last executing test programs: 24m24.976756384s ago: executing program 32 (id=101): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="02b216c1a86e843c3ab1858bf997d13de473e7fb8f6685107ab58dfe4ac09140845578be89dd52a3bbaa9ad8b63706b270169a10699322a8e5fe77547427646d36d2121a80bd94b63fbe5621621629ebe45e8a2c0656ed92a63fd89872364c0c40c132f9f975064f4f0e2c4a60", 0x6d}, {&(0x7f0000001880)="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", 0xf00}, {&(0x7f00000003c0)="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", 0xfe}], 0x3, 0x3, 0xffff0001, 0x19) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x1d6000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x0, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff000000000200000000000000000000000000000020000000"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x58, &(0x7f00000002c0)}, 0x10) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x800, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_gettime(r6, &(0x7f0000000040)) 23m59.534045141s ago: executing program 33 (id=141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r4}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000000940), 0x0, 0x40000000, 0x0) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 23m46.54906863s ago: executing program 34 (id=159): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 23m25.612583814s ago: executing program 35 (id=179): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x18, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x19, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 22m32.747674733s ago: executing program 0 (id=225): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e000900270970000000002204"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x40) 22m31.859667019s ago: executing program 0 (id=226): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30364d54}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|', 0x6}], 0x1) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) 22m23.684342863s ago: executing program 0 (id=230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f00000005c0)=""/120, 0x78}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket(0x21, 0xa, 0x2) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r14, 0x29, 0x1b, &(0x7f0000000080)={@remote, r13}, 0x14) 22m11.833949176s ago: executing program 0 (id=238): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30364d54}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|', 0x6}], 0x1) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) 21m58.11538769s ago: executing program 0 (id=251): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1, 0x0}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r4, r4, 0x0, 0x2000fb) read$FUSE(0xffffffffffffffff, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x3a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) ptrace$getsig(0x4202, r3, 0x4, &(0x7f00000001c0)) 21m53.95790495s ago: executing program 6 (id=255): socket(0x840000000002, 0x3, 0x100) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3, 0x4, 0x10000, 0x4}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) 21m52.340588261s ago: executing program 6 (id=256): r0 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240306000000f57f07603aeff0f64ebbee07962c38e22e11b44e65d76641cb0100070000002aa7b642d1cd27d586a953b4242fc0ac4e", 0x3a}], 0x1) 21m50.755137508s ago: executing program 6 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x40000000) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) 21m48.618808835s ago: executing program 6 (id=261): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff80000000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close(0x3) 21m47.321800262s ago: executing program 6 (id=263): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="02b216c1a86e843c3ab1858bf997d13de473e7fb8f6685107ab58dfe4ac09140845578be89dd52a3bbaa9ad8b63706b270169a10699322a8e5fe77547427646d36d2121a80bd94b63fbe5621621629ebe45e8a2c0656ed92a63fd89872364c0c40c132f9f975064f4f0e2c4a60", 0x6d}, {&(0x7f0000001880)="f1e7f629021e0e24cd22878b10ab15068d8080c8cc554776e429cd702acc4d038c3bdb0d51be48780ecfa18e8d5e45173401f1b9fc8f59b206e29708218e15734415801cd254a91dabbffe2c9b547893274152f07ce6d1e52d9bd76c78495a619092b67607dc501e86072872d17fc58724acc7e298f280a32b133fbcf65c140f9c773a8cfd9811bd542dc7d85fc2ba29c9751de7c64370303eeee655dfeaf5e9fc54c64b596c0af1eeb2f704c7c047b9b6083c7af159982c90090e85e97a7e98338ca74ab876f4072d4f71f82541e9025aaafee912188c7bf3bec8056861abb38600f82009512a20d44e9eec54d75cc7782d59adb616933e8ba232319798e806b5244cc09067cc2af8f63242a7ccd4d83fde20ef96bf39fdce96335a9e259c94e991226182b5ab88c6230edcc293a11d086b0093130e5aa622ddd3d2e438f0e47080fcb009cd437fba6b2f40648155af3ab7ecb6c541e77684ff7aa09080b270444ef202af230622e5bfcea644fb66c4664db9152db6a400643251eec0eb0cf2807e826811c627630527d041313387af9c646a5383ce3333f6f68d4efbb22d61e1b5dd89ad0bac142781009543ac6646c003a43a26518914b9766ad7a2cfb904ccaf4373c0e4826101cd7dbd6e8b06447ee9dd94243a98d06586437b7ab4969b930d9ef33c49229e2088fd39071b786d5cf584355abad7b6196c20dcd0c8be5757dfb369286ba492894c3372b5ec10a6909377ef7b3b01a5e12ffde4b2bd67e541d200c8d494368d71f6fba0917038b614a625d8a1410ccceadc4cfac1201ece245e58923953e7f3195829e013a66be9dde5864c0017fa8edfbcb809003916479731e0efd5d466b5990b8a8b4ca68740f1c416bf58f799ea4bb230f87391fff2ff415a0bd4752eb3d005c1de4d050340f371377ff76b782d469c30f1cf47a6cbc51d803ca72cebdef3f42329a3744554a334a65a707ef0daafffed78de9d0df6d97679ac17766f0f1ce2e83c566757deb19491dc654188ad74408a731a829aa3bcb975da2c36f7edfd2c5fa23e34de5f10b0f56537ad7a608d06dddc23fd0475c12241dea265abc6681171e79c1881755f9359a5c3c098349b97d11ced3484443237dd306670422ef4522823269bbfc28f40bb13e160102a4b3afb63013c23bfb60dc62f2acb61e11b89c9a1d21de897fc7e0c0ea9cd9273954c8ac178fbad200e2aa617b3cc42f28512fe5fd6d5125626b72077ae0ed1344bcc6628b0e83a70d213269975047f5f0d5a8ff28c14af075d00d56e192e1c5090a3d7a5173eea73c1f022404d3bea339976dc947325f7e082b2d3467e8fa36fdd6e95b3a956e489a39636557d76a0d59a7ea5327445627343928ca762bc77d4416dd1a8276359d75c34fca3a28da58dd54481bca7a1313707260cf9a85f69eee38a7b5a546b96bf15ee3aa270e4c1a1e18d9b21898a44c578665d672f2b7a653cd2e813b6561c4d24a3071a8a46219902195440a7f478032d10cc026aff40a7b537cea2d7bd3753d02d34f85d03ff30b24873037e79a980b43b4321e902817a4d3b659a6991743f76afe8347a4d5f1bbfc8bf40ad88a23db4851a2153b571232282f6b11c3eba54282680f50be59c432b466cf798e99e4f17f8ebc7da81d16a3c5a555013aae3d365b6930fc1012136a9ba83ea4b8328c859473c225847c9caef517fddce8a6d8e1263a1a91be4443c7a68f9e15a3096d54eba568f4c1761ec88ca7618c3733762b59e9e601d907047d9034c1eae2ba44d4993b4f40e1bbbec2a053650034d6df6548863b326943e5ce306b31ece99c039f3bb48aa2061be71a0cf067abe96801d3cf21275de9f3a9647250e3f7b0d35cee2b67f6c5b12f396d98c8c6ec2429734bca3ebf83862ec3ed415d90cd7b61d4704c5936ba5d7648c369025970083ef6aa2f519e58795c8ea8bbf2202b2ea06d4d3d054abf51281fab291e5ac7432ccd57491b5819295e466764ba61d4ddc004994e43961561b0fe77d26aa6e34bca8555cde2716933b62ecf406fb276efb42df5271c53cdc5374b782337cfbe6f8a436f2ff5ef0ef9a3a4edcedb156b3e0e0934632da50b7ec199009e090aaca94a169e87453cb93cc776f4717bc022d737a95638a0db88f39e101ebb1a8635d999f653d6cd4012ff94e5462069aa975fb2defa927cfe243c9031ccb78ba5d75b32264cf2a11c621c13658ef46017abf210ac4b0c899743255747c0418ce36a2d5e59103de5922fa019fc9da5a493310f4799f5bc99c9458a250cfc84f6f2d786d7532363f68034f6779461ad2b1ae22444967d0005d491001fb05bd74d2d959cf382b77daeadef117ab831306d18da1ed36fae540932080d23d999d44ed7eda8430d077c8dd9665564cc230f12929e8dd3c5c919fff111815b5b0285aa164b9e33bb88f3aa63f893b6f338041732984883558bc0c21b1a561be5dd1d39fce946d3409b9c728e636543044d675d8299369e4b862d43c2d4d6437b4c99c68cfad1147e04cf699ceb9b1708abc6f9cf4e78561f9ac7a8f2c49f9c43ea5e2e46834e38940534ad0eac787067e84c45a148e0c88711e26b95ede82aebe22665fc5eef784bf634f29b605a29c4e7f50377d6247222e25b7d3683db5edc9cf10ab4c817debcd28bf7cc22897ff33d67c6e3ec738a669ee7fea89640dd91a15204d6f45a2628559e3753be94a98432accb34ee68e9e1be1f74746f0e5ad8510a07594cf3821f29dd039cc826c1012af7751c534f7cc34960a34826ec9e28352568929add748df52aa8487a7e0ff416f4a5d534fbfb70f89e3e59b520b3621c565eee85c515eaaea728eb34789c734a877f0ecaa94b6c9eef3297f01453cad6b81e30ce53bbf419689ead068b0502cbbc4c4d7cbf0f09951113276222d68f3be386b83ec8bbc54f80b6a7ec78448a02c563897491476d0722d9b88d7e1170f5f156f25a92f7570e571f14c2b55f2f5d6df698d38688de74a7007b8f0e6a487ff28b4951602ac609bf9b902618c0950d069ba2147af6d94f5f7a1bf8c2cb3caac91dae4f1ea9c7694ff450b4a9b66c961179b0d915066134ef357a8905dc79d5cf9035624cb20a1f93b19414890af87e059d4858848d87dbb3a65926ed33cd9621fa5c932a92a0273fe0e83eae70ffd550305ab6ef63e19dfaff49589a2e6bcb54223b62388eb2fe973c2d7b2fe8f4a2896f28fd5924b44eb7d930e868523657996f5cb70db652e91cb8a8fd54e076c9f94aacbea229850e0969a03e51e6078865c297dba07a97fd3f751bcb29261e8353261ef0c22e4786119bd0fe085e21a74cb24cc057d1e2f979b13d1dc0726ee85373e028e8de8d745229f3fb0620abb913faf179e8049d9dde43fc06a607060f69c1c9c1a77fb59da2a2603fc25caaf32b5d2ee04d1efc0dfc5e1684792ab388e07a668f07a5bbb9d4e5e248ef85a892fc0dc8a041510ca6377a95c4a2dab47ed9476659d46fa4558cca357f6355a7e988ba655027415003c38fc8d296d071256d15d6c01d91318825e877291c402251ea3734b4dd17c98fc55eadee021e5108969910a45c1a3cc2631bab3bd5f849feb9e2bc1c8f684e915254a167b9697d2dcca5b29c23c0ffc38c64ef858b8d159c328be58a33301eafb651e42e4e55fd0c3e3af783d72163263b993a4c8e8b3264e231abd406acdceebefcd0598a7b98a9165b7cf60bc460c23c11a151619b4916f6844233e4dce7f6130f207ef018fc58056167b078f199aea105a62eed3542f98611f0927d6ccf36545a8ed8845c6f6056a4d1b037aa262ed7a4eb84a5ea20a4dfd2d4f9866ea412c8e9a897980ed3168984e15f392fd5a3a6a309a43eeb5ab6fa2298c674aa7953f12cf05e300852be852adee0570080af7ddf888b9dd38b4a431b54f569e50a818c869d20ef88d633dbab0049bb4e5ca8b54fe7b3ba7bf41098cc0b5d665629d08407202436de764f9bf24b309a07440237ab7b8e9b770f9f181938ed3ec3f83fb464a39e068b5275dc8d32d4ee14de19aeffba7e4caa21512e79ad20128a200a6259145a25733dcbd40b3ef508caeb84c7efd538bbc0d3321873028aac6ead8d8ad50f0631e8654251a342e46d69eaf15fc33d825507a1521a9d3d182b00eec923ccc0cf450bc8961fa512b2c0b4f2d0d235589726a5f3ac12a36529921aa3afd014b2bbf704c27428b00bbdd803e3063cbcd4bec843c7f7017b0ec953c6bda3e792b9afab44fac478b3e430463a482c06515cc2aaeafb8e1ba40b2bff430e7d0d9463f1b6515c6bb4a99a5c9b159edf676ecf8cb6881bd241a44b51aab7f484235b148a9e7eeacd67ff25efcd1abbb69ab9769389eeb7ff09f1527271fa1b0792007e126f1cac7ca4fed9568e705c1e183b9dbfde28ed3cad01321ffcb7a4a3784cedbc9cadb2b7fa4f2e094a4f5c83160d94fa526f71e7ae8027be6d475c3dd969478ea228eeafd7db1f265bac2239f26a6a9a83478497ce472d86247c19915333e17bd85203df9d122104499e272a626e095f5a8770aad7bb89195f9da3a1cdb29ed312cf5f19f79f9970ee02ecefb181662447401bc9086af3f09acff9f6056d3bd4c7b49bcd58792b77bafd756eb98dc196d4fe3e70d67946619d05609c868529e11f1a5b5222ed6442c62561e611f91919ebd6f62c4e899310bb4f2867c91ff6678b999e956722f37471706b9b372cff4375e925e4fff0c5aa8a366eace39b07b6abec9d4d19d8d1a973029998e72a9c1be5ea56ef87f9e4434b88f1d894b55c7d38b46cb8e7ad5aed6e495069e35000983880ce5b73f59c845f641fd08a4631dbc8c8bf0de9e9c0c1c5a15983d954f7d305a1b806b910c85dfa53ebd6ae95f86125e5bd5115011c1baaf295b8810db23e25f9b332594a42339e6998897376b82ec2884354b616a081e44b226b8192eb4aa3e601679cfa2a45df9b8067b4c097a81cac827d6c4b5f515a75b159c932ef90dc7906a65a95915688a9c6a92b7a5d06a29d844e15f92c07268fd642d1df2c508702b67df59816f66d79c541fad4a5101ebe4b2edc5a477b149e456524adcebeab4380a00065ec573b3f24433de0dcaa8870adae98d4210bd4c26274fe405db291976aa8f124f4d0fc717fa72d5b2c426d32561b9912568f58da685947543213054486ae6d230ef5a552dd83b4f7ea9f17135e265a99d5599f0b2aba9a00e9bbba80b7b8ff4c5c42bbe0a8eb84576756ffa22e6cf5927746ce4661f4123c45d69a03225a62472108c34f961e056eca4edbd8a1ad7177438c82eafcbe9718610a9e347ff1d4ddd50dc930790bc4c9218d638285d942ac2075f201c572d22f5b1aef914450b499d173dd7407149daabeb7e2d058a3c88b99dae4afc4290734c9b78e13486c099f128ba4ca319", 0xf00}, {&(0x7f00000003c0)="99814735e031a1b9214c81463867bf68abb36537769ca0378b8e4e7efd064ad6cfeb4f77e85b49bf761e92cced4b566c9db9817659ddcc9f5fd8db87a94741ae34a5830c9bae7da59fe0fa933a5aed896bbbfe381143dc0003de203ede3c59170403412592204d8f6ef4c44bc8cfe4f9db076f419a9bbd55a3e42e1b2c27a4f20ee723b3651a479a7c5b95e636f979ef9ec1ea4026f390070fd2fcb713ae7860a5c6e7a405b29d9b212213458e55343c43e5df99886fca702813bb251f3d2b6933880168f410c02e671a8958b7ea9be5d902a019a58a1bd617cb18f8453c3397d12af35fc3a1eb1275aaaf41336d8034f7e7812fae92abfb01c59df744bc", 0xfe}], 0x3, 0x3, 0xffff0001, 0x19) r3 = syz_open_dev$dvb_dvr(&(0x7f0000000380), 0x0, 0x800) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x1d6000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32=0x0, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff000000000200000000000000000000000000000020000000"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f00000002c0)}, 0x10) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x800, 0x0, 0x0) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_gettime(r7, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000001680)={0x0, 0xfffffffffffffeaf, &(0x7f0000000400)={&(0x7f0000000240)={0x18, 0x1411, 0x1, 0x70bd29, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000040) 21m44.366140246s ago: executing program 0 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @loopback, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a3a00002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc0004}]}) setns(0xffffffffffffffff, 0x24020000) sendmmsg$inet(r7, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf9", @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c0000000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001"], 0x168}}], 0x1, 0x8000004) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 21m44.192654293s ago: executing program 6 (id=267): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f000106"], 0x18}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x8084) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f344562600000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r9, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r9, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}}) 21m35.323695673s ago: executing program 36 (id=173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0x0, 'wg1\x00', 'ip6tnl0\x00', {}, {}, 0x8}, 0x287, 0x178, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x2, 0x4, 'bm\x00', "17fe85b2e7794dbf95fa4bbcb6a91c1f280c1999b9e9c91aec32acf40242838b14641ee58ffb2807b1455049d59591426d860cbcf1d58ab1ffbb5187b72db33268933cac58623e417fbdbd0b8753f88cb456e7cd9ef85fd6861f486fb7bab7930c4e57def2f1e72aede0b46c35ed67a0549781a3d3fe2b88393de1719bea5584", 0x7e, 0x1, {0xf}}}, @common=@unspec=@limit={{0x48}, {0x7004, 0x81000, 0x0, 0xb}}]}, @REJECT={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, 0xffffffff, 0xff000000, 'macsec0\x00', 'netdevsim0\x00', {}, {}, 0x73, 0x3, 0x25}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0xfffffffd, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8, 0xc}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)="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", 0xc2e}], 0x2, &(0x7f0000002400)=[{0x7e0, 0x1, 0x8, "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"}, {0x38, 0x108, 0x2, "d1cb82e1ba3f7b288450fd50da072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0xf8, 0x19c, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a"}], 0x910}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r4, 0x0, 0x0, 0x800) 21m34.583953169s ago: executing program 37 (id=260): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30364d54}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f0000004380)={0x2020}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x0, r6}) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|', 0x6}], 0x1) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4800) 21m28.596662798s ago: executing program 38 (id=266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x7}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @loopback, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a3a00002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc0004}]}) setns(0xffffffffffffffff, 0x24020000) sendmmsg$inet(r7, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf9", @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c0000000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001"], 0x168}}], 0x1, 0x8000004) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 21m27.90119646s ago: executing program 39 (id=267): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000005f000106"], 0x18}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x4d, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x4000, r2}, 0x18) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x8084) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c800600f344562600000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) r9 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r9, 0x80286f4e, &(0x7f00000000c0)) ioctl$FE_SET_FRONTEND(r9, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x1c, 0xa}}) 12m28.682292137s ago: executing program 2 (id=860): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 12m27.736881302s ago: executing program 2 (id=863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x4, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0xba48, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x6, 0xf, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfdf1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x201, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 12m26.541199843s ago: executing program 2 (id=867): socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0xc86, 0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905f1d5"], 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x24800) 12m23.473248483s ago: executing program 2 (id=876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000045, 0x8, 0x0, 0x0}}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat$cgroup(r2, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x8000002) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)=ANY=[], 0x310) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1, 0x5e, 0xfffffff8) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0xffffffffffffffff, 0x3, 0x6, 0x0, 0x2, "5debca561a5fbf61048955f6f876b2ff"}) socket(0x11, 0x1, 0xfffffffb) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x903, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff"], 0x200) 12m13.163548247s ago: executing program 2 (id=896): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 12m11.346133783s ago: executing program 2 (id=902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0x4fe, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 11m55.853075959s ago: executing program 40 (id=902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0x4fe, 0x6000000000000000, 0x0, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001"], 