last executing test programs: 16m45.745685248s ago: executing program 32 (id=132): ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f00000001c0)=[{0x6, 0x1}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x8, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003}, 0x50) syz_genetlink_get_family_id$devlink(0x0, r4) socket$nl_netfilter(0x10, 0x3, 0xc) 16m35.620753s ago: executing program 5 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d90914aae761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469fb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cc28e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x2, 0xb, 0x8000000000fffc, 0x2, 0x1, 0x386, 0xffffffff, 0x120, 0x2000, 0xa8, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x40084d0c, 0x0) 16m33.196572712s ago: executing program 5 (id=182): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x4008800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r1, 0x0, 0x0) 16m30.658486451s ago: executing program 5 (id=189): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r4, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x2000040) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 16m28.672034063s ago: executing program 5 (id=194): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socket$igmp6(0xa, 0x3, 0x2) 16m27.480465343s ago: executing program 5 (id=199): socket$inet6(0xa, 0x1000080002, 0x100000000000088) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000040)=0x8f00) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008080, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x434000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 16m21.132117513s ago: executing program 5 (id=206): socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x20000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x200, 0xe}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) pipe2$9p(&(0x7f0000000440), 0x10880) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file2\x00', &(0x7f0000000400), 0x80, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) 16m5.926068806s ago: executing program 33 (id=206): socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x20000000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x200, 0xe}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) pipe2$9p(&(0x7f0000000440), 0x10880) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file2\x00', &(0x7f0000000400), 0x80, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) 12m41.04454496s ago: executing program 1 (id=489): syz_emit_ethernet(0xfc0, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "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"}}}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan1\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x7}, 0x4008000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x161000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 12m38.749793171s ago: executing program 1 (id=494): r0 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setuid(0xee01) ioctl$VT_DISALLOCATE(r1, 0x5608) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x8000, 0x0) r2 = fsmount(r0, 0x0, 0x8) r3 = openat$cgroup(r2, 0x0, 0x200002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12m37.954659329s ago: executing program 1 (id=495): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x200, 0xe}, 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) read$FUSE(0xffffffffffffffff, &(0x7f00000011c0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000300)='./file0/file2\x00', &(0x7f0000000400), 0x80, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) 12m36.707826797s ago: executing program 1 (id=498): r0 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) setuid(0xee01) ioctl$VT_DISALLOCATE(r1, 0x5608) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x8000, 0x0) r2 = fsmount(r0, 0x0, 0x8) r3 = openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8) openat$cgroup_ro(r3, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 12m32.500937032s ago: executing program 1 (id=503): socket$inet6(0xa, 0x1000080002, 0x100000000000088) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000040)=0x8f00) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008080, &(0x7f0000000180)={0xa, 0x4e23, 0xcc08, @mcast1}, 0x1c) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x434000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002000200000061bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf00000000000000006409f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 12m29.113396103s ago: executing program 1 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r4, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000040) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 12m13.507051617s ago: executing program 34 (id=506): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r4, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x2000040) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2m7.454647946s ago: executing program 7 (id=1432): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) 2m7.073247456s ago: executing program 7 (id=1433): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_control_io$uac1(r0, 0x0, 0x0) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m3.086883743s ago: executing program 7 (id=1442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a050000000000000000000700000a0900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021900000000c0a01"], 0x114}}, 0x0) 2m2.405699777s ago: executing program 7 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 2m1.961016671s ago: executing program 7 (id=1445): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x1ff) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xfffffffa, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x10, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80e, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket(0x15, 0x5, 0x0) bind$l2tp6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r4, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 2m0.374838619s ago: executing program 7 (id=1452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', 'KZ\'\a', "a1090054c94c4aff"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x15, 0x3178, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0xc041) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m45.07966156s ago: executing program 35 (id=1452): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', 'KZ\'\a', "a1090054c94c4aff"}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x15, 0x3178, 0x1}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0xc041) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1m26.306847457s ago: executing program 9 (id=1485): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r3) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x10, 0x3, 0x0) sendto$inet(r1, &(0x7f0000000080)="6005768efd3d62dbea33f1c19d18040a6504acb649def0bbe8cd823efc4f57fb96890f15fb9018", 0x27, 0x40, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, r5, 0x3, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) 1m25.766608976s ago: executing program 9 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) 1m10.476618333s ago: executing program 36 (id=1530): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) 25.796383814s ago: executing program 6 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 19.889974488s ago: executing program 6 (id=1677): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000180)=0x6f) r8 = dup2(r7, r7) read$FUSE(r8, &(0x7f00000063c0)={0x2020}, 0x2020) 15.474789415s ago: executing program 6 (id=1688): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13.047334451s ago: executing program 0 (id=1693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@remote}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0xbe9}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r3, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r4, 0x201, &(0x7f0000000080)={0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 11.810553994s ago: executing program 3 (id=1697): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 11.363153948s ago: executing program 3 (id=1698): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x1ff) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xfffffffa, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x1, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x10, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80e, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x4, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0xfffffc98}]) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket(0x15, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff004) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11.203989431s ago: executing program 0 (id=1699): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 11.038869706s ago: executing program 6 (id=1701): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.722457966s ago: executing program 0 (id=1702): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$zero(0xffffff9c, 0x0, 0x480101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 9.770231874s ago: executing program 4 (id=1703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.627936924s ago: executing program 3 (id=1704): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) getpgid(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xa0, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}, 0xf}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x800, @mcast1}, @in6={0xa, 0x4e23, 0x6, @empty, 0x1}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x10001}]}, &(0x7f0000000200)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x600) syz_clone(0x10820000, &(0x7f0000000280)="a20c54353a2a9b4205d1d1acd1638973aa57b6c72ab9edba61e1fbd9cccd496f8300aa046dfde5f15f6cb472d99c37120d9696a1d7e8bc6df9f8744e394fed51ec6a525830ad64c11183df3c7a", 0x4d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 9.414976773s ago: executing program 4 (id=1705): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = dup2(r1, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x8}) 8.332462668s ago: executing program 2 (id=1707): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4}) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @remote}, 0x14) r7 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) preadv(r7, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640), 0x0, 0x0) ioctl$KDENABIO(r7, 0x4b36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) 8.010094548s ago: executing program 0 (id=1708): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4}) fcntl$lock(r1, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x8, 0x6, @remote}, 0x14) r7 = openat$procfs(0xffffff9c, &(0x7f0000001640)='/proc/meminfo\x00', 0x0, 0x0) preadv(r7, &(0x7f0000003240)=[{0x0}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x2, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000640), 0x0, 0x0) ioctl$KDENABIO(r7, 0x4b36) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) 7.8093727s ago: executing program 6 (id=1709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) r4 = userfaultfd(0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) 7.243363817s ago: executing program 4 (id=1710): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000300)={0xfffc, 0xc, 0x2, 0x2000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) 7.035910168s ago: executing program 3 (id=1711): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) 6.322260536s ago: executing program 2 (id=1713): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x7, 0x34fffffd) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="c4030000", @ANYRES16=r5, @ANYBLOB="010026bd7000fbdb09000000000000000300cf7a6173ed1fc5f6682f86f629bd6d03635b57a1e01c75b45fa46861f9353ca28844badfe37dde865d0403ff7e901b5afbd43d39dda886ca8277263a89e13eb71be90bab212f27c416de1cd227c923400e466083d586963aa646af4c367ab32998afbbe63abaff8f01fddfbe18e677e0e0cdb2f433987e4a6e226c7b53ad342b6d5590044e400e537ec7627c2acda599ba3696699ec8e2e092d8", @ANYRES32=0x0, @ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x54}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@fd={0x4, 0x1, 0x4, 0x4010, 0x8, {0x0, 0xea60}, {0x4, 0x8, 0x0, 0x6, 0x0, 0x3, "d7000239"}, 0x3, 0x4, {}, 0x5, 0x0, r2}) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000100)=0x80, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020301010000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, 0x2, 0x3, 0xa01, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24020000}, 0x40000c0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000140)=0x800, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "5c888596a7776a389ac2ea21d00764a17a73a27a4525d641a8f00302bede855f", "f4ed38bb9511e8c874b4607d81a785604182f7466d190929c3af91b0895c76ef", "b03008606461cc0d6e0bbd73506cdd5b87733deb86d4a6ad26ed7777789bb5c0", "6e17e0e332771caff828fb7bdc2a3f20ad0d986e623ec04440432a4f9f14b32c", "90f26a2be402aa371e6b6fb7ed5d133a1676f722dbb6eae047fd008a86abd598", "8611e083ed2bcfa5a00b8bee", 0x2, 0xa6e9, 0x6, 0x5, 0xfffffffa}}) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, r11, 0x0, r9}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) 5.81067794s ago: executing program 0 (id=1714): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x8) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$zero(0xffffff9c, 0x0, 0x480101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 5.630134505s ago: executing program 2 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@remote}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0xbe9}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r3, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4205, r4, 0x201, &(0x7f0000000080)={0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 5.417957203s ago: executing program 4 (id=1716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0xc}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x1a0}}]}, 0x13c}}, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r2) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x8}) 4.913330773s ago: executing program 8 (id=1718): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_create_resource$binfmt(0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 4.111064917s ago: executing program 2 (id=1719): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = dup2(r1, r1) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x8}) 3.712828229s ago: executing program 3 (id=1720): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3.621616728s ago: executing program 8 (id=1721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x4d4}, @in=@remote, {@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x4, 0x6e6bbf}, 0xfffffffe}}, 0x128}}, 0x20004040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) 3.469367688s ago: executing program 6 (id=1722): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.204409026s ago: executing program 3 (id=1723): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x2000, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) syz_emit_ethernet(0x121, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.930570164s ago: executing program 0 (id=1724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006, 0x800}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.408436434s ago: executing program 4 (id=1725): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000006c0)={0x1, 0x0, 0xac21}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) 1.106408045s ago: executing program 8 (id=1726): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 841.082123ms ago: executing program 2 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x40) 723.242332ms ago: executing program 8 (id=1728): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc2", 0x1b}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) 400.014699ms ago: executing program 2 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x2}, [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@remote}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0xbe9}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) 328.288048ms ago: executing program 8 (id=1730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 310.440623ms ago: executing program 4 (id=1731): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) getpgid(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xa0, &(0x7f0000000100)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}, 0xf}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x800, @mcast1}, @in6={0xa, 0x4e23, 0x6, @empty, 0x1}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x10001}]}, &(0x7f0000000200)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x600) syz_clone(0x10820000, &(0x7f0000000280)="a20c54353a2a9b4205d1d1acd1638973aa57b6c72ab9edba61e1fbd9cccd496f8300aa046dfde5f15f6cb472d99c37120d9696a1d7e8bc6df9f8744e394fed51ec6a525830ad64c11183df3c7a", 0x4d, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) 0s ago: executing program 8 (id=1732): ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x20, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xb}, {0x4, 0x10}, {0x4, 0xfff1}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c005}, 0x40010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0780, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0xffff, 0xffff}, {0xb, 0x6}}}, 0x24}}, 0x4080) getsockopt$netlink(r2, 0x10e, 0x6, 0x0, &(0x7f00000004c0)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd1e95a61515ddd5e}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000400)={@local}, 0x14) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) kernel console output (not intermixed with test programs): erialNumber=0 [ 1102.600776][T13927] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1102.689360][ T29] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.982084][ T9483] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1103.170875][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1103.202707][ T9483] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1103.269363][ T9483] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 1103.313964][ T9483] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1103.357901][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1103.362040][ T9483] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1103.405174][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.409170][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1103.445502][ T24] usb 7-1: Product: syz [ 1103.449908][ T9483] usb 3-1: SerialNumber: syz [ 1103.455707][ T24] usb 7-1: Manufacturer: syz [ 1103.462991][ T24] usb 7-1: SerialNumber: syz [ 1103.486839][T13930] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1103.503503][ T24] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1103.509615][ T9483] hub 3-1:1.0: bad descriptor, ignoring hub [ 1103.552809][ T9483] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1103.564490][ T29] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1103.836574][ T9483] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1103.906013][ T9483] usb 3-1: USB disconnect, device number 14 [ 1104.129794][T13940] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 13940 comm: syz.3.1463) [ 1104.208425][ T10] usb 7-1: USB disconnect, device number 6 [ 1104.267714][ T30] audit: type=1800 audit(1779483782.659:15): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1463" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45844 res=0 errno=0 [ 1104.380663][ T9483] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1104.642447][ T9483] usb 5-1: Using ep0 maxpacket: 8 [ 1104.671292][ T9483] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1104.727874][ T9483] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1104.788371][ T9483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.872987][ T9483] usb 5-1: config 0 descriptor?? [ 1104.984219][ T29] usb 7-1: Service connection timeout for: 256 [ 1105.026539][ T29] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1105.086515][ T29] ath9k_htc: Failed to initialize the device [ 1105.128559][ T10] usb 7-1: ath9k_htc: USB layer deinitialized [ 1105.235606][ T9483] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1105.900735][T11122] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1105.912205][ T9483] usb 5-1: USB disconnect, device number 9 [ 1105.989212][ T29] usb 9-1: USB disconnect, device number 5 [ 1106.150950][T11122] usb 7-1: Using ep0 maxpacket: 16 [ 1106.186327][T11122] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.208165][T11122] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1106.240104][T11122] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1106.275445][T11122] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1106.300192][T11122] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.326584][T11122] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1106.351862][T11122] usb 7-1: SerialNumber: syz [ 1106.398891][T13950] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1106.415470][T13950] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1106.428236][T11122] hub 7-1:1.0: bad descriptor, ignoring hub [ 1106.435182][T11122] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1106.701172][T11122] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1106.807765][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1470'. [ 1106.834587][T11122] usb 7-1: USB disconnect, device number 7 [ 1107.610712][ T9483] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1107.680636][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1107.789980][ T9483] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1107.846023][ T9483] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 1107.858834][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1107.888588][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.904097][ T9483] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1107.923729][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1107.947164][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1107.972295][ T9483] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1107.990918][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1108.004061][ T9483] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1108.033209][ T9483] usb 7-1: SerialNumber: syz [ 1108.042912][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1108.069732][T13950] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1108.076946][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.107564][ T10] usb 4-1: Product: syz [ 1108.115788][ T9483] hub 7-1:1.0: bad descriptor, ignoring hub [ 1108.130311][ T10] usb 4-1: Manufacturer: syz [ 1108.141618][ T9483] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1108.150411][ T10] usb 4-1: SerialNumber: syz [ 1108.188838][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1108.211981][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input25 [ 1108.335906][T13965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 1108.360930][ T9483] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 1108.434277][ T9483] usb 7-1: USB disconnect, device number 8 [ 1108.472271][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1108.516464][ T10] (id 0x00) [ 1108.750684][ T10] rc_core: IR keymap rc-imon-pad not found [ 1108.762165][ T10] Registered IR keymap rc-empty [ 1108.775528][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1108.803191][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1108.852885][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1108.885686][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input26 [ 1108.925006][ T10] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:6> initialized [ 1109.450705][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1109.632682][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1109.647413][ T10] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.666624][ T10] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1109.683395][ T10] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1109.696684][ T10] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1109.728138][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1109.755656][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.781463][ T10] usb 7-1: Product: syz [ 1109.798157][ T10] usb 7-1: Manufacturer: syz [ 1109.810949][ T10] usb 7-1: SerialNumber: syz [ 1109.847554][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1109.902919][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input27 [ 1110.050727][T11122] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1110.100885][ T10] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1110.110157][ T10] (id 0x00) [ 1110.235339][T11122] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1110.267872][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.283045][T11122] usb 3-1: Product: syz [ 1110.293880][T11122] usb 3-1: Manufacturer: syz [ 1110.299263][T11122] usb 3-1: SerialNumber: syz [ 1110.340833][ T10] rc_core: IR keymap rc-imon-pad not found [ 1110.352211][ T10] Registered IR keymap rc-empty [ 1110.365687][T11122] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1110.383160][ T10] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1110.399954][ T10] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1110.414007][ T29] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1110.466736][ T10] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1 [ 1110.542342][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1/input28 [ 1110.586851][ T10] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:9> initialized [ 1110.761954][T13963] imon:send_packet: task interrupted [ 1110.800248][T13963] imon:send_packet: packet tx failed (-512) [ 1110.837988][T13963] imon:vfd_write: send packet #2 failed [ 1111.055701][ T10] usb 4-1: USB disconnect, device number 6 [ 1111.327738][T13989] imon:display_open: could not find interface for minor 0 [ 1113.690349][ T29] usb 3-1: Service connection timeout for: 256 [ 1114.562266][ T9482] usb 3-1: USB disconnect, device number 15 [ 1114.592744][ T29] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1114.611233][ T29] ath9k_htc: Failed to initialize the device [ 1114.639105][ T5862] usb 7-1: USB disconnect, device number 9 [ 1114.719588][ T9482] usb 3-1: ath9k_htc: USB layer deinitialized [ 1114.813729][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 1115.230089][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.236606][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.956139][ T5639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1115.967294][ T5639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1115.976020][ T5639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1116.003000][ T5639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1116.021536][ T5639] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1117.302708][ T5639] Bluetooth: hci4: command 0x0406 tx timeout [ 1117.770638][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1117.880656][ T9482] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1118.095731][ T9482] usb 3-1: Using ep0 maxpacket: 32 [ 1118.101061][ T5649] Bluetooth: hci6: command tx timeout [ 1118.138536][ T9482] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.183292][ T9482] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1118.195602][ T9483] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1118.243635][ T9482] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1118.304727][ T9482] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1118.369326][ T9482] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1118.382610][ T9483] usb 9-1: Using ep0 maxpacket: 32 [ 1118.415235][ T9483] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1118.427099][ T9482] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.468575][ T9483] usb 9-1: config 0 has no interface number 0 [ 1118.481290][ T9482] usb 3-1: Product: syz [ 1118.497227][ T9482] usb 3-1: Manufacturer: syz [ 1118.509405][ T9483] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1118.528532][ T9482] usb 3-1: SerialNumber: syz [ 1118.566520][ T9483] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1118.599353][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1118.626238][ T9483] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1118.647261][ T9482] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input29 [ 1118.683098][ T9483] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1118.728602][ T9483] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.784055][ T9483] usb 9-1: Product: syz [ 1118.813119][ T9483] usb 9-1: Manufacturer: syz [ 1118.836471][ T9483] usb 9-1: SerialNumber: syz [ 1118.870723][ T9482] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1118.890716][ T9483] usb 9-1: config 0 descriptor?? [ 1118.915995][ T9482] (id 0x00) [ 1118.931440][ T9483] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1118.979857][ T9483] em28xx 9-1:0.89: Video interface 89 found: isoc [ 1119.223693][ T9483] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1119.262388][ T9482] rc_core: IR keymap rc-imon-pad not found [ 1119.275921][ T9482] Registered IR keymap rc-empty [ 1119.290843][ T9482] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1119.316179][ T9482] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1119.358871][ T9483] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1119.383429][ T9482] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1119.400684][ T9483] em28xx 9-1:0.89: board has no eeprom [ 1119.428863][ T9482] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input30 [ 1119.472851][ T9483] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1119.494945][ T9483] em28xx 9-1:0.89: analog set to isoc mode. [ 1119.505391][ T9482] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:16> initialized [ 1119.518069][ T10] em28xx 9-1:0.89: Registering V4L2 extension [ 1119.593720][ T9483] usb 9-1: USB disconnect, device number 6 [ 1119.631151][ T9483] em28xx 9-1:0.89: Disconnecting em28xx [ 1119.866428][ T10] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1119.915968][ T10] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1119.943021][ T10] em28xx 9-1:0.89: No AC97 audio processor [ 1119.977815][ T10] usb 9-1: Decoder not found [ 1119.993390][ T10] em28xx 9-1:0.89: failed to create media graph [ 1120.015354][ T10] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1120.085799][ T10] em28xx 9-1:0.89: Registering snapshot button... [ 1120.149067][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input31 [ 1120.169947][ T10] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1120.180456][ T9483] em28xx 9-1:0.89: Closing input extension [ 1120.189184][ T9483] em28xx 9-1:0.89: Deregistering snapshot button [ 1120.190702][ T5649] Bluetooth: hci6: command tx timeout [ 1120.405326][T14057] imon:send_packet: packet tx failed (-71) [ 1120.412638][ T5862] usb 3-1: USB disconnect, device number 16 [ 1120.441989][T14057] imon:vfd_write: send packet #2 failed [ 1120.451774][ T29] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1120.544136][ T9483] em28xx 9-1:0.89: Freeing device [ 1120.674189][ T29] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1120.694748][ T29] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1120.705145][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1120.714452][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.765127][T14053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1120.784193][ T9482] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1120.933697][ T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1120.985869][ T9482] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.019053][ T9482] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1121.034582][ T9482] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1121.044023][ T9482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.069265][T14061] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1121.291384][ T9482] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.361768][T14011] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.404155][T14011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.446545][T14011] bridge_slave_0: entered allmulticast mode [ 1121.493331][T14011] bridge_slave_0: entered promiscuous mode [ 1121.510757][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1121.549962][T14011] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.572049][T14011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.595974][T14011] bridge_slave_1: entered allmulticast mode [ 1121.640517][T14011] bridge_slave_1: entered promiscuous mode [ 1121.733270][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.777473][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1121.800925][ T9483] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1121.802742][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1121.852913][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.909556][T14074] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1121.933027][T14011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.967482][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1121.973274][ T9482] usb 7-1: USB disconnect, device number 10 [ 1121.992912][T14011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.015471][ T9483] usb 3-1: Using ep0 maxpacket: 8 [ 1122.044804][ T9483] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1122.066011][ T9483] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1122.104650][ T9483] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1122.119468][ T9483] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1122.163571][ T9483] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.222143][ T9483] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1122.273243][ T5649] Bluetooth: hci6: command tx timeout [ 1122.284882][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.497919][T14011] team0: Port device team_slave_0 added [ 1122.533637][ T24] usb 9-1: USB disconnect, device number 7 [ 1122.571579][T14011] team0: Port device team_slave_1 added [ 1122.694864][ T9483] usb 3-1: usb_control_msg returned -32 [ 1122.702697][ T9483] usbtmc 3-1:16.0: can't read capabilities [ 1122.977443][T14011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.990662][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.053466][T14076] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1123.062847][T14011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.121094][ T9482] usb 3-1: USB disconnect, device number 17 [ 1123.156801][T14011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.194164][T14011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1123.321912][T14011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.596145][T14011] hsr_slave_0: entered promiscuous mode [ 1123.614807][T14011] hsr_slave_1: entered promiscuous mode [ 1123.634166][T14011] debugfs: 'hsr0' already exists in 'hsr' [ 1123.652289][T14011] Cannot create hsr debugfs directory [ 1123.660656][ T9482] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1123.822827][ T9482] usb 9-1: Using ep0 maxpacket: 32 [ 1123.844686][ T9482] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.882984][ T9482] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1123.916520][ T9482] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1123.946880][ T9482] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1123.970352][ T9482] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1123.982047][ T9482] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.990347][ T9482] usb 9-1: Product: syz [ 1123.998964][ T9482] usb 9-1: Manufacturer: syz [ 1124.007011][ T9482] usb 9-1: SerialNumber: syz [ 1124.088829][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1124.108073][ T9482] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input32 [ 1124.284269][ T5862] usb 4-1: USB disconnect, device number 8 [ 1124.340651][ T5649] Bluetooth: hci6: command tx timeout [ 1124.410662][ T9482] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1124.493678][ T9482] (id 0x00) [ 1124.801449][ T9482] rc_core: IR keymap rc-imon-pad not found [ 1124.827918][ T9482] Registered IR keymap rc-empty [ 1124.842642][ T9482] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1124.945389][ T9482] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1125.082360][ T9482] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1125.153866][ T9482] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input33 [ 1125.270345][ T9482] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:8> initialized [ 1125.362682][T14011] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1125.535199][T14011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1125.651291][ T5862] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1125.833163][T14011] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1125.847495][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 1125.878839][ T5862] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1125.937084][T14011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1125.979627][ T5862] usb 5-1: config 0 has no interface number 0 [ 1125.982156][T14011] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1126.044933][ T5862] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1126.074567][T14011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1126.130117][ T5862] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1126.170125][T14011] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1126.206661][ T5862] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1126.217944][T14011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1126.268169][ T5862] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1126.335751][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.378233][ T5862] usb 5-1: Product: syz [ 1126.400073][ T5862] usb 5-1: Manufacturer: syz [ 1126.429139][ T5862] usb 5-1: SerialNumber: syz [ 1126.475473][ T5862] usb 5-1: config 0 descriptor?? [ 1126.530986][ T5862] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1126.593515][ T5862] em28xx 5-1:0.89: Video interface 89 found: isoc [ 1126.598540][T14011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.683130][T14011] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.752012][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.759208][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1126.791147][ T5862] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1126.854556][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.861787][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.988449][ T5862] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1127.033805][ T10] usb 9-1: USB disconnect, device number 8 [ 1127.047654][ T5862] em28xx 5-1:0.89: board has no eeprom [ 1127.181039][ T5862] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1127.209685][T14123] kAFS: unable to lookup cell '' [ 1127.228980][ T5862] em28xx 5-1:0.89: analog set to isoc mode. [ 1127.281768][T11122] em28xx 5-1:0.89: Registering V4L2 extension [ 1127.336298][ T5862] usb 5-1: USB disconnect, device number 10 [ 1127.431323][ T5862] em28xx 5-1:0.89: Disconnecting em28xx [ 1127.570677][ T9482] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1127.727466][T11122] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1127.768881][T11122] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1127.769721][ T9482] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.842014][T11122] em28xx 5-1:0.89: No AC97 audio processor [ 1127.904659][ T9482] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.945749][T11122] usb 5-1: Decoder not found [ 1127.974506][ T9482] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.995102][T11122] em28xx 5-1:0.89: failed to create media graph [ 1128.001750][ T9482] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.023566][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1128.041652][T11122] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1128.066086][T14127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1128.125114][T11122] em28xx 