][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1193.408783][ C0] device_release_driver_internal+0x46f/0x800 [ 1193.414899][ C0] driver_detach+0x1f3/0x2d0 [ 1193.419532][ C0] bus_remove_driver+0x226/0x320 [ 1193.424495][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 1193.430234][ C0] raw_release+0xd7/0x260 [ 1193.434587][ C0] ? __pfx_raw_release+0x10/0x10 [ 1193.439557][ C0] __fput+0x44c/0xa70 [ 1193.443566][ C0] task_work_run+0x1d4/0x260 [ 1193.448175][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1193.453295][ C0] ? kmem_cache_free+0x197/0x620 [ 1193.458236][ C0] ? do_exit+0x6c0/0x2310 [ 1193.462667][ C0] do_exit+0x6c5/0x2310 [ 1193.466837][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1193.471880][ C0] ? __pfx_do_exit+0x10/0x10 [ 1193.476492][ C0] do_group_exit+0x21c/0x2d0 [ 1193.481089][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1193.486297][ C0] get_signal+0x1285/0x1340 [ 1193.490837][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 1193.496484][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1193.502659][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1193.508124][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 1193.513417][ C0] ? rcu_is_watching+0x15/0xb0 [ 1193.518194][ C0] do_syscall_64+0x2e3/0xf80 [ 1193.522817][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.528889][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1193.533576][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.539473][ C0] RIP: 0033:0x7f8c97d8f749 [ 1193.543897][ C0] Code: Unable to access opcode bytes at 0x7f8c97d8f71f. [ 1193.551014][ C0] RSP: 002b:00007f8c98bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1193.559696][ C0] RAX: fffffffffffffe00 RBX: 00007f8c97fe5fa0 RCX: 00007f8c97d8f749 [ 1193.567675][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1193.575650][ C0] RBP: 00007f8c97e13f91 R08: 0000000000001000 R09: 0000000000000000 [ 1193.583722][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.591698][ C0] R13: 00007f8c97fe6038 R14: 00007f8c97fe5fa0 R15: 00007f8c9810fa28 [ 1193.599776][ C0] [ 1193.602983][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1193.610266][ C0] CPU: 0 UID: 0 PID: 21333 Comm: syz.6.4095 Tainted: G L syzkaller #0 PREEMPT(full) [ 1193.621202][ C0] Tainted: [L]=SOFTLOCKUP [ 1193.625525][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1193.635582][ C0] Call Trace: [ 1193.638866][ C0] [ 1193.641721][ C0] dump_stack_lvl+0x99/0x250 [ 1193.646323][ C0] ? __asan_memcpy+0x40/0x70 [ 1193.650928][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1193.656137][ C0] ? __pfx__printk+0x10/0x10 [ 1193.660747][ C0] vpanic+0x237/0x6d0 [ 1193.664741][ C0] ? __pfx_vpanic+0x10/0x10 [ 1193.669257][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1193.674546][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1193.679759][ C0] panic+0xb9/0xc0 [ 1193.683502][ C0] ? __pfx_panic+0x10/0x10 [ 1193.687939][ C0] __warn+0x317/0x4b0 [ 1193.691929][ C0] __report_bug+0x288/0x500 [ 1193.696618][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1193.702001][ C0] ? __pfx___report_bug+0x10/0x10 [ 1193.707035][ C0] ? dev_printk_emit+0xe0/0x130 [ 1193.711907][ C0] report_bug_entry+0x16a/0x220 [ 1193.716785][ C0] ? usb_submit_urb+0x7e/0x18d0 [ 1193.721645][ C0] ? usb_submit_urb+0x83/0x18d0 [ 1193.726503][ C0] handle_bug+0xca/0x200 [ 1193.730845][ C0] exc_invalid_op+0x1a/0x50 [ 1193.735359][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1193.740216][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18d0 [ 1193.745682][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 47 e5 28 fb 49 83 3e 00 74 40 e8 7c 93 c2 fa 48 8d 3d 35 13 8f 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 61 93 c2 fa eb 05 e8 5a 93 [ 1193.765295][ C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010083 [ 1193.771368][ C0] RAX: ffffffff86ff1d74 RBX: ffff8880116d5800 RCX: 0000000000040000 [ 1193.779341][ C0] RDX: ffffc900021a1000 RSI: ffff8880116d5800 RDI: ffffffff8f8e30b0 [ 1193.787492][ C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 1193.795471][ C0] R10: dffffc0000000000 R11: fffff52000000f00 R12: 0000000000000820 [ 1193.803533][ C0] R13: ffff888063529030 R14: ffff8880116d5808 R15: dffffc0000000000 [ 1193.811602][ C0] ? usb_submit_urb+0x74/0x18d0 [ 1193.816475][ C0] ? usb_submit_urb+0x74/0x18d0 [ 1193.821423][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1193.826813][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1193.832722][ C0] ? kcov_remote_start+0x97/0x7f0 [ 1193.837760][ C0] cm109_urb_irq_callback+0x709/0xcd0 [ 1193.843156][ C0] __usb_hcd_giveback_urb+0x376/0x540 [ 1193.848560][ C0] dummy_timer+0x85f/0x45b0 [ 