0x0) unshare(0x40000400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 10m18.763442975s ago: executing program 1 (id=1091): syz_usb_connect(0x5, 0x27, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000340)=[{0x5, 0x810, 0x6, &(0x7f00000001c0)="052029e17caa"}], 0x1}) 10m17.298481458s ago: executing program 1 (id=1094): unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x9b, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0xa, 0x5, 0x3, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x0, 0x1004, 0x7, 0x0, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8004, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x200006c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x6b, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x7ff, 0x8, 0x5, 0x6, 0x47, 0x2, 0x6, 0xfe000000, 0xa, 0x2, 0x2, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x6, 0x7, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0x1, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x9, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x20002006, 0x5, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xfffffffa, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x6, 0xfffffffd, 0x7e, 0x100, 0x9622, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x8, 0x0, 0x4, 0x5, 0x1, 0xd7, 0x1fc, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) poll(&(0x7f0000000200)=[{r2, 0xe84c1ec4ce0ea591}], 0x1, 0x81) 10m16.110782381s ago: executing program 1 (id=1096): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x80000015}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 10m15.027196568s ago: executing program 1 (id=1099): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0xf) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000740)=ANY=[]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000004300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006340)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c272074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca36507002b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x130, 0xfffffffffffffffe, 0x401, {0x6, 0x0, 0x0, '\x00', {0x40, 0xad7, 0xfffffffffffffbff, 0x6, 0x0, r2, 0xa000, '\x00', 0xffffffffffffffff, 0x3, 0x100, 0x8, {0x73c0, 0xe}, {0x4}, {0x100000023, 0x81}, {0x7, 0x5710}, 0x8006, 0x6, 0x2, 0x80000000}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x1010, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) 10m13.610174424s ago: executing program 1 (id=1101): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e24000000000001", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff0000000000000300"/117], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @gre={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x60}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0xb, @private1, 0x9}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) 10m11.836177114s ago: executing program 1 (id=1106): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m56.343872693s ago: executing program 41 (id=1106): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m54.569285318s ago: executing program 4 (id=1936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m53.237533944s ago: executing program 4 (id=1941): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$watch_queue(&(0x7f0000002240), 0x80) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) 1m52.276795137s ago: executing program 4 (id=1944): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfffff7fe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000180)=0x80000001, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) readv(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) 1m49.542406433s ago: executing program 4 (id=1949): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000200)={0x2e, 0x6, 0x0, {0x6, 0x1, 0x5, 0x0, 'fuse\x00'}}, 0x2e) 1m48.72793595s ago: executing program 4 (id=1953): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0x7fff, 0x5}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x81, 0x402) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r2, r6, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00108004000b800400"], 0x34}, 0x1, 0x0, 0x0, 0x20044801}, 0x4008094) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1m38.3499378s ago: executing program 4 (id=1963): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0xa, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0x3}}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1m22.682857176s ago: executing program 42 (id=1963): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0xa, 0x0, {0x7, 0x25, 0x1, 0x0, 0x6, 0x3}}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 25.35549999s ago: executing program 8 (id=2061): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) 24.395395769s ago: executing program 8 (id=2062): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @register_looper, @decrefs, @free_buffer={0x40086303, r6}, @enter_looper], 0x0, 0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024, 0x410}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122070009058103"], 0x0) 22.725909989s ago: executing program 5 (id=2064): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000080000080000000009000000731105000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.087065182s ago: executing program 5 (id=2070): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000300)={r3, r3, r3}, 0x0, 0x0, 0x0) 18.784532989s ago: executing program 5 (id=2073): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x80080, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000280)={0x7fff, 0x5}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x81, 0x402) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) close_range(r2, r6, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880100001800c00108004000b800400"], 0x34}, 0x1, 0x0, 0x0, 0x20044801}, 0x4008094) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'gre0\x00', 0x1}, 0x18) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 15.445290806s ago: executing program 7 (id=2079): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 14.583144189s ago: executing program 7 (id=2082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x9, 0x7, 0x8, '\x00', 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.87622127s ago: executing program 7 (id=2086): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000380)={0x20, 0x14, 0x48, "85ae18e1405feb2ba94153b76a25b8133680a521391e102cc7c4a49128c0e8eb4b0721395effbc7d086c37a6e0a102b8e7a88a0262c532cb9420fcce15bb513b5fc7d4d69a78e86e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.668423507s ago: executing program 8 (id=2089): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.928590029s ago: executing program 7 (id=2092): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0xff8d}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) 9.425221945s ago: executing program 8 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r1}, 0xc) 9.424842613s ago: executing program 9 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001000), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 9.326588166s ago: executing program 3 (id=2095): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000005600000095", @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x6b) 8.990932391s ago: executing program 7 (id=2096): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)="47a8addd498b4f9b5fc5114d0c889501", 0x10, 0x44}, 0x4000000) 8.372651734s ago: executing program 3 (id=2097): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) 8.303104559s ago: executing program 9 (id=2098): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x2, 0x7fffffff}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$watch_queue(0x0, 0x80) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 8.268782363s ago: executing program 7 (id=2099): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x2}, @register_looper, @decrefs, @free_buffer={0x40086303, r6}, @enter_looper], 0x0, 0x0, 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024, 0x410}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201100100000040d90455a000000000000109022400010000000009040000010300010009210010010122070009058103"], 0x0) 7.76282458s ago: executing program 8 (id=2100): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x53}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 7.349516134s ago: executing program 3 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 7.203530616s ago: executing program 9 (id=2102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000380)={0x20, 0x14, 0x48, "85ae18e1405feb2ba94153b76a25b8133680a521391e102cc7c4a49128c0e8eb4b0721395effbc7d086c37a6e0a102b8e7a88a0262c532cb9420fcce15bb513b5fc7d4d69a78e86e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.172976328s ago: executing program 5 (id=2103): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, &(0x7f0000001400)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x0, 0xc, 0x10, 0xd, 0x40, 0x7}, 0x21, &(0x7f00000011c0)={0x5, 0xf, 0x21, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x0, 0xfff4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x3, 0xbb, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x4, 0xc5, 0xffff, 0x9}]}, 0x3, [{0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x4001}}]}) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) socket(0x6, 0x5, 0x4) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="00000001"], 0x0}, 0x0) r3 = msgget$private(0x0, 0x3ac) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000020180c200000e08004500005c0000000001019078ac1414bbac1414aa05009078e00000e0400000000000000000730000ac1414aa7f000001442c000300000000011700040a01110100000000ffffffff000000acf8e16eaa00000000000000000000000c"], 0x0) msgrcv(r3, 0x0, 0x0, 0xd3ee73c716b4091b, 0x2000) msgrcv(r3, 0x0, 0x0, 0x0, 0x2000) msgsnd(r3, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0x93, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001020000ff2505a1a44000010203010902810002012490030904000001020d0000052406000105240002000d240f0102000000060000080006241affece31524128100a317a88b045e4f01a607c0ffcb7e392a08241c010405150108241c02000001000905810300040e06d70904010000020d00000904010102020d00000905820208000003010905030200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x7, 0x1, 0x80000000, 0x1ff, 0xa}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000001480)={0x0, 0x30, 0x100, "b20c645ce9e4916e0c784beb31150b6d390bfee05250346903a0809b3e03b2fb4abecb40430c9dddaa1de8b72c7cb3ba5aec0fba76114037a83099a60b16a3fd331a1a463660a63f557f8c9726b5d58e31db6a662f93790d426b2b101ff284c0f92c67be5b8d90b867910f1f56b5924c3ebee15934e49766cf9d959f8ca12e4d2969555edc219a96cad1bce6144efe7c28ecff18732fa09019b1e1a8f42bdb4593bd0c4dc12fd87cd8ee84e844868a0f55a24859827ca56a3eb33ec3a6908341e6f299f41994751c68fc5a7c25d73b2d519745adb9bb0a70ed3aa5edeab7e4506ca28d2f13eb8f56d25a9c0c4b15e3c13368ae33c73f593d0e159141489fa2cf"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3a}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0xff, 0x7, 0x9, 0x6, 0x9, 0xffff, 0x78, 0x7, 0x5853, 0x5, 0x6, 0x1}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000007c0)={0x20, 0x89, 0x2}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000180)={0x3, 0x0, [{0xa54, 0x0, 0x40020298ce9}, {0x251, 0x0, 0x80000000a}, {0x9f9, 0x0, 0x400}, {0x227, 0x0, 0x40}, {0x276}, {0x863, 0x1000000, 0x5}, {0xc95cc95315b8f1ce, 0x0, 0x21b}, {0x40000104, 0x0, 0xfffffffffffffffe}]}) syz_usb_control_io(r2, &(0x7f0000000b80)={0x2c, &(0x7f0000000240)={0x40, 0x23, 0x1b, {0x1b, 0x23, "b37bfe6084c097b191ef14756cf352dfd33287de0ff1906321"}}, &(0x7f0000000a40)={0x0, 0x3, 0x43, @string={0x43, 0x3, "76b1ee6b7a40323739e6252ad850e3b2f16233ef72c8ea77f4c64fb4ab58188c9f1cd4c89bab348a660d76869bcf04c5cec6da672b4f0d24bf57fdd8e4fbf51d20"}}, &(0x7f0000000ac0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x5, 0x9, "810795d1", "fe6ecb98"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x10, 0x4, 0xa, 0x2, 0x3, 0x81}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000001080)=ANY=[@ANYBLOB="1cd700000000000000000000254cad29e369d961e152be0700000000000000352cf64befd9c105a6218a6ff026e237dad82ee3f899c618491a4e813fcc399abb915a1d127ce9b7add057ef6d73398271825b7053596bc870f0e08fa8c9ecd698fba35f993bc7691e9f4578f609c8"], &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000400)=ANY=[@ANYBLOB="20db3b3fe2220a8700090000006001040067bd79"], &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000d80)={0x40, 0xb, 0x2, '{U'}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000e80)={0x40, 0x19, 0x2, "79ba"}, 0x0, &(0x7f0000000f00)={0x40, 0x1c, 0x1}, 0x0, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x2}}) sendmsg$IPVS_CMD_GET_DEST(r1, 0x0, 0x44049) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.270062171s ago: executing program 8 (id=2104): pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_script(r1, &(0x7f0000000800)={'#! ', './file0'}, 0xb) tee(r0, 0xffffffffffffffff, 0x9, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x222000, 0x0) syz_io_uring_setup(0xbd4, &(0x7f0000000000)={0x0, 0xd206, 0x10, 0x3, 0x35d, 0x0, r3}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 6.263180861s ago: executing program 3 (id=2105): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x44}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.221396604s ago: executing program 3 (id=2106): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x2416, 0x9a41, 0x41, &(0x7f0000000240)="b68524a1990ca76020cb69f0da94ee6ea3b82d55928df309bcb9a90fe07cd59038d59fa1f4a3c8cff7aa593898f91221b213e6c819aa21d2f1aae295cef8c03777"}], 0x1}) 3.375937061s ago: executing program 9 (id=2107): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711809000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.759044866s ago: executing program 5 (id=2108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'lo\x00'}) 1.960493864s ago: executing program 9 (id=2109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.077040526s ago: executing program 5 (id=2110): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) close(r1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x12121) 312.038074ms ago: executing program 9 (id=2111): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 3 (id=2112): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x2, 0x7fffffff}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2$watch_queue(0x0, 0x80) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): amed net_device) (uninitialized): Registers INIT FAILED.... [ 1275.430444][ T7545] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1275.580124][ T7545] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1275.786260][ T7545] usb 9-1: USB disconnect, device number 26 [ 1276.064332][ T8470] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1277.092557][ T8470] usb 8-1: not running at top speed; connect to a high speed hub [ 1278.610450][ T5829] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1278.840110][T11349] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1278.871729][ T5829] usb 10-1: device descriptor read/64, error -71 [ 1279.279491][ T5829] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1279.480086][ T5829] usb 10-1: device descriptor read/64, error -71 [ 1279.539406][T12700] tipc: Started in network mode [ 1279.544728][T12700] tipc: Node identity 3626c1afb161, cluster identity 4711 [ 1279.639483][ T5829] usb usb10-port1: attempt power cycle [ 1279.677458][T12700] tipc: Enabled bearer , priority 0 [ 1279.744795][T12696] syzkaller0: entered promiscuous mode [ 1279.770516][T12696] syzkaller0: entered allmulticast mode [ 1279.970796][T12696] tipc: Resetting bearer [ 1280.024995][T12694] tipc: Resetting bearer [ 1280.059250][ T5829] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1280.102663][T12694] tipc: Disabling bearer [ 1280.144700][ T5829] usb 10-1: device descriptor read/8, error -71 [ 1280.459152][ T5829] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 1280.542872][ T5829] usb 10-1: device descriptor read/8, error -71 [ 1280.686360][ T5829] usb usb10-port1: unable to enumerate USB device [ 1282.298035][ T8470] usb 8-1: unable to read config index 0 descriptor/all [ 1282.309649][ T8470] usb 8-1: can't read configurations, error -110 [ 1282.488113][ T8470] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1285.427539][ T7601] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1285.744006][ T7601] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1285.826374][ T7601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.861148][ T7601] usb 9-1: Product: syz [ 1285.865655][ T7601] usb 9-1: Manufacturer: syz [ 1285.901141][ T7601] usb 9-1: SerialNumber: syz [ 1286.591842][ T7601] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1286.695760][ T7601] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1287.166768][ T7601] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1287.206007][ T7601] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1287.266145][ T7601] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1287.444758][ T7601] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1287.705652][ T7601] usb 9-1: USB disconnect, device number 27 [ 1288.704757][ T8470] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1288.913277][ T8470] usb 10-1: device descriptor read/64, error -71 [ 1289.224696][ T8470] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1289.445327][ T8470] usb 10-1: device descriptor read/64, error -71 [ 1289.555818][ T8470] usb usb10-port1: attempt power cycle [ 1289.777410][T12756] fuse: Unknown parameter 'grou00000000000000000000' [ 1289.964222][ T8470] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1290.019004][ T8470] usb 10-1: device descriptor read/8, error -71 [ 1290.304204][ T8470] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 1290.371418][ T8470] usb 10-1: device descriptor read/8, error -71 [ 1290.515088][ T8470] usb usb10-port1: unable to enumerate USB device [ 1291.246256][T12767] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 1292.893541][ T7601] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1293.233513][ T7601] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1293.262296][ T7601] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.331368][ T7601] usb 10-1: Product: syz [ 1293.342383][ T7601] usb 10-1: Manufacturer: syz [ 1293.362283][ T7601] usb 10-1: SerialNumber: syz [ 1293.464032][T12789] MPI: mpi too large (107144 bits) [ 1293.946170][ T7601] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1294.015138][ T7601] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1294.184829][T12794] fuse: Unknown parameter 'grou00000000000000000000' [ 1294.582708][ T7601] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1294.640336][ T7601] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1294.716701][ T7601] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1294.880757][ T7601] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1294.969338][ T7601] usb 10-1: USB disconnect, device number 31 [ 1295.941435][T11349] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1296.480890][ T8470] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1296.789658][ T8470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.846107][ T8470] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.890888][ T8470] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1296.946923][ T8470] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.040605][ T8470] usb 10-1: config 0 descriptor?? [ 1297.705022][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.762509][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.899206][ T8470] hid-led 0003:1D34:000A.0013: item fetching failed at offset 0/3 [ 1297.997522][ T8470] hid-led 0003:1D34:000A.0013: probe with driver hid-led failed with error -22 [ 1298.086356][ T8470] usb 10-1: USB disconnect, device number 32 [ 1299.147048][T12831] program syz.8.1257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1299.291210][ T8470] IPVS: starting estimator thread 0... [ 1299.389534][T12833] IPVS: using max 288 ests per chain, 14400 per kthread [ 1303.786284][T12851] fuse: Unknown parameter 'grou00000000000000000000' [ 1305.786141][ T7601] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1306.158443][ T7601] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1306.226074][ T7601] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.287532][ T7601] usb 8-1: Product: syz [ 1306.320873][ T7601] usb 8-1: Manufacturer: syz [ 1306.350975][ T7601] usb 8-1: SerialNumber: syz [ 1306.897759][ T7601] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1306.946201][ T7601] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1306.970352][ T7601] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1307.056808][ T7601] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1307.126616][ T7601] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1307.272761][ T7601] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1308.999319][ T7601] usb 8-1: USB disconnect, device number 5 [ 1309.511920][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.536370][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.332212][T12883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1311.353831][ T7601] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1311.565001][ T7601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.617903][ T7601] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.682378][ T7601] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1311.743475][ T7601] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.850201][ T7601] usb 8-1: config 0 descriptor?? [ 1312.530728][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.685639][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1312.854342][ T7601] hid-led 0003:1D34:000A.0014: item fetching failed at offset 0/3 [ 1312.940355][ T7601] hid-led 0003:1D34:000A.0014: probe with driver hid-led failed with error -22 [ 1313.100562][ T7601] usb 8-1: USB disconnect, device number 6 [ 1313.112687][ T8470] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 1313.358125][ T8470] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1313.442199][ T8470] usb 9-1: config 15 has an invalid interface number: 250 but max is 0 [ 1313.480266][ T8470] usb 9-1: config 15 has no interface number 0 [ 1313.511340][ T8470] usb 9-1: config 15 interface 250 has no altsetting 0 [ 1313.560779][ T8470] usb 9-1: string descriptor 0 read error: -22 [ 1313.599139][ T8470] usb 9-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 1313.672374][ T8470] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.895433][ T8470] go7007 9-1:15.250: The Lifeview TV Walker Ultra is not supported. Sorry! [ 1314.069313][ T8470] usb 9-1: USB disconnect, device number 28 [ 1315.713469][T12909] fuse: Unknown parameter 'group_i00000000000000000000' [ 1316.480072][T12914] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1273'. [ 1317.440642][ T8470] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1317.692226][ T8470] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1317.740775][ T8470] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.749141][ T8470] usb 10-1: Product: syz [ 1317.805788][ T8470] usb 10-1: Manufacturer: syz [ 1317.900475][ T8470] usb 10-1: SerialNumber: syz [ 1318.150150][T11349] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1318.563361][ T8470] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1318.656434][ T8470] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1318.773260][ T8470] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1318.833201][ T8470] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1318.920599][ T8470] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1319.059886][ T8470] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1320.662714][ T7601] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1320.701713][ T8470] usb 10-1: USB disconnect, device number 33 [ 1320.888896][ T7601] usb 4-1: Using ep0 maxpacket: 16 [ 1321.069080][ T7601] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1321.143607][ T7601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.239789][ T7601] usb 4-1: Product: syz [ 1321.244468][ T7601] usb 4-1: Manufacturer: syz [ 1321.270217][ T7601] usb 4-1: SerialNumber: syz [ 1321.341718][ T7601] usb 4-1: config 0 descriptor?? [ 1321.968630][ T7601] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1322.098201][ T7601] usb 4-1: USB disconnect, device number 14 [ 1322.118792][ T7602] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1322.379643][ T7602] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.449123][ T7602] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.481570][ T7602] usb 10-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1322.514156][ T7602] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.611326][ T7602] usb 10-1: config 0 descriptor?? [ 1323.265508][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.388941][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.518828][ T7602] hid-led 0003:1D34:000A.0015: item fetching failed at offset 0/3 [ 1323.653775][ T7602] hid-led 0003:1D34:000A.0015: probe with driver hid-led failed with error -22 [ 1323.837689][ T7602] usb 10-1: USB disconnect, device number 34 [ 1323.918794][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 1324.111524][T12959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1282'. [ 1324.649714][T12956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1324.898493][T12957] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1324.971410][T12959] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1328.027346][T12979] fuse: Unknown parameter 'group_i00000000000000000000' [ 1330.414480][ T8470] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1330.618087][ T8470] usb 8-1: Using ep0 maxpacket: 8 [ 1330.675044][ T8470] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1330.752181][ T8470] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1330.787885][ T8470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.815029][ T7602] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1330.832816][ T8470] usb 8-1: Product: syz [ 1330.858764][ T8470] usb 8-1: Manufacturer: syz [ 1330.885348][ T8470] usb 8-1: SerialNumber: syz [ 1330.940939][ T8470] usb 8-1: config 0 descriptor?? [ 1331.083912][ T7602] usb 9-1: Using ep0 maxpacket: 16 [ 1331.196240][ T7602] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1331.226020][ T8470] usb 8-1: USB disconnect, device number 7 [ 1331.249183][ T7602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.323950][ T7602] usb 9-1: Product: syz [ 1331.344820][ T7602] usb 9-1: Manufacturer: syz [ 1331.383620][ T7602] usb 9-1: SerialNumber: syz [ 1331.451704][ T7602] usb 9-1: config 0 descriptor?? [ 1331.819397][ T8470] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1332.018433][T12997] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1292'. [ 1332.028532][ T5780] Bluetooth: hci5: command 0x0406 tx timeout [ 1332.035412][ T8470] usb 8-1: Using ep0 maxpacket: 8 [ 1332.060717][ T8470] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1332.099598][ T8470] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1332.103513][ T7602] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1332.120541][ T8470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.120699][ T8470] usb 8-1: Product: syz [ 1332.120816][ T8470] usb 8-1: Manufacturer: syz [ 1332.120933][ T8470] usb 8-1: SerialNumber: syz [ 1332.166957][ T8470] usb 8-1: config 0 descriptor?? [ 1332.419357][ T8470] usb 8-1: USB disconnect, device number 8 [ 1332.438229][ T7602] usb 9-1: USB disconnect, device number 29 [ 1333.390454][T11349] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1336.970807][ T7602] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1337.362322][ T7602] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1337.400589][ T7602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.415220][ T7602] usb 8-1: Product: syz [ 1337.419646][ T7602] usb 8-1: Manufacturer: syz [ 1337.440411][ T7602] usb 8-1: SerialNumber: syz [ 1338.210809][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1338.270549][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1338.340491][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1338.470048][ T7602] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1340.117528][ T8470] usb 8-1: USB disconnect, device number 9 [ 1345.174702][ T7602] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1345.401326][ T7602] usb 4-1: Using ep0 maxpacket: 16 [ 1345.481794][ T7602] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1345.512880][ T7602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.542509][ T7602] usb 4-1: Product: syz [ 1345.566174][ T7602] usb 4-1: Manufacturer: syz [ 1345.588197][ T7602] usb 4-1: SerialNumber: syz [ 1345.627531][ T7602] usb 4-1: config 0 descriptor?? [ 1346.287463][T13080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1309'. [ 1346.519045][ T7602] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1346.639755][ T7602] usb 4-1: USB disconnect, device number 15 [ 1348.333625][ T8470] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1348.571343][ T8470] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1348.666440][ T8470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.718384][ T8470] usb 4-1: Product: syz [ 1348.723223][ T8470] usb 4-1: Manufacturer: syz [ 1348.785220][ T8470] usb 4-1: SerialNumber: syz [ 1350.056581][ T8470] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1350.132676][ T8470] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1350.179774][ T8470] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1350.330867][ T8470] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1350.534860][ T8470] usb 4-1: USB disconnect, device number 16 [ 1351.841686][T11349] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1352.735740][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1352.735844][ T29] audit: type=1326 audit(1772878833.198:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.8.1321" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6fdef6c code=0x0 [ 1356.450854][ T8470] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1356.700812][ T8470] usb 10-1: Using ep0 maxpacket: 16 [ 1356.815271][ T8470] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1356.866365][ T8470] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.938979][ T8470] usb 10-1: Product: syz [ 1356.957906][ T8470] usb 10-1: Manufacturer: syz [ 1356.978514][ T8470] usb 10-1: SerialNumber: syz [ 1357.038698][ T8470] usb 10-1: config 0 descriptor?? [ 1357.603182][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1325'. [ 1357.748743][ T8470] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1357.875071][ T8470] usb 10-1: USB disconnect, device number 35 [ 1359.250387][ T7602] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1359.584894][ T7602] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1359.627383][ T7602] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.675819][ T7602] usb 9-1: Product: syz [ 1359.702807][ T7602] usb 9-1: Manufacturer: syz [ 1359.707663][ T7602] usb 9-1: SerialNumber: syz [ 1360.980415][ T7602] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 1361.072308][ T7602] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1361.186903][ T7602] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1361.414116][ T7602] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1361.522235][ T7602] usb 9-1: USB disconnect, device number 30 [ 1361.738262][ T5829] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1361.998171][ T5829] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.050985][ T5829] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1362.088543][ T5829] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1362.185138][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.272869][ T5829] usb 10-1: config 0 descriptor?? [ 1363.556060][T13192] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 1363.608140][T13192] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1365.019260][ T5939] usb 10-1: USB disconnect, device number 36 [ 1367.275508][T13192] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1367.600404][T13192] usb 10-1: Using ep0 maxpacket: 16 [ 1367.670596][T13192] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1367.896651][T13192] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1367.971845][T13192] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.256406][T13192] usb 10-1: config 0 descriptor?? [ 1368.371337][T13192] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1370.323199][ T5095] usb 10-1: USB disconnect, device number 37 [ 1370.911352][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1370.918454][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.249426][ T5095] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1373.478592][ T5095] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1373.512370][ T5095] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.734336][T11349] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1373.752008][ T5095] usb 10-1: Product: syz [ 1373.801712][ T5095] usb 10-1: Manufacturer: syz [ 1373.807387][ T5095] usb 10-1: SerialNumber: syz [ 1374.171069][ T5095] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1374.256157][ T5095] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1374.361925][ T5095] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1374.517660][ T5095] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1376.084524][T13192] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1376.342326][ T5939] usb 10-1: USB disconnect, device number 38 [ 1376.410077][T13192] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.478083][T13192] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1376.532584][T13192] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1376.595636][T13192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.719448][T13192] usb 9-1: config 0 descriptor?? [ 1377.881455][ T7601] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1378.081440][ T7601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1378.139421][ T7601] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1378.190296][ T7601] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1378.225183][ T7601] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.284757][ T7601] usb 4-1: config 0 descriptor?? [ 1379.001937][T13285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.046261][T13285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.233675][ T7601] hid-led 0003:1D34:000A.0017: item fetching failed at offset 0/3 [ 1379.353505][ T7601] hid-led 0003:1D34:000A.0017: probe with driver hid-led failed with error -22 [ 1379.363719][ T5939] usb 9-1: USB disconnect, device number 31 [ 1379.507755][ T7601] usb 4-1: USB disconnect, device number 17 [ 1382.468765][ T7601] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1382.677627][ T7601] usb 8-1: Using ep0 maxpacket: 32 [ 1382.736910][ T7601] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1382.795183][ T7601] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1382.866812][ T7601] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1382.910227][ T7601] usb 8-1: Product: syz [ 1382.935562][ T7601] usb 8-1: Manufacturer: syz [ 1382.963135][ T7601] usb 8-1: SerialNumber: syz [ 1383.045814][ T7601] usb 8-1: config 0 descriptor?? [ 1383.090170][T13316] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1383.716504][ T24] usb 8-1: USB disconnect, device number 10 [ 1384.727185][ T7601] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1384.970121][ T7601] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1385.036699][ T7601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.072193][ T7601] usb 5-1: Product: syz [ 1385.078214][ T7601] usb 5-1: Manufacturer: syz [ 1385.083141][ T7601] usb 5-1: SerialNumber: syz [ 1385.596711][ T7601] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1385.646674][ T7601] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1385.657918][ T7601] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1385.680249][ T7601] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 1387.529737][ T7601] usb 5-1: USB disconnect, device number 23 [ 1388.165390][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1388.385015][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1388.453227][ T24] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1388.507677][ T24] usb 8-1: config 0 has no interface number 0 [ 1388.514051][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1388.599253][ T24] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1388.680036][ T24] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1388.725883][ T24] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1388.824888][ T24] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1388.885180][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.976798][ T24] usb 8-1: config 0 descriptor?? [ 1389.155082][ T24] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1389.474684][T13349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1389.575271][T13349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1389.664559][ T24] usb 8-1: USB disconnect, device number 11 [ 1389.730402][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1390.103996][ T5782] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1390.325227][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.364125][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.434231][ T5782] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1390.486206][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.561478][ T5782] usb 5-1: config 0 descriptor?? [ 1391.263935][T13357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.310983][T13357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.596778][ T5782] hid-led 0003:1D34:000A.0018: item fetching failed at offset 0/3 [ 1391.647432][ T5782] hid-led 0003:1D34:000A.0018: probe with driver hid-led failed with error -22 [ 1391.782254][ T5782] usb 5-1: USB disconnect, device number 24 [ 1392.264702][ T29] audit: type=1326 audit(1772878872.748:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1392.452266][ T29] audit: type=1326 audit(1772878872.748:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1392.685784][T13369] kAFS: unable to lookup cell '' [ 1392.691314][ T29] audit: type=1326 audit(1772878873.168:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1392.862844][ T29] audit: type=1326 audit(1772878873.228:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1393.013327][ T29] audit: type=1326 audit(1772878873.228:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1393.157219][ T29] audit: type=1326 audit(1772878873.308:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1393.431255][ T29] audit: type=1326 audit(1772878873.328:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1393.737627][ T29] audit: type=1326 audit(1772878873.348:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1393.959658][ T29] audit: type=1326 audit(1772878873.348:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1394.082224][ T29] audit: type=1326 audit(1772878873.348:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13363 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f15f6c code=0x7ffc0000 [ 1395.503812][ T5782] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1395.733919][ T5782] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1395.786297][ T5782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.834103][ T5782] usb 10-1: Product: syz [ 1395.857371][ T5782] usb 10-1: Manufacturer: syz [ 1395.884483][ T5782] usb 10-1: SerialNumber: syz [ 1396.175859][ T5782] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1396.220211][ T5782] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1396.285506][ T5782] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1396.678453][ T5782] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1398.763047][ T5095] usb 10-1: USB disconnect, device number 39 [ 1408.214798][ T5095] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1408.617869][ T5095] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1408.676289][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.716331][ T5095] usb 5-1: Product: syz [ 1408.720753][ T5095] usb 5-1: Manufacturer: syz [ 1408.777675][ T5095] usb 5-1: SerialNumber: syz [ 1408.842851][ T5095] usb 5-1: config 0 descriptor?? [ 1408.971427][ T5095] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1408.979846][T13464] fuse: Bad value for 'fd' [ 1409.084800][ T5095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1409.126745][ T5095] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1409.202854][ T5095] usb 5-1: media controller created [ 1409.315535][T13468] program syz.3.1392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.796210][ T5095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1410.523719][ T7545] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1410.733911][ T7545] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1410.754557][T13479] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 1410.788929][ T7545] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1410.823619][ T7545] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.824261][ T5095] DVB: Unable to find symbol mt352_attach() [ 1410.890444][ T7545] usb 8-1: config 0 descriptor?? [ 1411.496062][ T5095] DVB: Unable to find symbol nxt6000_attach() [ 1411.532260][ T5095] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1411.615105][ T5095] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 1411.700410][ T5095] dvb-usb: schedule remote query interval to 1000 msecs. [ 1411.730184][ T5095] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1411.773096][ T5095] dvb-usb: bulk message failed: -22 (7/0) [ 1411.779111][ T5095] dvb-usb: bulk message failed: -22 (7/0) [ 1411.850798][ T5095] usb 5-1: USB disconnect, device number 25 [ 1412.556765][ T5095] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1412.621856][T13457] udevd[13457]: setting mode of /dev/bus/usb/005/025 to 020664 failed: No such file or directory [ 1412.695247][T13457] udevd[13457]: setting owner of /dev/bus/usb/005/025 to uid=0, gid=0 failed: No such file or directory [ 1413.594929][ T5095] usb 8-1: USB disconnect, device number 12 [ 1415.772468][ T5095] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1416.082266][ T5095] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1416.132079][ T5095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.170864][ T5095] usb 4-1: Product: syz [ 1416.191133][ T5095] usb 4-1: Manufacturer: syz [ 1416.196081][ T5095] usb 4-1: SerialNumber: syz [ 1416.284124][ T5095] usb 4-1: config 0 descriptor?? [ 1416.373469][ T5095] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1416.418527][ T5095] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1416.484840][ T5095] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1416.542207][ T5095] usb 4-1: media controller created [ 1416.866829][ T5095] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1417.750589][ T5095] DVB: Unable to find symbol mt352_attach() [ 1418.394210][ T5095] DVB: Unable to find symbol nxt6000_attach() [ 1418.424785][ T5095] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1418.520412][ T5095] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 1418.623830][ T5095] dvb-usb: schedule remote query interval to 1000 msecs. [ 1418.670075][ T5095] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1418.709773][ T5095] dvb-usb: bulk message failed: -22 (7/0) [ 1418.716040][ T5095] dvb-usb: bulk message failed: -22 (7/0) [ 1418.767998][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1412'. [ 1418.791216][ T5095] usb 4-1: USB disconnect, device number 18 [ 1419.523928][ T5095] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1419.900098][T13548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1416'. [ 1422.087921][ T7545] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1422.382218][ T7545] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1422.415272][ T7545] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.452466][ T7545] usb 10-1: Product: syz [ 1422.467908][ T7545] usb 10-1: Manufacturer: syz [ 1422.499796][ T7545] usb 10-1: SerialNumber: syz [ 1422.562623][ T7545] usb 10-1: config 0 descriptor?? [ 1422.684020][ T7545] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1422.746879][ T7545] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1422.846938][ T7545] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1422.884099][ T7545] usb 10-1: media controller created [ 1423.160152][ T7545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1424.153851][ T7545] DVB: Unable to find symbol mt352_attach() [ 1424.800024][ T7545] DVB: Unable to find symbol nxt6000_attach() [ 1424.840542][ T7545] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1424.931363][ T7545] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input21 [ 1425.089170][ T7545] dvb-usb: schedule remote query interval to 1000 msecs. [ 1425.163213][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1425.194979][ T7545] dvb-usb: bulk message failed: -22 (7/0) [ 1425.266699][ T7545] dvb-usb: bulk message failed: -22 (7/0) [ 1425.377032][ T7545] usb 10-1: USB disconnect, device number 40 [ 1426.212432][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1432.335146][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.341761][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.002486][T13180] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1433.289303][T13180] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1433.328972][T13180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.378721][T13180] usb 9-1: Product: syz [ 1433.389246][T13180] usb 9-1: Manufacturer: syz [ 1433.407041][T13180] usb 9-1: SerialNumber: syz [ 1433.461489][T13180] usb 9-1: config 0 descriptor?? [ 1433.527586][T13180] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1433.574295][T13649] syzkaller0: entered promiscuous mode [ 1433.607791][T13180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1433.619944][T13649] syzkaller0: entered allmulticast mode [ 1433.676366][T13180] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1433.744748][T13180] usb 9-1: media controller created [ 1433.766606][T13649] tipc: Started in network mode [ 1433.802902][T13649] tipc: Node identity 3a85b4d95321, cluster identity 4711 [ 1433.877384][T13649] tipc: Enabled bearer , priority 0 [ 1433.937931][T13180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.023116][T13648] tipc: Resetting bearer [ 1434.087748][T13648] tipc: Disabling bearer [ 1434.831693][T13180] DVB: Unable to find symbol mt352_attach() [ 1435.452020][T13180] DVB: Unable to find symbol nxt6000_attach() [ 1435.458982][T13180] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1435.579523][T13180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input22 [ 1435.693215][T13180] dvb-usb: schedule remote query interval to 1000 msecs. [ 1435.700935][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1435.736071][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1435.777920][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1435.839772][T13180] usb 9-1: USB disconnect, device number 32 [ 1436.585094][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1436.617190][T13668] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1445'. [ 1437.301042][T13667] sctp: [Deprecated]: syz.8.1444 (pid 13667) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1437.301042][T13667] Use struct sctp_sack_info instead [ 1437.945441][T13678] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 1437.985270][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 1439.319396][ T7545] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1439.527791][ T7545] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1439.621203][ T7545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.652809][ T7545] usb 5-1: Product: syz [ 1439.677690][ T7545] usb 5-1: Manufacturer: syz [ 1439.699656][ T7545] usb 5-1: SerialNumber: syz [ 1439.742134][ T7545] usb 5-1: config 0 descriptor?? [ 1439.854472][ T7545] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1439.948129][ T7545] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1440.050989][ T7545] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1440.119263][ T7545] usb 5-1: media controller created [ 1440.653402][ T7545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1441.488311][ T7545] DVB: Unable to find symbol mt352_attach() [ 1442.023246][ T7545] DVB: Unable to find symbol nxt6000_attach() [ 1442.112357][ T7545] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1442.150570][ T7545] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 1442.248665][ T7545] dvb-usb: schedule remote query interval to 1000 msecs. [ 1442.255939][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1442.351185][ T7545] dvb-usb: bulk message failed: -22 (7/0) [ 1442.389814][ T7545] dvb-usb: bulk message failed: -22 (7/0) [ 1442.431907][ T7545] usb 5-1: USB disconnect, device number 26 [ 1443.460938][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1445.749231][T13714] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1458'. [ 1447.755851][T13723] tipc: Started in network mode [ 1447.760928][T13723] tipc: Node identity 3e7e85333c7d, cluster identity 4711 [ 1447.836544][T13723] tipc: Enabled bearer , priority 0 [ 1447.958562][T13724] syzkaller0: entered promiscuous mode [ 1447.964284][T13724] syzkaller0: entered allmulticast mode [ 1448.064456][T13722] tipc: Resetting bearer [ 1448.138851][T13722] tipc: Disabling bearer [ 1448.535359][T13180] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1448.839073][T13180] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1448.922496][T13180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.984594][T13180] usb 9-1: Product: syz [ 1448.989106][T13180] usb 9-1: Manufacturer: syz [ 1449.054633][T13180] usb 9-1: SerialNumber: syz [ 1449.118065][T13180] usb 9-1: config 0 descriptor?? [ 1449.151695][T13180] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1449.207559][T13180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1449.286422][T13180] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1449.331012][T13180] usb 9-1: media controller created [ 1449.632366][T13180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1449.734205][ T7602] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1449.993936][ T7602] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1450.037659][ T7602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.090587][ T7602] usb 8-1: Product: syz [ 1450.111059][ T7602] usb 8-1: Manufacturer: syz [ 1450.131769][ T7602] usb 8-1: SerialNumber: syz [ 1450.588087][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1450.632536][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 1450.666042][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1450.713994][T13180] DVB: Unable to find symbol mt352_attach() [ 1450.754109][ T7602] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1451.319722][T13180] DVB: Unable to find symbol nxt6000_attach() [ 1451.433410][T13180] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1451.521627][T13180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24 [ 1451.826899][T13180] dvb-usb: schedule remote query interval to 1000 msecs. [ 1451.910931][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1452.015690][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1452.119077][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1452.224664][T13180] usb 9-1: USB disconnect, device number 33 [ 1452.786877][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1452.880787][ T7545] usb 8-1: USB disconnect, device number 13 [ 1454.653518][T13758] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1470'. [ 1455.304774][T13767] tipc: Started in network mode [ 1455.322364][T13767] tipc: Node identity 6e28121b519c, cluster identity 4711 [ 1455.350472][T13767] tipc: Enabled bearer , priority 0 [ 1455.414351][T13771] syzkaller0: entered promiscuous mode [ 1455.420168][T13771] syzkaller0: entered allmulticast mode [ 1455.702702][T13765] tipc: Resetting bearer [ 1455.751358][ T7545] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1455.798924][T13765] tipc: Disabling bearer [ 1456.017007][ T7545] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1456.058848][ T7545] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.094190][ T7545] usb 9-1: Product: syz [ 1456.103584][ T7545] usb 9-1: Manufacturer: syz [ 1456.109206][ T7545] usb 9-1: SerialNumber: syz [ 1456.131309][ T7545] usb 9-1: config 0 descriptor?? [ 1456.166949][ T7545] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1456.239476][ T7545] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1456.293369][ T7545] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1456.351195][ T7545] usb 9-1: media controller created [ 1456.610245][ T7545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1457.610845][ T7545] DVB: Unable to find symbol mt352_attach() [ 1458.229972][ T7545] DVB: Unable to find symbol nxt6000_attach() [ 1458.236872][ T7545] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1458.560689][ T7545] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25 [ 1458.740921][ T7545] dvb-usb: schedule remote query interval to 1000 msecs. [ 1458.772853][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1458.809693][ T7545] dvb-usb: bulk message failed: -22 (7/0) [ 1458.829049][ T7545] dvb-usb: bulk message failed: -22 (7/0) [ 1458.931680][ T7545] usb 9-1: USB disconnect, device number 34 [ 1459.903536][ T7545] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1462.654289][T13815] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1485'. [ 1466.645894][ T5829] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1466.908082][ T5829] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1466.955627][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.963950][ T5829] usb 9-1: Product: syz [ 1466.999703][ T5829] usb 9-1: Manufacturer: syz [ 1467.004592][ T5829] usb 9-1: SerialNumber: syz [ 1467.058717][ T5829] usb 9-1: config 0 descriptor?? [ 1467.113846][ T5829] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1467.187165][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1467.227596][ T5829] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1467.275442][ T5829] usb 9-1: media controller created [ 1467.476808][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1468.291858][ T5829] DVB: Unable to find symbol mt352_attach() [ 1468.757466][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1495'. [ 1468.881620][ T5829] DVB: Unable to find symbol nxt6000_attach() [ 1468.907994][ T5829] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1469.003864][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26 [ 1469.093404][ T5829] dvb-usb: schedule remote query interval to 1000 msecs. [ 1469.137605][ T5829] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1469.188537][ T5829] dvb-usb: bulk message failed: -22 (7/0) [ 1469.219642][ T5829] dvb-usb: bulk message failed: -22 (7/0) [ 1469.319711][ T5829] usb 9-1: USB disconnect, device number 35 [ 1469.865048][T13854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1496'. [ 1470.055744][ T5829] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1475.571473][T13180] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1475.806757][T13180] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1475.852012][T13180] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.860477][T13180] usb 9-1: Product: syz [ 1475.913442][T13180] usb 9-1: Manufacturer: syz [ 1475.926593][T13180] usb 9-1: SerialNumber: syz [ 1475.993551][T13180] usb 9-1: config 0 descriptor?? [ 1476.069699][T13180] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1476.142407][T13180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1476.201404][T13180] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1476.300861][T13180] usb 9-1: media controller