5-1:0.89: Registering snapshot button... [ 1128.140357][ T9482] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1128.217441][T11122] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input34 [ 1128.248329][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1128.306581][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1128.355821][T11122] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1128.387529][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1128.438636][ T5862] em28xx 5-1:0.89: Closing input extension [ 1128.443227][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.485352][ T5862] em28xx 5-1:0.89: Deregistering snapshot button [ 1128.526334][ T10] usb 9-1: config 0 descriptor?? [ 1128.572570][ T9482] usb 4-1: USB disconnect, device number 9 [ 1128.778364][ T5862] em28xx 5-1:0.89: Freeing device [ 1128.825026][ T10] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1129.173683][ T9483] usb 9-1: USB disconnect, device number 9 [ 1129.241753][ T5862] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1129.415000][ T5862] usb 5-1: Using ep0 maxpacket: 16 [ 1129.460415][ T5862] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.532524][ T5862] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1129.597252][ T5862] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1129.643815][ T5862] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1129.705449][ T5862] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1129.762850][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1129.807562][ T5862] usb 5-1: SerialNumber: syz [ 1129.862804][T14137] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1129.897950][T14137] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1129.952754][ T5862] hub 5-1:1.0: bad descriptor, ignoring hub [ 1129.986284][ T5862] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1130.064128][T14011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1130.210846][ T5862] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 1130.359515][ T5862] usb 5-1: USB disconnect, device number 11 [ 1131.162119][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1131.353508][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1131.383231][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1131.425334][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1131.464900][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1131.497751][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.551025][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.614496][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1131.658823][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.891888][T14011] veth0_vlan: entered promiscuous mode [ 1131.963230][T14011] veth1_vlan: entered promiscuous mode [ 1132.097138][ T10] usb 7-1: usb_control_msg returned -32 [ 1132.118637][ T10] usbtmc 7-1:16.0: can't read capabilities [ 1132.216323][T14011] veth0_macvtap: entered promiscuous mode [ 1132.274535][T14011] veth1_macvtap: entered promiscuous mode [ 1132.381433][T14165] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1132.411095][ T9483] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1132.483509][ T10] usb 7-1: USB disconnect, device number 11 [ 1132.485729][T14011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.600874][ T9483] usb 9-1: Using ep0 maxpacket: 8 [ 1132.601420][T14011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.625332][ T9483] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1132.658180][ T9483] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1132.702101][ T9483] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1132.717406][ T9483] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1132.738628][ T9483] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1132.759047][ T9483] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1132.775762][ T9483] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.807883][ T5909] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.860237][ T5909] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.896207][ T5909] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.964055][ T5909] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.191242][ T9483] usb 9-1: usb_control_msg returned -32 [ 1133.216575][ T9483] usbtmc 9-1:16.0: can't read capabilities [ 1133.285071][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.320585][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.402578][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.440089][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.463179][T14181] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1133.497267][T11122] usb 9-1: USB disconnect, device number 10 [ 1133.570742][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1133.750649][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1133.758503][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.769693][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1133.784453][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1133.796551][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1133.826828][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1133.844607][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.854083][ T24] usb 7-1: Product: syz [ 1133.862819][ T24] usb 7-1: Manufacturer: syz [ 1133.872511][ T24] usb 7-1: SerialNumber: syz [ 1133.883114][ T9483] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1133.901839][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1133.950301][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input35 [ 1134.086257][ T9483] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1134.098743][ T9483] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1134.125824][ T9483] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1134.147381][ T9483] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.161264][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1134.186927][ T24] (id 0x00) [ 1134.213897][T14193] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1134.302836][ T9483] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.692280][ T24] rc_core: IR keymap rc-imon-pad not found [ 1134.733430][ T24] Registered IR keymap rc-empty [ 1134.748812][ T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1134.829807][ T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1134.995008][ T24] imon:send_packet: packet tx failed (-71) [ 1135.040936][ T24] imon 7-1:155.0: remote input dev register failed [ 1135.097672][ T24] imon 7-1:155.0: imon_init_intf0: rc device setup failed [ 1135.270758][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1135.440659][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1135.456520][ T10] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.497903][ T10] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1135.555511][ T10] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1135.609361][ T10] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1135.687974][ T10] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1135.750417][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.797530][ T10] usb 9-1: Product: syz [ 1135.829302][ T10] usb 9-1: Manufacturer: syz [ 1135.857394][ T10] usb 9-1: SerialNumber: syz [ 1135.972362][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1135.974864][ T24] imon 7-1:155.0: unable to initialize intf0, err 0 [ 1135.998349][ T24] imon:imon_probe: failed to initialize context! [ 1136.008446][ T24] imon 7-1:155.0: unable to register, err -19 [ 1136.022084][ T24] usb 7-1: USB disconnect, device number 12 [ 1136.114792][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input37 [ 1136.240696][ T10] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1136.268400][ T10] (id 0x00) [ 1136.350653][ T9483] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1136.470652][ T10] rc_core: IR keymap rc-imon-pad not found [ 1136.494421][ T10] Registered IR keymap rc-empty [ 1136.515160][ T10] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1136.550759][ T9483] usb 3-1: Using ep0 maxpacket: 32 [ 1136.556195][ T10] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1136.592304][ T9483] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.632593][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1136.647977][ T9483] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1136.712871][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input38 [ 1136.725969][ T9483] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1136.810693][ T9483] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1136.831329][ T10] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:11> initialized [ 1136.843693][ T9483] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1136.863823][ T9483] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.950612][ T9483] usb 3-1: Product: syz [ 1136.966936][ T10] usb 4-1: USB disconnect, device number 10 [ 1136.976780][ T9483] usb 3-1: Manufacturer: syz [ 1136.999076][ T9483] usb 3-1: SerialNumber: syz [ 1137.134387][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1137.199401][ T9483] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input39 [ 1137.392361][ T9483] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1137.432304][ T9483] (id 0x00) [ 1137.655361][ T9483] rc_core: IR keymap rc-imon-pad not found [ 1137.729953][ T9483] Registered IR keymap rc-empty [ 1137.747639][ T9483] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1137.758548][ T9483] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1137.807938][T14237] kAFS: unable to lookup cell '' [ 1137.825354][ T9483] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1 [ 1137.864589][ T9483] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc1/input40 [ 1137.974854][ T9483] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:18> initialized [ 1139.349929][ T10] usb 9-1: USB disconnect, device number 11 [ 1139.646480][T14222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1139.971328][T14251] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14251 