1193.853130][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1193.858727][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1193.863697][ C0] ? debug_object_deactivate+0x6d/0x360 [ 1193.869261][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1193.874204][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1193.879152][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 1193.884369][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 1193.890366][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1193.896089][ C0] ? read_tsc+0x9/0x20 [ 1193.900168][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 1193.905986][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1193.911197][ C0] handle_softirqs+0x27d/0x850 [ 1193.915974][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1193.920746][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1193.926050][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1193.931298][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1193.935897][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1193.941112][ C0] irq_exit_rcu+0x9/0x30 [ 1193.945355][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1193.951000][ C0] [ 1193.953936][ C0] [ 1193.956878][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1193.962978][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1193.969486][ C0] Code: 74 05 e8 7b 29 6c f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 93 ad 33 f6 65 8b 05 4c 61 20 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1193.989095][ C0] RSP: 0018:ffffc90003c1f600 EFLAGS: 00000206 [ 1193.995172][ C0] RAX: eb31f45cec88e000 RBX: 0000000000000a06 RCX: eb31f45cec88e000 [ 1194.003152][ C0] RDX: 0000000000000006 RSI: ffffffff8d786800 RDI: 0000000000000001 [ 1194.011126][ C0] RBP: ffffc90003c1f690 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 1194.019102][ C0] R10: dffffc0000000000 R11: fffffbfff1f02ecf R12: dffffc0000000000 [ 1194.027079][ C0] R13: ffff888028bda500 R14: ffffffff8ebcba00 R15: 1ffff92000783ec0 [ 1194.035074][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1194.041421][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 1194.046813][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 1194.052209][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 1194.058144][ C0] dummy_pullup+0x19b/0x200 [ 1194.062928][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 1194.068047][ C0] usb_gadget_disconnect_locked+0x143/0x490 [ 1194.074297][ C0] gadget_unbind_driver+0xc7/0x460 [ 1194.079420][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 1194.085150][ C0] device_release_driver_internal+0x46f/0x800 [ 1194.091239][ C0] driver_detach+0x1f3/0x2d0 [ 1194.095933][ C0] bus_remove_driver+0x226/0x320 [ 1194.100880][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 1194.106694][ C0] raw_release+0xd7/0x260 [ 1194.111029][ C0] ? __pfx_raw_release+0x10/0x10 [ 1194.116001][ C0] __fput+0x44c/0xa70 [ 1194.120006][ C0] task_work_run+0x1d4/0x260 [ 1194.124609][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1194.129737][ C0] ? kmem_cache_free+0x197/0x620 [ 1194.135031][ C0] ? do_exit+0x6c0/0x2310 [ 1194.139463][ C0] do_exit+0x6c5/0x2310 [ 1194.143640][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1194.148704][ C0] ? __pfx_do_exit+0x10/0x10 [ 1194.153331][ C0] do_group_exit+0x21c/0x2d0 [ 1194.157958][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 1194.163171][ C0] get_signal+0x1285/0x1340 [ 1194.167701][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 1194.173431][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1194.179691][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1194.185159][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 1194.190451][ C0] ? rcu_is_watching+0x15/0xb0 [ 1194.195245][ C0] do_syscall_64+0x2e3/0xf80 [ 1194.199872][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.206050][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1194.210756][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.216664][ C0] RIP: 0033:0x7f8c97d8f749 [ 1194.221086][ C0] Code: Unable to access opcode bytes at 0x7f8c97d8f71f. [ 1194.228117][ C0] RSP: 002b:00007f8c98bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1194.236549][ C0] RAX: fffffffffffffe00 RBX: 00007f8c97fe5fa0 RCX: 00007f8c97d8f749 [ 1194.244529][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1194.252504][ C0] RBP: 00007f8c97e13f91 R08: 0000000000001000 R09: 0000000000000000 [ 1194.260481][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.268631][ C0] R13: 00007f8c97fe6038 R14: 00007f8c97fe5fa0 R15: 00007f8c9810fa28 [ 1194.276626][ C0] [ 1194.279906][ C0] Kernel Offset: disabled [ 1194.284659][ C0] Rebooting in 86400 seconds..