created [ 1476.724589][T13180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.832657][T13180] DVB: Unable to find symbol mt352_attach() [ 1478.400760][T13180] DVB: Unable to find symbol nxt6000_attach() [ 1478.407413][T13180] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1478.535435][T13180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input27 [ 1478.632188][T13180] dvb-usb: schedule remote query interval to 1000 msecs. [ 1478.679841][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1478.799951][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1478.806021][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1479.019945][T13180] usb 9-1: USB disconnect, device number 36 [ 1479.282052][T13912] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1511'. [ 1479.867893][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1482.460114][T13926] netlink: 'syz.8.1516': attribute type 1 has an invalid length. [ 1483.497679][T13180] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1483.800214][T13180] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1483.844948][T13180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.884553][T13180] usb 10-1: Product: syz [ 1483.912447][T13180] usb 10-1: Manufacturer: syz [ 1483.932270][T13180] usb 10-1: SerialNumber: syz [ 1483.971742][T13180] usb 10-1: config 0 descriptor?? [ 1484.067778][T13180] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1484.105468][T13943] fuse: Unknown parameter 'user_i00000000000000000000' [ 1484.134230][T13180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1484.257615][T13180] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1484.306734][T13180] usb 10-1: media controller created [ 1484.585523][T13180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.986778][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1524'. [ 1484.987590][T13945] netlink: 'syz.3.1523': attribute type 1 has an invalid length. [ 1485.095744][T13945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 1485.712366][T13180] DVB: Unable to find symbol mt352_attach() [ 1486.301330][T13180] DVB: Unable to find symbol nxt6000_attach() [ 1486.348059][T13180] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1486.521290][T13180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input28 [ 1486.753006][T13180] dvb-usb: schedule remote query interval to 1000 msecs. [ 1486.857152][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1486.971832][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1486.993189][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1487.126810][T13180] usb 10-1: USB disconnect, device number 41 [ 1487.169250][T13959] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1527'. [ 1488.058732][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1489.458246][T13972] netlink: 'syz.9.1532': attribute type 1 has an invalid length. [ 1490.595120][T13978] fuse: Unknown parameter 'user_i00000000000000000000' [ 1491.493336][T13180] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1491.840761][T13180] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1491.913291][T13180] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.943348][T13180] usb 10-1: Product: syz [ 1491.982537][T13180] usb 10-1: Manufacturer: syz [ 1491.988545][T13180] usb 10-1: SerialNumber: syz [ 1492.072489][T13180] usb 10-1: config 0 descriptor?? [ 1492.170081][T13180] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1492.360926][T13180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1492.471627][T13180] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1492.592657][T13180] usb 10-1: media controller created [ 1492.894768][T13180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1493.559505][T13991] netlink: 'syz.7.1537': attribute type 1 has an invalid length. [ 1493.736179][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1537'. [ 1493.746764][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1493.754678][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.939602][T13180] DVB: Unable to find symbol mt352_attach() [ 1494.464827][T13996] team_slave_0: entered promiscuous mode [ 1494.470963][T13996] team_slave_1: entered promiscuous mode [ 1494.532276][T13996] vlan2: entered promiscuous mode [ 1494.537695][T13996] team0: entered promiscuous mode [ 1494.616175][T13180] DVB: Unable to find symbol nxt6000_attach() [ 1494.630251][T13180] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1494.742988][T13180] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input29 [ 1494.844866][T13180] dvb-usb: schedule remote query interval to 1000 msecs. [ 1494.904287][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1494.953694][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1494.976535][ T7602] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1495.016903][T13180] dvb-usb: bulk message failed: -22 (7/0) [ 1495.152107][T13180] usb 10-1: USB disconnect, device number 42 [ 1495.163162][ T7602] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1496.073575][T13180] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1496.533210][T14001] fido_id[14001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1497.353643][T14010] netlink: 'syz.7.1543': attribute type 1 has an invalid length. [ 1498.628608][T14021] fuse: Unknown parameter 'user_id00000000000000000000' [ 1498.989862][ T5829] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1499.276982][ T5829] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1499.319553][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.328031][ T5829] usb 8-1: Product: syz [ 1499.389267][ T5829] usb 8-1: Manufacturer: syz [ 1499.395371][ T5829] usb 8-1: SerialNumber: syz [ 1499.469135][ T5829] usb 8-1: config 0 descriptor?? [ 1499.541985][T14027] binder: 14025:14027 ioctl c0306201 80000040 returned -11 [ 1499.561583][ T5829] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1499.631730][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1499.697269][ T5829] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1499.760492][ T5829] usb 8-1: media controller created [ 1500.002766][T14026] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 1500.131864][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1500.958978][ T7545] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 1501.078344][ T7545] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1501.190759][ T5829] DVB: Unable to find symbol mt352_attach() [ 1501.881199][ T5829] DVB: Unable to find symbol nxt6000_attach() [ 1501.920558][ T5829] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1501.991385][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 1502.149826][ T5829] dvb-usb: schedule remote query interval to 1000 msecs. [ 1502.221979][ T5829] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1502.324263][ T5829] dvb-usb: bulk message failed: -22 (7/0) [ 1502.365690][ T5829] dvb-usb: bulk message failed: -22 (7/0) [ 1502.433868][ T5829] usb 8-1: USB disconnect, device number 14 [ 1503.220008][ T5829] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1503.670739][T14060] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 1504.316937][ T5829] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1504.624104][ T5829] usb 9-1: Using ep0 maxpacket: 32 [ 1504.787796][ T5829] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1504.868027][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.914705][ T5829] usb 9-1: Product: syz [ 1504.936555][ T5829] usb 9-1: Manufacturer: syz [ 1504.951163][ T5829] usb 9-1: SerialNumber: syz [ 1505.000651][ T5829] usb 9-1: config 0 descriptor?? [ 1509.827594][T13180] usb 9-1: USB disconnect, device number 37 [ 1513.528920][T13192] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 1513.542938][ T5829] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1513.628053][T13192] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1513.824656][ T5829] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 1513.882051][ T5829] usb 9-1: config 0 has no interface number 0 [ 1513.931941][ T5829] usb 9-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 1513.989467][ T5829] usb 9-1: config 0 interface 120 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.062390][ T5829] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1514.141930][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.205077][ T5829] usb 9-1: config 0 descriptor?? [ 1514.426919][ T5829] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.120/input/input31 [ 1514.652468][ T5829] usb 9-1: USB disconnect, device number 38 [ 1515.054703][T14108] fido_id[14108]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1516.353458][T14126] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 1518.332487][T14133] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1574'. [ 1518.849552][T13180] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1518.870401][ T7602] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1519.109443][T13180] usb 9-1: device descriptor read/64, error -71 [ 1519.194335][ T7602] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1519.257497][ T7602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.296662][ T7602] usb 4-1: Product: syz [ 1519.345474][ T7602] usb 4-1: Manufacturer: syz [ 1519.381405][ T7602] usb 4-1: SerialNumber: syz [ 1519.435336][ T7602] usb 4-1: config 0 descriptor?? [ 1519.459220][T13180] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1519.502933][ T7602] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1519.622771][ T7602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1519.649378][T13180] usb 9-1: device descriptor read/64, error -71 [ 1519.792354][ T7602] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1519.804982][T13180] usb usb9-port1: attempt power cycle [ 1519.843138][T14141] dvb-usb: bulk message failed: -22 (7/0) [ 1519.859216][ T7602] usb 4-1: media controller created [ 1520.230465][T13180] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1520.271317][ T7602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1520.317878][T13180] usb 9-1: device descriptor read/8, error -71 [ 1520.694785][T13180] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1521.351274][ T5829] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1521.506861][ T5829] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1521.719601][ T7602] DVB: Unable to find symbol mt352_attach() [ 1522.771439][ T7602] DVB: Unable to find symbol nxt6000_attach() [ 1522.836914][T14150] fido_id[14150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1522.851523][ T7602] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1522.946748][ T7602] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 1523.066912][ T7602] dvb-usb: schedule remote query interval to 1000 msecs. [ 1523.159990][ T7602] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1523.268753][ T7602] dvb-usb: bulk message failed: -22 (7/0) [ 1523.307506][ T7602] dvb-usb: bulk message failed: -22 (7/0) [ 1523.465548][ T7602] usb 4-1: USB disconnect, device number 19 [ 1524.312739][ T7602] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1524.797443][ T7602] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1524.839298][T14163] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 1525.496037][ T7602] usb 4-1: device descriptor read/all, error -71 [ 1525.856879][T13180] usb 9-1: device descriptor read/8, error -110 [ 1526.057355][T13180] usb usb9-port1: unable to enumerate USB device [ 1529.274514][ T7602] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1529.697869][ T7602] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1529.718532][ T7602] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.769775][ T7602] usb 10-1: Product: syz [ 1529.787702][ T7602] usb 10-1: Manufacturer: syz [ 1529.837089][ T7602] usb 10-1: SerialNumber: syz [ 1529.877029][ T7602] usb 10-1: config 0 descriptor?? [ 1530.002660][ T7602] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1530.141463][ T7602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1530.203064][T14184] dvb-usb: bulk message failed: -22 (7/0) [ 1530.250510][ T7602] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1530.345172][ T7602] usb 10-1: media controller created [ 1530.821054][ T7602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1530.853009][T13192] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1530.936126][T13192] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1532.157336][ T7602] DVB: Unable to find symbol mt352_attach() [ 1532.237944][T14195] fido_id[14195]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1532.403953][T14201] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 1532.472832][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1596'. [ 1532.609050][T14206] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1596'. [ 1532.977019][ T7602] DVB: Unable to find symbol nxt6000_attach() [ 1533.042672][ T7602] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1533.130796][ T7602] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input33 [ 1533.241463][ T7602] dvb-usb: schedule remote query interval to 1000 msecs. [ 1533.313239][ T7602] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1533.372191][ T7602] dvb-usb: bulk message failed: -22 (7/0) [ 1533.378399][ T7602] dvb-usb: bulk message failed: -22 (7/0) [ 1533.532739][ T7602] usb 10-1: USB disconnect, device number 43 [ 1534.342129][ T7602] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1535.391533][ T7602] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1535.624725][ T7602] usb 8-1: Using ep0 maxpacket: 16 [ 1535.705121][ T7602] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1535.764650][ T7602] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.850078][ T7602] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1535.911415][ T7602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.986753][ T7602] usb 8-1: config 0 descriptor?? [ 1536.816093][ T7602] usbhid 8-1:0.0: can't add hid device: -71 [ 1536.862873][ T7602] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1536.969888][ T7602] usb 8-1: USB disconnect, device number 15 [ 1537.980074][T13192] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1538.250059][T13192] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1538.308667][T13192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.366933][T13192] usb 9-1: Product: syz [ 1538.392747][T13192] usb 9-1: Manufacturer: syz [ 1538.415964][T13192] usb 9-1: SerialNumber: syz [ 1538.468571][T13192] usb 9-1: config 0 descriptor?? [ 1538.555371][T13192] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1538.637618][T13192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1538.749882][T13192] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1538.773506][T14244] dvb-usb: bulk message failed: -22 (7/0) [ 1538.801748][T13192] usb 9-1: media controller created [ 1539.150202][T13192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1539.227279][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 1539.292780][T14252] netlink: 'syz.3.1609': attribute type 1 has an invalid length. [ 1539.340179][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1608'. [ 1540.026157][T13192] DVB: Unable to find symbol mt352_attach() [ 1540.419591][T13192] DVB: Unable to find symbol nxt6000_attach() [ 1540.462166][T13192] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1540.526452][T13192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34 [ 1540.627530][T13192] dvb-usb: schedule remote query interval to 1000 msecs. [ 1540.639667][T13192] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1540.652191][T13192] dvb-usb: bulk message failed: -22 (7/0) [ 1540.659638][T13192] dvb-usb: bulk message failed: -22 (7/0) [ 1540.750927][T13192] usb 9-1: USB disconnect, device number 43 [ 1541.516038][T14257] syzkaller0: entered promiscuous mode [ 1541.561798][T14257] syzkaller0: entered allmulticast mode [ 1541.584733][T13192] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1541.752357][T14110] udevd[14110]: setting owner of /dev/bus/usb/009/043 to uid=0, gid=0 failed: No such file or directory [ 1545.197398][ T5829] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1545.387066][ T5829] usb 10-1: Using ep0 maxpacket: 16 [ 1545.449490][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.486112][ T5829] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.521276][ T5829] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1545.566559][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.630000][ T5829] usb 10-1: config 0 descriptor?? [ 1545.972940][T14323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1620'. [ 1545.986704][T14324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 1546.027282][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 1546.249818][T14325] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1620'. [ 1546.296074][ T5829] usbhid 10-1:0.0: can't add hid device: -71 [ 1546.356457][ T5829] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1546.439246][ T5829] usb 10-1: USB disconnect, device number 44 [ 1546.698724][T14323] libceph: resolve '0..' (ret=-3): failed [ 1546.751083][T14327] netlink: 'syz.4.1622': attribute type 1 has an invalid length. [ 1548.013329][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1624'. [ 1548.934605][ T5829] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1549.125547][ T5829] usb 4-1: device descriptor read/64, error -71 [ 1549.386844][ T5829] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1549.596587][ T5829] usb 4-1: device descriptor read/64, error -71 [ 1549.745692][ T5829] usb usb4-port1: attempt power cycle [ 1550.123928][ T5829] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1550.207144][ T5829] usb 4-1: device descriptor read/8, error -71 [ 1550.522887][ T5829] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1550.595503][ T5829] usb 4-1: device descriptor read/8, error -71 [ 1550.724807][ T5829] usb usb4-port1: unable to enumerate USB device [ 1551.168177][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'. [ 1551.201662][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1633'. [ 1551.723243][ T5829] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1551.927979][ T5829] usb 8-1: Using ep0 maxpacket: 16 [ 1552.003505][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.052888][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.103313][ T5829] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1552.140876][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.186069][ T5829] usb 8-1: config 0 descriptor?? [ 1552.249772][T14366] netlink: 'syz.4.1635': attribute type 1 has an invalid length. [ 1552.863801][ T5829] usbhid 8-1:0.0: can't add hid device: -71 [ 1552.870604][ T5829] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1553.005585][ T5829] usb 8-1: USB disconnect, device number 16 [ 1554.233240][T14380] input: syz0 as /devices/virtual/input/input35 [ 1554.671587][ T7602] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1554.914454][ T7602] usb 4-1: Using ep0 maxpacket: 16 [ 1554.987108][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1555.100760][ T7602] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1555.142300][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.142602][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.244355][ T7602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.327823][ T7602] usb 4-1: Product: syz [ 1555.351331][ T7602] usb 4-1: Manufacturer: syz [ 1555.381044][ T7602] usb 4-1: SerialNumber: syz [ 1555.414294][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1645'. [ 1555.427387][ T7602] usb 4-1: config 0 descriptor?? [ 1555.470471][T14399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1645'. [ 1555.479517][ T7602] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1555.553290][ T7602] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1555.930975][ T5829] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1556.091440][ T5829] usb 10-1: device descriptor read/64, error -71 [ 1556.158164][ T7602] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1556.385665][ T5829] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1556.620039][ T5829] usb 10-1: device descriptor read/64, error -71 [ 1556.668034][ T7602] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1556.710364][ T7602] em28xx 4-1:0.0: board has no eeprom [ 1556.738226][ T5829] usb usb10-port1: attempt power cycle [ 1556.791141][T13180] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1557.031510][T13180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.079915][T13180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.352878][ T5829] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1557.422114][T13180] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1557.430919][ T5829] usb 10-1: device descriptor read/8, error -71 [ 1557.622999][T13180] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.715851][T13180] usb 8-1: config 0 descriptor?? [ 1557.740267][ T5829] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1557.797573][ T5829] usb 10-1: device descriptor read/8, error -71 [ 1557.892289][ T7602] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1557.922302][ T7602] em28xx 4-1:0.0: dvb set to bulk mode. [ 1557.960131][ T5939] em28xx 4-1:0.0: Binding DVB extension [ 1557.962817][ T5829] usb usb10-port1: unable to enumerate USB device [ 1558.069077][ T7602] usb 4-1: USB disconnect, device number 26 [ 1558.133890][ T7602] em28xx 4-1:0.0: Disconnecting em28xx [ 1558.305570][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.384013][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.558326][T13180] hid-led 0003:1D34:000A.001E: item fetching failed at offset 0/3 [ 1558.628598][ T5939] em28xx 4-1:0.0: Registering input extension [ 1558.680861][T13180] hid-led 0003:1D34:000A.001E: probe with driver hid-led failed with error -22 [ 1558.691581][ T7602] em28xx 4-1:0.0: Closing input extension [ 1558.731815][T13180] usb 8-1: USB disconnect, device number 17 [ 1558.881355][ T7602] em28xx 4-1:0.0: Freeing device [ 1559.624340][ T5829] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1559.829361][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 1559.872086][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.906122][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.979045][ T5829] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1560.046918][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.096865][ T5829] usb 4-1: config 0 descriptor?? [ 1560.847283][ T5829] usbhid 4-1:0.0: can't add hid device: -71 [ 1560.891107][ T5829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1560.969739][ T5829] usb 4-1: USB disconnect, device number 27 [ 1561.149647][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1658'. [ 1561.229171][T14439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1658'. [ 1564.027132][ T5829] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1564.211902][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.262866][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.307552][T14467] syzkaller0: entered promiscuous mode [ 1564.316799][ T5829] usb 8-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1564.319509][T14467] syzkaller0: entered allmulticast mode [ 1564.360506][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.403499][ T5829] usb 8-1: config 0 descriptor?? [ 1564.895354][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1670'. [ 1564.971981][T14470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1670'. [ 1565.101115][T14462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1565.156657][ T7602] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1565.175200][T14462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.367709][ T7602] usb 4-1: Using ep0 maxpacket: 16 [ 1565.392496][ T5829] hid-led 0003:1D34:000A.001F: item fetching failed at offset 0/3 [ 1565.438859][ T5829] hid-led 0003:1D34:000A.001F: probe with driver hid-led failed with error -22 [ 1565.440697][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.515190][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.561265][ T7602] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1565.562493][ T5829] usb 8-1: USB disconnect, device number 18 [ 1565.617127][ T7602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.662410][ T7602] usb 4-1: config 0 descriptor?? [ 1566.516062][ T7602] usbhid 4-1:0.0: can't add hid device: -71 [ 1566.523112][ T7602] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1566.610056][ T7602] usb 4-1: USB disconnect, device number 28 [ 1568.516803][T14509] fuse: Unknown parameter '0x0000000000000004' [ 1568.773971][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1683'. [ 1568.865339][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1683'. [ 1571.203542][ T7602] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1571.405170][ T7602] usb 5-1: Using ep0 maxpacket: 16 [ 1571.488121][ T7602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1571.533293][ T7602] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1571.583807][ T7602] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1571.628610][ T7602] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.745701][ T7602] usb 5-1: config 0 descriptor?? [ 1572.448488][ T7602] usbhid 5-1:0.0: can't add hid device: -71 [ 1572.465818][ T7602] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1572.492645][T14542] fuse: Unknown parameter '0x0000000000000004' [ 1572.554480][ T7602] usb 5-1: USB disconnect, device number 27 [ 1573.371470][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 1573.443360][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 1576.572781][T14577] fuse: Unknown parameter '0x0000000000000004' [ 1577.573820][T14591] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1711'. [ 1577.624491][T14591] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1711'. [ 1583.357476][ T5829] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1583.639171][ T5829] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1583.686144][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.727067][ T5829] usb 9-1: Product: syz [ 1583.752894][ T5829] usb 9-1: Manufacturer: syz [ 1583.801115][ T5829] usb 9-1: SerialNumber: syz [ 1584.315503][ T5829] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1584.371447][ T5829] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1584.876708][ T5829] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1584.955792][ T5829] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1585.039790][ T5829] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1585.169209][ T5829] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32 [ 1585.821458][ T5829] usb 9-1: USB disconnect, device number 44 [ 1588.500304][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 1590.044555][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 1590.318890][T14654] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1725'. [ 1593.792215][ T7602] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1594.034105][ T7602] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1594.072047][ T7602] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.136120][ T7602] usb 8-1: Product: syz [ 1594.140664][ T7602] usb 8-1: Manufacturer: syz [ 1594.181982][ T7602] usb 8-1: SerialNumber: syz [ 1594.740940][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1594.842258][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1595.358558][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1595.430022][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1595.500307][ T7602] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1595.687109][ T7602] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32 [ 1595.898447][ T7602] usb 8-1: USB disconnect, device number 19 [ 1596.295751][T14688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1735'. [ 1601.954966][T14734] MPI: mpi too large (107144 bits) [ 1602.705124][T14736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1748'. [ 1607.580786][T14769] MPI: mpi too large (107144 bits) [ 1608.067933][T14774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1760'. [ 1612.491880][T14818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1773'. [ 1612.515003][T14817] MPI: mpi too large (107144 bits) [ 1616.143215][T14850] binder: 14842:14850 ioctl ae41 0 returned -22 [ 1616.480757][ T7602] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1616.576074][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1616.595541][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.041926][T14856] MPI: mpi too large (107144 bits) [ 1617.089267][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.172092][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.250394][T13180] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1617.300366][ T7602] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1617.333302][ T7602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.448046][ T7602] usb 4-1: config 0 descriptor?? [ 1617.470949][T13180] usb 8-1: Using ep0 maxpacket: 32 [ 1617.574310][T13180] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1617.629233][T13180] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1617.696920][T13180] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1617.973335][T13180] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1618.019925][T13180] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.051779][T13180] usb 8-1: Product: syz [ 1618.077033][T13180] usb 8-1: Manufacturer: syz [ 1618.152019][T13180] usb 8-1: SerialNumber: syz [ 1618.208912][T13180] usb 8-1: config 0 descriptor?? [ 1619.029392][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1788'. [ 1619.111705][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.196785][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.252929][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.331727][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.359421][T13180] gs_usb 8-1:0.0: Couldn't send data format (err=-110) [ 1619.388801][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.413581][T13180] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -110 [ 1619.451566][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.490699][ T7602] holtek_kbd 0003:04D9:A055.0020: unknown main item tag 0x0 [ 1619.874973][ T7602] holtek_kbd 0003:04D9:A055.0020: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 1622.507727][ T5829] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1622.737910][ T5829] usb 9-1: Using ep0 maxpacket: 16 [ 1622.774958][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1622.830659][ T5829] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1622.874115][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.909366][ T5829] usb 9-1: Product: syz [ 1622.913802][ T5829] usb 9-1: Manufacturer: syz [ 1622.962996][ T5829] usb 9-1: SerialNumber: syz [ 1623.087544][ T5829] usb 9-1: config 0 descriptor?? [ 1623.180489][ T5829] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1623.224811][ T5829] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1623.843334][ T5829] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1624.354114][ T5829] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1624.396688][ T5829] em28xx 9-1:0.0: board has no eeprom [ 1624.733635][ T5829] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1624.771952][ T5829] em28xx 9-1:0.0: dvb set to bulk mode. [ 1624.806796][T13192] em28xx 9-1:0.0: Binding DVB extension [ 1624.857729][ T5829] usb 9-1: USB disconnect, device number 45 [ 1624.910239][ T5829] em28xx 9-1:0.0: Disconnecting em28xx [ 1625.533807][T13192] em28xx 9-1:0.0: Registering input extension [ 1625.577620][ T5829] em28xx 9-1:0.0: Closing input extension [ 1625.693340][ T5829] em28xx 9-1:0.0: Freeing device [ 1626.675954][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1798'. [ 1626.692537][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1798'. [ 1626.710248][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1798'. [ 1627.079435][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1799'. [ 1628.459120][ T5829] usb 4-1: USB disconnect, device number 29 [ 1629.074498][ T7602] usb 8-1: USB disconnect, device number 20 [ 1634.838505][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1811'. [ 1637.795242][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1823'. [ 1637.812553][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1823'. [ 1637.833422][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1823'. [ 1637.925160][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'. [ 1639.053733][T14992] fuse: Bad value for 'fd' [ 1644.978955][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1837'. [ 1650.549681][T15067] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1849'. [ 1651.389446][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 1651.970071][T15085] fuse: Bad value for 'fd' [ 1654.444590][T15111] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1864'. [ 1655.392977][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 1655.657388][T11349] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1658.614810][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1878'. [ 1658.784201][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 1659.849336][T13192] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1659.860430][T11349] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1660.054076][T13192] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1660.132396][T13192] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.167849][T13192] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1660.192284][T13192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.246686][T13192] usb 9-1: config 0 descriptor?? [ 1660.892325][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1660.941823][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.085500][T13192] hid-led 0003:1D34:000A.0021: item fetching failed at offset 0/3 [ 1661.139242][T13192] hid-led 0003:1D34:000A.0021: probe with driver hid-led failed with error -22 [ 1661.233061][T13192] usb 9-1: USB disconnect, device number 46 [ 1662.857563][T13180] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1663.137291][T13180] usb 4-1: Using ep0 maxpacket: 16 [ 1663.180631][T13180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1663.230394][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1894'. [ 1663.268857][T13180] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1663.284524][T13180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.293427][T13180] usb 4-1: Product: syz [ 1663.298225][T13180] usb 4-1: Manufacturer: syz [ 1663.303219][T13180] usb 4-1: SerialNumber: syz [ 1663.317221][T13180] usb 4-1: config 0 descriptor?? [ 1663.340322][T13180] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1663.350516][T13180] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1663.373159][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1894'. [ 1664.008292][T11349] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 1664.013489][T13180] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1664.278508][T15202] fuse: Bad value for 'fd' [ 1664.653361][T13180] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1664.686123][T13180] em28xx 4-1:0.0: board has no eeprom [ 1664.816608][T13180] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1664.848997][T13180] em28xx 4-1:0.0: dvb set to bulk mode. [ 1664.854968][ T7602] em28xx 4-1:0.0: Binding DVB extension [ 1664.937800][T13180] usb 4-1: USB disconnect, device number 30 [ 1664.969000][T13180] em28xx 4-1:0.0: Disconnecting em28xx [ 1665.390893][ T7602] em28xx 4-1:0.0: Registering input extension [ 1665.446575][T13180] em28xx 4-1:0.0: Closing input extension [ 1665.605110][T13180] em28xx 4-1:0.0: Freeing device [ 1667.249599][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 1667.525281][T13180] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1667.723824][T13180] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.844899][T13180] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.875313][T13180] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1667.936623][T13180] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.045314][T13180] usb 9-1: config 0 descriptor?? [ 1668.762242][T15217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1668.808647][T15217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.091989][T13180] hid-led 0003:1D34:000A.0022: item fetching failed at offset 0/3 [ 1669.148083][T13180] hid-led 0003:1D34:000A.0022: probe with driver hid-led failed with error -22 [ 1669.240305][T13180] usb 9-1: USB disconnect, device number 47 [ 1671.663956][T11349] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1671.753197][T13192] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1672.038251][T13192] usb 9-1: Using ep0 maxpacket: 16 [ 1672.096338][T13192] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1672.149787][T13192] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1672.210372][T13192] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.251000][T13192] usb 9-1: Product: syz [ 1672.275229][T13192] usb 9-1: Manufacturer: syz [ 1672.289619][T13192] usb 9-1: SerialNumber: syz [ 1672.357116][T13192] usb 9-1: config 0 descriptor?? [ 1672.435711][T13192] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1672.463770][T13192] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1673.104662][T13192] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1673.582805][T13192] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1673.591080][T13192] em28xx 