comm: syz.8.1538) [ 1139.995755][ T30] audit: type=1800 audit(1779483818.409:16): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1538" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50991 res=0 errno=0 [ 1140.423206][T14257] kAFS: unable to lookup cell '' [ 1140.483444][T11122] usb 3-1: USB disconnect, device number 18 [ 1141.283430][T11122] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1141.480626][T11122] usb 3-1: Using ep0 maxpacket: 32 [ 1141.510214][T11122] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1141.533588][T11122] usb 3-1: config 0 has no interface number 0 [ 1141.564058][T11122] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1141.615891][T11122] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1141.665772][T11122] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1141.736304][T11122] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1141.841219][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.888726][T11122] usb 3-1: Product: syz [ 1141.957855][T11122] usb 3-1: Manufacturer: syz [ 1142.063778][T11122] usb 3-1: SerialNumber: syz [ 1142.204844][T11122] usb 3-1: config 0 descriptor?? [ 1142.269554][T11122] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1142.399262][T11122] em28xx 3-1:0.89: Video interface 89 found: isoc [ 1142.557066][T11122] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1142.672429][T11122] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1142.717438][T11122] em28xx 3-1:0.89: board has no eeprom [ 1142.800676][T11122] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1142.839715][T11122] em28xx 3-1:0.89: analog set to isoc mode. [ 1142.859066][ T5862] em28xx 3-1:0.89: Registering V4L2 extension [ 1142.912215][T11122] usb 3-1: USB disconnect, device number 19 [ 1142.951900][T11122] em28xx 3-1:0.89: Disconnecting em28xx [ 1143.210752][ T5862] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1143.304954][ T5862] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1143.328970][ T5862] em28xx 3-1:0.89: No AC97 audio processor [ 1143.388488][ T5862] usb 3-1: Decoder not found [ 1143.408236][ T5862] em28xx 3-1:0.89: failed to create media graph [ 1143.439138][ T5862] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1143.492189][ T5862] em28xx 3-1:0.89: Registering snapshot button... [ 1143.535091][ T5862] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input41 [ 1143.611210][ T5862] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1143.642876][T11122] em28xx 3-1:0.89: Closing input extension [ 1143.663837][T11122] em28xx 3-1:0.89: Deregistering snapshot button [ 1144.039604][T11122] em28xx 3-1:0.89: Freeing device [ 1144.461442][T11122] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1144.652422][T11122] usb 3-1: Using ep0 maxpacket: 32 [ 1144.683295][T11122] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1144.725229][T11122] usb 3-1: config 0 has no interface number 0 [ 1144.761630][T11122] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1144.810839][T11122] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1144.845513][T11122] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1144.876728][T11122] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1144.905280][T11122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.937738][T11122] usb 3-1: Product: syz [ 1144.960613][T11122] usb 3-1: Manufacturer: syz [ 1144.997415][T11122] usb 3-1: SerialNumber: syz [ 1145.033125][T11122] usb 3-1: config 0 descriptor?? [ 1145.066815][T11122] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1145.105372][T11122] em28xx 3-1:0.89: Video interface 89 found: isoc [ 1145.335154][T11122] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1145.452281][T11122] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1145.481205][T11122] em28xx 3-1:0.89: board has no eeprom [ 1145.560779][T11122] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1145.586204][T11122] em28xx 3-1:0.89: analog set to isoc mode. [ 1145.613192][ T29] em28xx 3-1:0.89: Registering V4L2 extension [ 1145.639860][T11122] usb 3-1: USB disconnect, device number 20 [ 1145.669904][T11122] em28xx 3-1:0.89: Disconnecting em28xx [ 1145.980306][ T29] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1146.004461][ T29] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1146.039284][ T29] em28xx 3-1:0.89: No AC97 audio processor [ 1146.082658][ T29] usb 3-1: Decoder not found [ 1146.106146][ T29] em28xx 3-1:0.89: failed to create media graph [ 1146.130803][ T29] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1146.176303][ T29] em28xx 3-1:0.89: Registering snapshot button... [ 1146.205799][ T29] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input42 [ 1146.275395][ T29] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1146.310819][T11122] em28xx 3-1:0.89: Closing input extension [ 1146.321954][T14306] kAFS: unable to lookup cell '' [ 1146.330243][T11122] em28xx 3-1:0.89: Deregistering snapshot button [ 1146.771833][T11122] em28xx 3-1:0.89: Freeing device [ 1146.840758][ T9663] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1147.060743][ T9663] usb 5-1: Using ep0 maxpacket: 32 [ 1147.126523][ T9663] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.177658][ T9663] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1147.244378][ T9663] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.318710][ T9663] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1147.348039][T11122] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1147.397536][ T9663] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1147.426920][ T9663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.452063][ T9663] usb 5-1: Product: syz [ 1147.456262][ T9663] usb 5-1: Manufacturer: syz [ 1147.461625][ T9663] usb 5-1: SerialNumber: syz [ 1147.500801][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1147.520047][ T9663] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input43 [ 1147.550637][ T5862] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1147.587801][T11122] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1147.609363][T11122] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1147.639928][T11122] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1147.660500][T11122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.730679][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 1147.740107][T14314] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1147.740652][ T9663] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1147.752883][ T5862] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1147.778613][ T5862] usb 3-1: config 0 has no interface number 0 [ 1147.786061][ T5862] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1147.808717][ T5862] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1147.826612][T11122] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1147.841021][ T5862] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1147.863599][ T9663] (id 0x00) [ 1147.866508][ T5862] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1147.892309][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.916846][ T5862] usb 3-1: Product: syz [ 1147.951144][ T5862] usb 3-1: Manufacturer: syz [ 1147.989273][ T5862] usb 3-1: SerialNumber: syz [ 1148.033273][ T5862] usb 3-1: config 0 descriptor?? [ 1148.074094][ T5862] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1148.116339][ T5862] em28xx 3-1:0.89: Video interface 89 found: isoc [ 1148.140942][ T9663] rc_core: IR keymap rc-imon-pad not found [ 1148.183681][ T9663] Registered IR keymap rc-empty [ 1148.206222][ T9663] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1148.251986][ T9663] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1148.345926][ T9663] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1148.372917][ T5862] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1148.438729][ T9663] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input44 [ 1148.489117][ T5862] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1148.505566][ T5862] em28xx 3-1:0.89: board has no eeprom [ 1148.538917][ T9663] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:12> initialized [ 1148.570673][ T5862] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1148.588096][ T5862] em28xx 3-1:0.89: analog set to isoc mode. [ 1148.609361][ T24] em28xx 3-1:0.89: Registering V4L2 extension [ 1148.609892][ T9663] usb 5-1: USB disconnect, device number 12 [ 1148.669591][ T5862] usb 3-1: USB disconnect, device number 21 [ 1148.759891][ T5862] em28xx 3-1:0.89: Disconnecting em28xx [ 1148.894137][ T24] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1148.904669][ T24] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1148.924981][ T24] em28xx 3-1:0.89: No AC97 audio processor [ 1148.939411][ T24] usb 3-1: Decoder not found [ 1148.947958][ T24] em28xx 3-1:0.89: failed to create media graph [ 1148.954839][ T24] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1148.984424][ T24] em28xx 3-1:0.89: Registering snapshot button... [ 1149.002855][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input45 [ 1149.437527][ T24] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1149.458721][ T5862] em28xx 3-1:0.89: Closing input extension [ 1149.473917][ T5862] em28xx 3-1:0.89: Deregistering snapshot button [ 1150.272273][ T5862] em28xx 3-1:0.89: Freeing device [ 1151.584760][ T8948] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1151.596255][ T8948] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1151.619320][ T8948] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1151.636039][ T8948] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1151.649686][ T8948] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1152.078840][ T10] usb 9-1: USB disconnect, device number 12 [ 1153.020775][ T5862] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1153.141060][ T8948] Bluetooth: hci1: command 0x0406 tx timeout [ 1153.223474][ T5862] usb 4-1: Using ep0 maxpacket: 8 [ 1153.246374][ T5862] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1153.264938][ T5862] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.314288][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1153.394564][ T5862] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1153.447433][ T5862] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.481856][ T5862] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1153.505196][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.700902][ T5639] Bluetooth: hci7: command tx timeout [ 1153.845903][ T5862] usb 4-1: usb_control_msg returned -32 [ 1153.863335][ T5862] usbtmc 4-1:16.0: can't read capabilities [ 1154.216366][ T9663] usb 4-1: USB disconnect, device number 11 [ 1154.461830][ T5862] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1154.637468][ T5862] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1154.662798][ T5862] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1154.699711][ T5862] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1154.728936][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.780166][T14368] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1154.895379][ T5862] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1154.940667][ T9663] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1155.101915][ T9663] usb 7-1: Using ep0 maxpacket: 32 [ 1155.120083][ T9663] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.151651][T14387] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14387 comm: syz.3.1574) [ 1155.186325][ T9663] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1155.201514][ T30] audit: type=1800 audit(1779483833.599:17): pid=14387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1574" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45844 res=0 errno=0 [ 1155.295166][ T9663] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1155.345558][ T9663] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1155.437146][ T9663] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1155.446666][ T9663] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.455935][ T9663] usb 7-1: Product: syz [ 1155.461822][ T9663] usb 7-1: Manufacturer: syz [ 1155.470934][ T9663] usb 7-1: SerialNumber: syz [ 1155.610695][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1155.661862][ T9663] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input46 [ 1155.780749][ T5639] Bluetooth: hci7: command tx timeout [ 1155.830693][ T9663] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1155.888078][ T9663] (id 0x00) [ 1156.109641][ T9663] rc_core: IR keymap rc-imon-pad not found [ 1156.124289][ T9663] Registered IR keymap rc-empty [ 1156.156978][ T9663] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1156.169390][ T9663] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1156.225284][ T9663] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1156.274597][ T9663] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input47 [ 1156.364837][ T9663] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:13> initialized [ 1156.402936][T14340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.438643][T14340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.482025][T14340] bridge_slave_0: entered allmulticast mode [ 1156.523547][T14340] bridge_slave_0: entered promiscuous mode [ 1156.568745][T14340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.598191][T14340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.613774][T14340] bridge_slave_1: entered allmulticast mode [ 1156.634191][T14340] bridge_slave_1: entered promiscuous mode [ 1156.861508][T14340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.919898][T14340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.054915][T14340] team0: Port device team_slave_0 added [ 1157.082311][T14340] team0: Port device team_slave_1 added [ 1157.174338][T14340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.183813][T14340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.242656][T14340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.268116][T14340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.276330][T14340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.304844][T14340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.493725][T14340] hsr_slave_0: entered promiscuous mode [ 1157.525730][T14340] hsr_slave_1: entered promiscuous mode [ 1157.532279][T14340] debugfs: 'hsr0' already exists in 'hsr' [ 1157.538999][T14340] Cannot create hsr debugfs directory [ 1157.722507][ T5862] usb 9-1: USB disconnect, device number 13 [ 1157.810628][T14412] kAFS: unable to lookup cell '' [ 1157.861541][ T5639] Bluetooth: hci7: command tx timeout [ 1158.485663][ T24] usb 7-1: USB disconnect, device number 13 [ 1159.340694][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1159.532725][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 1159.553129][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1159.580612][ T24] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1159.605287][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.647388][ T24] usb 7-1: config 0 descriptor?? [ 1159.891911][ T24] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1159.941790][ T5639] Bluetooth: hci7: command tx timeout [ 1160.172553][ T9483] usb 7-1: USB disconnect, device number 14 [ 1160.810703][T11122] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1160.994674][ T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1161.002471][T11122] usb 4-1: Using ep0 maxpacket: 32 [ 1161.025029][T11122] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.052883][T11122] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1161.082078][T11122] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1161.128593][T11122] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1161.170620][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1161.190068][ T24] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.209665][T11122] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1161.233753][ T24] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1161.251191][T11122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.259868][T11122] usb 4-1: Product: syz [ 1161.264640][ T24] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1161.281637][T11122] usb 4-1: Manufacturer: syz [ 1161.286332][T11122] usb 4-1: SerialNumber: syz [ 1161.292947][ T24] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1161.331094][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1161.345668][T11122] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input48 [ 1161.359198][ T24] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1161.369676][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.380036][ T24] usb 9-1: Product: syz [ 1161.386912][ T24] usb 9-1: Manufacturer: syz [ 1161.394295][ T24] usb 9-1: SerialNumber: syz [ 1161.397168][T14455] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1161.430634][ C1] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1161.442316][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input50 [ 1161.571363][T11122] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1161.590894][T11122] (id 0x00) [ 1161.680671][ T24] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1161.701249][ T24] (id 0x00) [ 1161.760695][T11122] rc_core: IR keymap rc-imon-pad not found [ 1161.772160][T11122] Registered IR keymap rc-empty [ 1161.785391][T11122] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1161.807371][T11122] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1161.853987][T11122] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1161.864799][ T24] rc_core: IR keymap rc-imon-pad not found [ 1161.885180][ T24] Registered IR keymap rc-empty [ 1161.894772][T11122] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input49 [ 1161.907774][ T24] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1161.930872][ T24] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1161.957991][T11122] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:12> initialized [ 1161.984373][ T24] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc1 [ 1162.094459][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc1/input51 [ 1162.141690][ T29] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1162.181700][ T24] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:14> initialized [ 1162.287276][ T24] usb 9-1: USB disconnect, device number 14 [ 1162.350693][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1162.384135][ T29] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1162.436749][ T29] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1162.475373][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1162.503073][ T29] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1162.529087][ T29] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1162.567722][ T29] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1162.591853][ T9483] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1162.607996][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.869592][ T9483] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1162.902595][ T9483] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1162.934314][ T9483] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1162.948430][ T9483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.198346][T14488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1163.245536][T14475] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1163.251458][T14340] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1163.383181][ T8948] Bluetooth: hci5: command 0x0406 tx timeout [ 1163.412841][ T9483] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1163.576090][ T29] usb 3-1: usb_control_msg returned -32 [ 1163.593010][ T29] usbtmc 3-1:16.0: can't read capabilities [ 1163.744534][T14445] imon:send_packet: task interrupted [ 1163.753821][T14445] imon:send_packet: packet tx failed (-512) [ 1163.773711][T14445] imon:vfd_write: send packet #2 failed [ 1163.798084][T14466] imon:display_open: display port is already open [ 