9-1:0.0: board has no eeprom [ 1673.762267][T13192] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1673.800547][T13192] em28xx 9-1:0.0: dvb set to bulk mode. [ 1673.843721][ T5829] em28xx 9-1:0.0: Binding DVB extension [ 1673.935069][T13192] usb 9-1: USB disconnect, device number 48 [ 1674.044782][T13192] em28xx 9-1:0.0: Disconnecting em28xx [ 1674.140992][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1914'. [ 1674.639952][ T5829] em28xx 9-1:0.0: Registering input extension [ 1674.727074][T13192] em28xx 9-1:0.0: Closing input extension [ 1674.866077][T13192] em28xx 9-1:0.0: Freeing device [ 1675.342028][ T5829] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1675.564371][ T5829] usb 8-1: Using ep0 maxpacket: 8 [ 1675.589368][ T5829] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1675.657040][ T5829] usb 8-1: New USB device found, idVendor=0e41, idProduct=4250, bcdDevice= 0.40 [ 1675.698287][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.718933][ T5829] usb 8-1: Product: syz [ 1675.736096][ T5829] usb 8-1: Manufacturer: syz [ 1675.756111][ T5829] usb 8-1: SerialNumber: syz [ 1676.191144][T13180] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1676.667348][ T5829] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 1676.687907][T13180] usb 5-1: not running at top speed; connect to a high speed hub [ 1676.761789][T13180] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 55887, setting to 64 [ 1676.806642][T13180] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1677.050957][T13180] usb 5-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1677.081298][T13180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.155694][T13180] usb 5-1: Product: syz [ 1677.173687][T13180] usb 5-1: Manufacturer: syz [ 1677.207193][T13180] usb 5-1: SerialNumber: syz [ 1677.286419][T15264] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1677.512953][ T5829] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1677.564118][ T5829] snd_usb_pod 8-1:1.0: Line 6 BassPODxt found [ 1677.628445][ T5829] usb 8-1: selecting invalid altsetting 5 [ 1677.664417][ T5829] snd_usb_pod 8-1:1.0: set_interface failed [ 1677.840036][ T5829] snd_usb_pod 8-1:1.0: Line 6 BassPODxt now disconnected [ 1677.896687][ T5829] snd_usb_pod 8-1:1.0: probe with driver snd_usb_pod failed with error -22 [ 1677.982275][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1677.989197][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.107736][ T5829] snd_usb_pod 8-1:1.1: Line 6 BassPODxt found [ 1678.150672][ T5829] usb 8-1: selecting invalid altsetting 5 [ 1678.158239][ T5829] snd_usb_pod 8-1:1.1: set_interface failed [ 1678.167568][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 1678.228062][ T5829] snd_usb_pod 8-1:1.1: Line 6 BassPODxt now disconnected [ 1678.301886][ T5829] snd_usb_pod 8-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1678.391666][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 1678.592687][ T5829] snd_usb_pod 8-1:1.2: Line 6 BassPODxt found [ 1678.599018][ T5829] usb 8-1: selecting invalid altsetting 5 [ 1678.645548][ T5829] snd_usb_pod 8-1:1.2: set_interface failed [ 1678.688894][ T5829] snd_usb_pod 8-1:1.2: Line 6 BassPODxt now disconnected [ 1678.785756][ T5829] snd_usb_pod 8-1:1.2: probe with driver snd_usb_pod failed with error -22 [ 1678.891725][ T5829] usb 8-1: USB disconnect, device number 21 [ 1679.015567][T15281] netlink: 'syz.8.1924': attribute type 1 has an invalid length. [ 1679.465635][T14110] udevd[14110]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1681.308579][ T5829] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1681.573317][ T5829] usb 9-1: Using ep0 maxpacket: 16 [ 1681.612070][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1681.730821][ T5829] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1681.790710][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.865373][ T5829] usb 9-1: Product: syz [ 1681.888022][ T5829] usb 9-1: Manufacturer: syz [ 1681.892885][ T5829] usb 9-1: SerialNumber: syz [ 1682.016992][ T5829] usb 9-1: config 0 descriptor?? [ 1682.284717][ T5829] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1682.358869][ T5829] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1682.628230][T13180] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input40 [ 1682.725261][ T5117] bcm5974 5-1:1.0: could not read from device [ 1682.799251][ T5117] bcm5974 5-1:1.0: could not read from device [ 1682.835011][ T5829] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1682.978916][ T5117] bcm5974 5-1:1.0: could not read from device [ 1683.188027][ T5117] bcm5974 5-1:1.0: could not read from device [ 1683.370953][ T5829] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1683.447100][ T5829] em28xx 9-1:0.0: board has no eeprom [ 1683.597385][ T5829] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1683.633345][ T5829] em28xx 9-1:0.0: dvb set to bulk mode. [ 1683.678403][T13192] em28xx 9-1:0.0: Binding DVB extension [ 1683.840673][ T5829] usb 9-1: USB disconnect, device number 49 [ 1683.870070][ T5829] em28xx 9-1:0.0: Disconnecting em28xx [ 1684.279271][T14233] bcm5974 5-1:1.0: could not read from device [ 1684.455810][ T5117] bcm5974 5-1:1.0: could not read from device [ 1684.525460][ T5117] bcm5974 5-1:1.0: could not read from device [ 1684.638301][T13192] em28xx 9-1:0.0: Registering input extension [ 1684.666608][ T5829] em28xx 9-1:0.0: Closing input extension [ 1684.718651][T15305] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1684.910878][ T5829] em28xx 9-1:0.0: Freeing device [ 1684.920542][ T5117] bcm5974 5-1:1.0: could not read from device [ 1685.887374][T13180] usb 5-1: USB disconnect, device number 28 [ 1686.196936][T15312] random: crng reseeded on system resumption [ 1687.916634][T15324] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 1688.855058][T11349] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1688.884623][T13180] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1689.054534][T13180] usb 8-1: Using ep0 maxpacket: 16 [ 1689.113900][T13180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1689.289580][T13180] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1689.352752][T13180] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.379810][T13180] usb 8-1: Product: syz [ 1689.403683][T13180] usb 8-1: Manufacturer: syz [ 1689.432739][T13180] usb 8-1: SerialNumber: syz [ 1689.455648][T13180] usb 8-1: config 0 descriptor?? [ 1689.478243][T13180] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1689.516099][T13180] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1690.101255][T13180] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1690.241468][T15346] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1690.626453][T13180] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1690.663106][T13180] em28xx 8-1:0.0: board has no eeprom [ 1690.803848][T13180] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1690.813046][T13180] em28xx 8-1:0.0: dvb set to bulk mode. [ 1690.821939][ T7602] em28xx 8-1:0.0: Binding DVB extension [ 1690.922608][T13180] usb 8-1: USB disconnect, device number 22 [ 1690.982889][T13180] em28xx 8-1:0.0: Disconnecting em28xx [ 1691.431827][ T7602] em28xx 8-1:0.0: Registering input extension [ 1691.524710][T13180] em28xx 8-1:0.0: Closing input extension [ 1691.685323][T13180] em28xx 8-1:0.0: Freeing device [ 1693.543464][T15372] binder: 15369:15372 ioctl c018620c 800004c0 returned -1 [ 1695.270160][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 1695.330450][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 1696.182718][T15392] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1698.001944][T13180] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1698.219915][T13180] usb 8-1: Using ep0 maxpacket: 16 [ 1698.264827][T13180] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1698.325160][T13180] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1698.359652][T13180] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.390149][T13180] usb 8-1: Product: syz [ 1698.394568][T13180] usb 8-1: Manufacturer: syz [ 1698.441064][T13180] usb 8-1: SerialNumber: syz [ 1698.494732][T13180] usb 8-1: config 0 descriptor?? [ 1698.560791][T13180] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1698.635751][T13180] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1699.183921][T13180] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1699.644114][T13180] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1699.718956][T13180] em28xx 8-1:0.0: board has no eeprom [ 1699.889472][T13180] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1699.915323][T13180] em28xx 8-1:0.0: dvb set to bulk mode. [ 1699.946333][ T7602] em28xx 8-1:0.0: Binding DVB extension [ 1700.056544][T13180] usb 8-1: USB disconnect, device number 23 [ 1700.130142][T13180] em28xx 8-1:0.0: Disconnecting em28xx [ 1700.746389][ T7602] em28xx 8-1:0.0: Registering input extension [ 1700.816688][T13180] em28xx 8-1:0.0: Closing input extension [ 1700.994625][T13180] em28xx 8-1:0.0: Freeing device [ 1701.440587][T15409] netlink: 'syz.7.1960': attribute type 1 has an invalid length. [ 1704.536573][T13180] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1704.755156][T13180] usb 5-1: Using ep0 maxpacket: 8 [ 1704.847511][T15429] netlink: 'syz.9.1966': attribute type 1 has an invalid length. [ 1705.560055][T15432] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1705.754631][T11349] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1707.755896][T15447] netlink: 'syz.8.1971': attribute type 1 has an invalid length. [ 1709.320032][T15461] syzkaller0: entered promiscuous mode [ 1709.415139][T15461] syzkaller0: entered allmulticast mode [ 1709.848094][T13180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1709.866245][T13180] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 1709.902700][T13180] usb 5-1: chopping to 0 config(s) [ 1709.944844][T13180] usb 5-1: can't read configurations, error -32 [ 1710.183781][T13180] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1710.354038][T13180] usb 5-1: device descriptor read/64, error -32 [ 1710.489972][T13180] usb usb5-port1: attempt power cycle [ 1711.333423][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1975'. [ 1711.494601][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1975'. [ 1712.463213][T13192] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1712.675159][T13192] usb 8-1: Using ep0 maxpacket: 32 [ 1712.715242][T13192] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1712.757254][T13192] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 32 [ 1712.831327][T13192] usb 8-1: New USB device found, idVendor=0499, idProduct=1009, bcdDevice= 0.40 [ 1712.881603][T13192] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.916036][T13192] usb 8-1: Product: syz [ 1712.932343][T13192] usb 8-1: Manufacturer: syz [ 1712.942434][T13192] usb 8-1: SerialNumber: syz [ 1712.987819][T15471] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1713.318077][T13192] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1713.383789][T13192] usb 8-1: invalid MIDI in EP 0 [ 1714.307919][T13192] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1714.450451][T13192] usb 8-1: USB disconnect, device number 24 [ 1714.734558][T14232] udevd[14232]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1717.954898][T15486] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1718.479992][T13180] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1718.690001][T13180] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 1718.729643][T13180] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 4 [ 1718.777649][T13180] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 1718.878093][T13180] usb 4-1: string descriptor 0 read error: -22 [ 1718.907732][T13180] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40 [ 1718.937941][T13180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.976420][T15496] syzkaller0: entered promiscuous mode [ 1719.020016][T15496] syzkaller0: entered allmulticast mode [ 1719.130613][T13180] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1719.330639][T13180] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1719.733689][T13192] usb 4-1: USB disconnect, device number 31 [ 1720.962758][T11349] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1721.116408][T15510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.142271][T15510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.153704][T15510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.171765][T15510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1721.212695][T15510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1723.273724][T15510] Bluetooth: hci2: command tx timeout [ 1724.173458][T15509] chnl_net:caif_netlink_parms(): no params data found [ 1724.739146][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1998'. [ 1724.782202][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1998'. [ 1725.375686][T15510] Bluetooth: hci2: command tx timeout [ 1727.375506][T15509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1727.407102][T15509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1727.425180][T15510] Bluetooth: hci2: command tx timeout [ 1727.467238][T15509] bridge_slave_0: entered allmulticast mode [ 1727.519425][T15509] bridge_slave_0: entered promiscuous mode [ 1727.811285][T15509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1727.915562][T15509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.923503][T15509] bridge_slave_1: entered allmulticast mode [ 1728.029353][T15509] bridge_slave_1: entered promiscuous mode [ 1728.657138][T15509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.753903][T15509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1729.398760][T15509] team0: Port device team_slave_0 added [ 1729.514458][T15510] Bluetooth: hci2: command tx timeout [ 1729.628149][T15509] team0: Port device team_slave_1 added [ 1730.370342][T15509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.403917][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.533773][T15509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.646295][T15509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1730.683489][T15509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.833459][T15509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.179610][T15509] hsr_slave_0: entered promiscuous mode [ 1732.250296][T15509] hsr_slave_1: entered promiscuous mode [ 1732.290125][T15509] debugfs: 'hsr0' already exists in 'hsr' [ 1732.322744][T15509] Cannot create hsr debugfs directory [ 1733.774048][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2004'. [ 1733.791159][T15569] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2004'. [ 1733.966581][T15569] libceph: resolve '0..' (ret=-3): failed [ 1734.227735][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1734.509590][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 1735.496088][T15585] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1737.127195][T15509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1737.278469][T15509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1737.438579][T15509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1737.602432][T15509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1739.364957][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1739.372699][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.317861][T15509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1740.663703][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2013'. [ 1740.891464][T15509] 8021q: adding VLAN 0 to HW filter on device team0 [ 1741.129516][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1741.137017][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1741.169258][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2013'. [ 1741.565689][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1741.573298][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1746.604196][T15509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1746.749752][T15651] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1750.619431][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2026'. [ 1750.745316][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2027'. [ 1750.776860][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2027'. [ 1751.249631][ T107] bridge_slave_1: left allmulticast mode [ 1751.264013][T15692] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2026'. [ 1751.490936][ T107] bridge_slave_1: left promiscuous mode [ 1751.561338][ T107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.653331][ T107] bridge_slave_0: left allmulticast mode [ 1751.659334][ T107] bridge_slave_0: left promiscuous mode [ 1751.682413][ T107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.977681][ T107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1753.086287][ T107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1753.142484][ T107] bond0 (unregistering): Released all slaves [ 1753.883549][ T107] tipc: Left network mode [ 1754.046719][T15509] veth0_vlan: entered promiscuous mode [ 1754.817488][ T107] hsr_slave_0: left promiscuous mode [ 1754.911988][ T107] hsr_slave_1: left promiscuous mode [ 1754.948214][ T107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1755.079598][ T107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1756.682665][ T107] team0 (unregistering): Port device team_slave_1 removed [ 1756.798417][ T107] team0 (unregistering): Port device team_slave_0 removed [ 1758.572497][T15509] veth1_vlan: entered promiscuous mode [ 1758.668970][T15742] binder: BINDER_SET_CONTEXT_MGR already set [ 1758.675983][T15742] binder: 15739:15742 ioctl 4018620d 80000040 returned -16 [ 1758.743046][T15746] binder: 15739:15746 ioctl ae41 0 returned -22 [ 1759.219828][ T7602] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1759.574021][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.601616][T15509] veth0_macvtap: entered promiscuous mode [ 1759.618321][ T7602] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.713547][ T7602] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1759.761345][T15509] veth1_macvtap: entered promiscuous mode [ 1759.812573][ T7602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.943768][ T7602] usb 4-1: config 0 descriptor?? [ 1760.529719][T15509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1760.858906][T15509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.128032][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.224020][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.372221][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.508452][T14295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.279347][ T7602] usbhid 4-1:0.0: can't add hid device: -32 [ 1765.345675][ T7602] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1765.886605][T15784] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1767.836359][T15806] ======================================================= [ 1767.836359][T15806] WARNING: The mand mount option has been deprecated and [ 1767.836359][T15806] and is ignored by this kernel. Remove the mand [ 1767.836359][T15806] option from the mount to silence this warning. [ 1767.836359][T15806] ======================================================= [ 1769.470190][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2049'. [ 1770.034529][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2049'. [ 1770.935622][ T7602] usb 4-1: USB disconnect, device number 32 [ 1774.009715][T15851] tmpfs: Bad value for 'nr_blocks' [ 1774.036296][T15852] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1774.042081][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.191748][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.549135][T14288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.641490][T14288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.200278][ T7602] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1777.400125][ T7602] usb 4-1: Using ep0 maxpacket: 16 [ 1777.445718][ T7602] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1777.543465][ T7602] usb 4-1: New USB device found, idVendor=046d, idProduct=c08d, bcdDevice= 0.40 [ 1777.575258][ T7602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.651159][ T7602] usb 4-1: Product: syz [ 1777.655605][ T7602] usb 4-1: Manufacturer: syz [ 1777.713320][ T7602] usb 4-1: SerialNumber: syz [ 1778.368937][ T7602] usbhid 4-1:1.0: can't add hid device: -71 [ 1778.398932][ T7602] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1778.533275][ T7602] usb 4-1: USB disconnect, device number 33 [ 1778.669605][T15886] binder: BINDER_SET_CONTEXT_MGR already set [ 1778.677231][T15886] binder: 15881:15886 ioctl 4018620d 80000040 returned -16 [ 1778.931464][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1778.931554][ T29] audit: type=1804 audit(1772879259.601:308): pid=15887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2063" name="bus" dev="ramfs" ino=56155 res=1 errno=0 [ 1779.073945][ T29] audit: type=1804 audit(1772879259.651:309): pid=15888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2063" name="bus" dev="ramfs" ino=56155 res=1 errno=0 [ 1779.376359][T15886] binder: 15881:15886 ioctl ae41 0 returned -22 [ 1779.449107][ T7602] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1779.676481][ T7602] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.735222][ T7602] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.776118][ T7602] usb 9-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1779.843234][ T7602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.917061][ T7602] usb 9-1: config 0 descriptor?? [ 1781.621823][ T5829] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1781.857449][ T5829] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1781.899899][ T5829] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.981238][ T5829] usb 10-1: config 0 descriptor?? [ 1782.096693][ T5829] cp210x 10-1:0.0: cp210x converter detected [ 1782.573055][ T5829] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1782.616110][ T5829] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1782.696565][ T5829] cp210x 10-1:0.0: GPIO initialisation failed: -121 [ 1782.744396][ T5829] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1782.843275][ T5829] usb 10-1: USB disconnect, device number 49 [ 1782.970120][ T5829] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1783.054080][ T5829] cp210x 10-1:0.0: device disconnected [ 1785.127066][ T7602] usbhid 9-1:0.0: can't add hid device: -32 [ 1785.168325][ T7602] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1788.356766][T15957] random: crng reseeded on system resumption [ 1789.804334][ T7602] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1790.028005][ T7602] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1790.075191][ T7602] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.175980][ T7602] usb 8-1: config 0 descriptor?? [ 1790.201166][ T7602] cp210x 8-1:0.0: cp210x converter detected [ 1790.660508][ T7602] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1790.708902][ T7602] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1790.723564][ T7602] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 1790.807564][ T7602] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1790.914234][ T7602] usb 8-1: USB disconnect, device number 25 [ 1790.977221][ T5829] usb 9-1: USB disconnect, device number 50 [ 1791.085037][ T7602] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1791.160422][ T7602] cp210x 8-1:0.0: device disconnected [ 1794.225218][T16009] binder: BINDER_SET_CONTEXT_MGR already set [ 1794.233207][T16009] binder: 16005:16009 ioctl 4018620d 80000040 returned -16 [ 1794.529123][T16011] binder: 16005:16011 ioctl ae41 0 returned -22 [ 1794.921538][ T5829] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1795.357023][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.381151][ T7602] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1795.412619][ T5829] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.461634][ T5829] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1795.493930][ T5829] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.569789][ T5829] usb 8-1: config 0 descriptor?? [ 1795.680214][ T7602] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1795.714051][T13180] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1795.760101][ T7602] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.865370][ T7602] usb 10-1: config 0 descriptor?? [ 1795.965392][ T7602] cp210x 10-1:0.0: cp210x converter detected [ 1795.982600][T13180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1796.066205][T13180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1796.099038][T13180] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1796.181207][T13180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1796.381754][T13180] usb 6-1: config 0 descriptor?? [ 1796.533757][ T7602] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1796.652105][ T7602] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1796.699853][ T7602] cp210x 10-1:0.0: GPIO initialisation failed: -121 [ 1797.224418][T16020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1797.253264][ T7602] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1797.331085][T16020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1797.413971][ T7602] usb 10-1: USB disconnect, device number 50 [ 1797.564905][ T7602] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1797.672047][T13180] hid-led 0003:1D34:000A.0023: item fetching failed at offset 0/3 [ 1797.691351][ T7602] cp210x 10-1:0.0: device disconnected [ 1797.867903][T13180] hid-led 0003:1D34:000A.0023: probe with driver hid-led failed with error -22 [ 1798.061970][T13180] usb 6-1: USB disconnect, device number 3 [ 1798.674046][T13180] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1798.939451][T13180] usb 4-1: Using ep0 maxpacket: 16 [ 1798.977748][T13180] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1799.087332][T13180] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1799.173399][T13180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.239148][T13180] usb 4-1: Product: syz [ 1799.243664][T13180] usb 4-1: Manufacturer: syz [ 1799.248473][T13180] usb 4-1: SerialNumber: syz [ 1799.345332][T13180] usb 4-1: config 0 descriptor?? [ 1799.505056][T13180] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1799.580659][T13180] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1800.176432][T13180] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1800.782529][T13180] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1800.783725][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1800.798397][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.893339][T13180] em28xx 4-1:0.0: board has no eeprom [ 1800.913819][ T5829] usbhid 8-1:0.0: can't add hid device: -32 [ 1800.928989][ T5829] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 1801.088761][T13180] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1801.142008][T13180] em28xx 4-1:0.0: dvb set to bulk mode. [ 1801.163633][ T7602] em28xx 4-1:0.0: Binding DVB extension [ 1801.329442][T13180] usb 4-1: USB disconnect, device number 34 [ 1801.337493][T13180] em28xx 4-1:0.0: Disconnecting em28xx [ 1801.941286][ T7602] em28xx 4-1:0.0: Registering input extension [ 1802.001752][T13180] em28xx 4-1:0.0: Closing input extension [ 1802.237061][T13180] em28xx 4-1:0.0: Freeing device [ 1802.481893][T16051] ------------[ cut here ]------------ [ 1802.488114][T16051] ===================================================== [ 1802.496074][T16051] BUG: KMSAN: uninit-value in vsnprintf+0x15be/0x1b00 [ 1802.503220][T16051] vsnprintf+0x15be/0x1b00 [ 1802.507973][T16051] vprintk_store+0x350/0x1550 [ 1802.513143][T16051] vprintk_emit+0x2c8/0xba0 [ 1802.517892][T16051] vprintk_default+0x3f/0x50 [ 1802.522797][T16051] vprintk+0x36/0x50 [ 1802.526868][T16051] __report_bug+0xa10/0xe00 [ 1802.531716][T16051] report_bug_entry+0x17c/0x220 [ 1802.536786][T16051] handle_bug+0xe5/0x230 [ 1802.541366][T16051] exc_invalid_op+0x1f/0x50 [ 1802.546093][T16051] asm_exc_invalid_op+0x1f/0x30 [ 1802.551449][T16051] reg_bounds_sanity_check+0x571/0x14e0 [ 1802.557388][T16051] reg_set_min_max+0x2d8/0x450 [ 1802.562477][T16051] check_cond_jmp_op+0x3bed/0x5370 [ 1802.567821][T16051] do_check+0xc7e8/0x1add0 [ 1802.572613][T16051] do_check_common+0x2705/0x4270 [ 1802.577951][T16051] bpf_check+0x1f159/0x27e90 [ 1802.582763][T16051] bpf_prog_load+0x2b41/0x3140 [ 1802.588154][T16051] __sys_bpf+0x8e0/0xee0 [ 1802.592567][T16051] __ia32_sys_bpf+0xa4/0xf0 [ 1802.597227][T16051] ia32_sys_call+0x33e7/0x4360 [ 1802.602234][T16051] __do_fast_syscall_32+0x17f/0x3f0 [ 1802.607717][T16051] do_fast_syscall_32+0x37/0x80 [ 1802.612745][T16051] do_SYSENTER_32+0x1f/0x30 [ 1802.617525][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1802.624063][T16051] [ 1802.626475][T16051] Uninit was stored to memory at: [ 1802.631753][T16051] vsnprintf+0x15b7/0x1b00 [ 1802.636443][T16051] vprintk_store+0x350/0x1550 [ 1802.641342][T16051] vprintk_emit+0x2c8/0xba0 [ 1802.646062][T16051] vprintk_default+0x3f/0x50 [ 1802.650877][T16051] vprintk+0x36/0x50 [ 1802.655098][T16051] __report_bug+0xa10/0xe00 [ 1802.660033][T16051] report_bug_entry+0x17c/0x220 [ 1802.665134][T16051] handle_bug+0xe5/0x230 [ 1802.669654][T16051] exc_invalid_op+0x1f/0x50 [ 1802.674580][T16051] asm_exc_invalid_op+0x1f/0x30 [ 1802.679593][T16051] [ 1802.681997][T16051] Local variable pflags created at: [ 1802.687374][T16051] try_charge_memcg+0x63/0x1c20 [ 1802.692512][T16051] obj_cgroup_charge_pages+0x69/0x330 [ 1802.698082][T16051] [ 1802.700593][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.9.2111 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.711753][T16051] Tainted: [L]=SOFTLOCKUP [ 1802.716179][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1802.726465][T16051] ===================================================== [ 1802.733510][T16051] Disabling lock debugging due to kernel taint [ 1802.740026][T16051] Kernel panic - not syncing: kmsan.panic set ... [ 1802.746845][T16051] CPU: 0 UID: 0 PID: 16051 Comm: syz.9.2111 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1802.758018][T16051] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1802.763753][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1802.774052][T16051] Call Trace: [ 1802.777432][T16051] [ 1802.780481][T16051] __dump_stack+0x26/0x30 [ 1802.785068][T16051] dump_stack_lvl+0x50/0x1c0 [ 1802.789855][T16051] ? dump_stack+0x12/0x25 [ 1802.794416][T16051] dump_stack+0x1e/0x25 [ 1802.798770][T16051] vpanic+0x7b4/0x1430 [ 1802.803167][T16051] panic+0x15d/0x160 [ 1802.807320][T16051] kmsan_report+0x31a/0x320 [ 1802.812222][T16051] ? __msan_warning+0x1b/0x30 [ 1802.817124][T16051] ? vsnprintf+0x15be/0x1b00 [ 1802.822005][T16051] ? vprintk_store+0x350/0x1550 [ 1802.827082][T16051] ? vprintk_emit+0x2c8/0xba0 [ 1802.831982][T16051] ? vprintk_default+0x3f/0x50 [ 1802.837060][T16051] ? vprintk+0x36/0x50 [ 1802.841305][T16051] ? __report_bug+0xa10/0xe00 [ 1802.846171][T16051] ? report_bug_entry+0x17c/0x220 [ 1802.851628][T16051] ? handle_bug+0xe5/0x230 [ 1802.856249][T16051] ? exc_invalid_op+0x1f/0x50 [ 1802.861213][T16051] ? asm_exc_invalid_op+0x1f/0x30 [ 1802.866501][T16051] ? reg_bounds_sanity_check+0x571/0x14e0 [ 1802.872447][T16051] ? reg_set_min_max+0x2d8/0x450 [ 1802.877597][T16051] ? check_cond_jmp_op+0x3bed/0x5370 [ 1802.883095][T16051] ? do_check+0xc7e8/0x1add0 [ 1802.887878][T16051] ? do_check_common+0x2705/0x4270 [ 1802.893229][T16051] ? bpf_check+0x1f159/0x27e90 [ 1802.898268][T16051] ? bpf_prog_load+0x2b41/0x3140 [ 1802.903418][T16051] ? __sys_bpf+0x8e0/0xee0 [ 1802.908048][T16051] ? __ia32_sys_bpf+0xa4/0xf0 [ 1802.912912][T16051] ? ia32_sys_call+0x33e7/0x4360 [ 1802.918020][T16051] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1802.923619][T16051] ? do_fast_syscall_32+0x37/0x80 [ 1802.928835][T16051] ? do_SYSENTER_32+0x1f/0x30 [ 1802.933687][T16051] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1802.940415][T16051] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1802.947327][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1802.953545][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1802.958931][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1802.965022][T16051] ? format_decode+0xce3/0x10f0 [ 1802.970128][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1802.975680][T16051] __msan_warning+0x1b/0x30 [ 1802.980438][T16051] vsnprintf+0x15be/0x1b00 [ 1802.985141][T16051] vprintk_store+0x350/0x1550 [ 1802.990255][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1802.996468][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.001979][T16051] vprintk_emit+0x2c8/0xba0 [ 1803.006766][T16051] vprintk_default+0x3f/0x50 [ 1803.011709][T16051] vprintk+0x36/0x50 [ 1803.015906][T16051] ? reg_bounds_sanity_check+0x1d7/0x14e0 [ 1803.021865][T16051] __report_bug+0xa10/0xe00 [ 1803.026593][T16051] ? reg_bounds_sanity_check+0x1d7/0x14e0 [ 1803.032639][T16051] ? reg_bounds_sanity_check+0x1d7/0x14e0 [ 1803.038606][T16051] report_bug_entry+0x17c/0x220 [ 1803.043644][T16051] ? reg_bounds_sanity_check+0x576/0x14e0 [ 1803.049595][T16051] ? reg_bounds_sanity_check+0x571/0x14e0 [ 1803.055713][T16051] handle_bug+0xe5/0x230 [ 1803.060177][T16051] exc_invalid_op+0x1f/0x50 [ 1803.065362][T16051] asm_exc_invalid_op+0x1f/0x30 [ 1803.070428][T16051] RIP: 0010:reg_bounds_sanity_check+0x571/0x14e0 [ 1803.077057][T16051] Code: ff b5 d8 fe ff ff ff b5 d0 fe ff ff ff b5 c8 fe ff ff ff b5 c0 fe ff ff ff b5 b8 fe ff ff ff b5 b0 fe ff ff ff b5 a8 fe ff ff <67> 48 0f b9 3a 48 83 c4 38 48 8b bd 98 fe ff ff 48 8b 07 48 89 85 [ 1803.096973][T16051] RSP: 0018:ffff88810a002ea0 EFLAGS: 00010246 [ 1803.103236][T16051] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00000000ffffdfcd [ 1803.111634][T16051] RDX: ffffffff92473d15 RSI: ffffffff922d2750 RDI: ffffffff92f41fe0 [ 1803.120064][T16051] RBP: ffff88810a003050 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 1803.128302][T16051] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1803.136459][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1803.144703][T16051] reg_set_min_max+0x2d8/0x450 [ 1803.149708][T16051] check_cond_jmp_op+0x3bed/0x5370 [ 1803.155119][T16051] do_check+0xc7e8/0x1add0 [ 1803.159764][T16051] ? do_fast_syscall_32+0x37/0x80 [ 1803.165244][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.170667][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1803.176737][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.182247][T16051] do_check_common+0x2705/0x4270 [ 1803.187492][T16051] bpf_check+0x1f159/0x27e90 [ 1803.192465][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1803.198647][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1803.204843][T16051] ? kmsan_get_metadata+0x146/0x160 [ 1803.210623][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.216023][T16051] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1803.222682][T16051] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1803.228988][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.234365][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1803.240513][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.245875][T16051] ? strncpy_from_user+0xe1/0x4b0 [ 1803.251414][T16051] ? filter_irq_stacks+0x49/0x190 [ 1803.256848][T16051] ? stack_depot_save_flags+0x35/0x790 [ 1803.262536][T16051] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1803.269132][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.274521][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.279978][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.285485][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.290989][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1803.297293][T16051] ? kmsan_get_metadata+0xf1/0x160 [ 1803.302682][T16051] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1803.309225][T16051] bpf_prog_load+0x2b41/0x3140 [ 1803.314459][T16051] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1803.321275][T16051] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1803.327659][T16051] ? security_bpf+0x88/0x5f0 [ 1803.332853][T16051] ? _copy_from_user+0xcb/0x100 [ 1803.338206][T16051] __sys_bpf+0x8e0/0xee0 [ 1803.342731][T16051] __ia32_sys_bpf+0xa4/0xf0 [ 1803.347464][T16051] ia32_sys_call+0x33e7/0x4360 [ 1803.352412][T16051] __do_fast_syscall_32+0x17f/0x3f0 [ 1803.357827][T16051] do_fast_syscall_32+0x37/0x80 [ 1803.362971][T16051] do_SYSENTER_32+0x1f/0x30 [ 1803.367653][T16051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1803.374209][T16051] RIP: 0023:0xf7f62f6c [ 1803.378844][T16051] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1803.398728][T16051] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1803.407514][T16051] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800054c0 [ 1803.415721][T16051] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1803.423826][T16051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1803.432106][T16051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1803.440315][T16051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1803.448653][T16051] [ 1803.452390][T16051] Kernel Offset: disabled [ 1803.456784][T16051] Rebooting in 86400 seconds..