1163.912638][T14340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.923182][ T29] usb 3-1: USB disconnect, device number 22 [ 1164.002214][T14340] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1164.258015][ T5862] usb 4-1: USB disconnect, device number 12 [ 1164.546756][T14340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.577911][T14340] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1164.837829][T14340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1164.866766][T14514] kAFS: unable to lookup cell '' [ 1164.893008][T14340] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1165.007302][T14340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.270667][ T29] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1165.425301][ T24] usb 5-1: USB disconnect, device number 13 [ 1165.512245][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1165.565162][T14340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.565701][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1165.687711][ T29] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1165.687848][T14340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.727171][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.734384][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.740715][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1165.761439][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.870240][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.877452][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.915365][ T29] usb 7-1: config 0 descriptor?? [ 1166.022504][ T5862] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1166.068407][ T5862] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1166.123033][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1166.184719][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.208501][ T29] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1166.311066][T14506] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1166.508686][ T5862] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.559483][ T29] usb 7-1: USB disconnect, device number 15 [ 1168.427367][ T9663] usb 4-1: USB disconnect, device number 13 [ 1168.723074][T14541] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1168.920664][ T9663] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1169.121352][ T9663] usb 4-1: Using ep0 maxpacket: 32 [ 1169.146350][ T9663] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.207461][ T9663] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1169.262105][ T9663] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1169.283507][ T9663] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1169.306983][ T9663] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1169.311404][ T5751] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1169.326232][ T9663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.338943][ T9663] usb 4-1: Product: syz [ 1169.344016][ T9663] usb 4-1: Manufacturer: syz [ 1169.348901][ T9663] usb 4-1: SerialNumber: syz [ 1169.383443][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1169.407358][ T9663] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input52 [ 1169.420965][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1169.510638][ T5751] usb 3-1: Using ep0 maxpacket: 8 [ 1169.522321][ T5751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1169.563033][ T5751] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1169.591977][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 1169.592665][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.617170][ T10] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1169.644404][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1169.658639][ T9663] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1169.685284][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1169.688870][ T5751] usb 3-1: config 0 descriptor?? [ 1169.695751][ T9663] (id 0x00) [ 1169.747917][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1169.781585][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.824791][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1169.864775][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.957647][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1169.987646][ T5751] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1170.080763][ T9663] rc_core: IR keymap rc-imon-pad not found [ 1170.103811][ T9663] Registered IR keymap rc-empty [ 1170.130682][ T9663] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1170.153256][ T9663] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1170.155006][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1170.202291][ T9663] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1170.220460][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1170.291729][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.309029][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1170.327441][ T9663] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input53 [ 1170.338575][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.347646][ T10] usb 9-1: usb_control_msg returned -32 [ 1170.376692][ T5862] usb 3-1: USB disconnect, device number 23 [ 1170.388726][ T10] usbtmc 9-1:16.0: can't read capabilities [ 1170.437819][T14574] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1170.450974][ T9663] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:14> initialized [ 1170.512511][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1170.536328][ T10] usb 9-1: USB disconnect, device number 15 [ 1170.553891][ T9663] usb 4-1: USB disconnect, device number 14 [ 1170.946900][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.205395][T14340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.475462][ T24] usb 7-1: USB disconnect, device number 16 [ 1171.555735][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.345939][T14615] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14615 comm: syz.8.1613) [ 1172.364439][ T30] audit: type=1800 audit(1779483850.779:18): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1613" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50991 res=0 errno=0 [ 1172.478932][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.782314][T14340] veth0_vlan: entered promiscuous mode [ 1172.891733][T14340] veth1_vlan: entered promiscuous mode [ 1173.061468][T14497] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1173.250920][T14497] usb 7-1: Using ep0 maxpacket: 32 [ 1173.297107][T14497] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1173.360177][T14497] usb 7-1: config 0 has no interface number 0 [ 1173.406553][T14497] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1173.468543][T14340] veth0_macvtap: entered promiscuous mode [ 1173.493945][T14497] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1173.539558][T14497] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1173.591734][T14497] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1173.629822][T14497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.654572][T14340] veth1_macvtap: entered promiscuous mode [ 1173.672561][T14497] usb 7-1: Product: syz [ 1173.703857][T14497] usb 7-1: Manufacturer: syz [ 1173.740578][T14497] usb 7-1: SerialNumber: syz [ 1173.794491][T14497] usb 7-1: config 0 descriptor?? [ 1173.856165][T14497] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1173.905117][T14497] em28xx 7-1:0.89: Video interface 89 found: isoc [ 1174.111719][T14497] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1174.221099][T14497] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1174.273126][T14497] em28xx 7-1:0.89: board has no eeprom [ 1174.380889][T14497] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1174.420431][T14497] em28xx 7-1:0.89: analog set to isoc mode. [ 1174.439498][ T24] em28xx 7-1:0.89: Registering V4L2 extension [ 1174.499974][T14497] usb 7-1: USB disconnect, device number 17 [ 1174.554133][T14497] em28xx 7-1:0.89: Disconnecting em28xx [ 1174.814971][ T24] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1174.857722][ T24] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1174.906865][ T24] em28xx 7-1:0.89: No AC97 audio processor [ 1174.979556][ T24] usb 7-1: Decoder not found [ 1175.006174][ T24] em28xx 7-1:0.89: failed to create media graph [ 1175.049194][ T24] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1175.087251][ T24] em28xx 7-1:0.89: Registering snapshot button... [ 1175.120288][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1619'. [ 1175.130957][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input54 [ 1175.166860][ T24] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1175.211086][T14497] em28xx 7-1:0.89: Closing input extension [ 1175.233436][T14497] em28xx 7-1:0.89: Deregistering snapshot button [ 1175.325048][T14497] em28xx 7-1:0.89: Freeing device [ 1175.330701][ T9483] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1175.394947][ T12] bond0 (unregistering): Released all slaves [ 1175.575760][ T9483] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1175.658576][T14340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.706949][ T9483] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1175.715101][T14340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.789048][ T9483] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1175.789839][ T12] tipc: Disabling bearer [ 1175.861671][ T9483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.885055][ T12] tipc: Left network mode [ 1175.949008][ T5909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.980849][T14639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1176.034878][T10281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.120336][ T9483] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1176.134459][T10281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.183479][T10970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1176.332529][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1176.512157][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1176.560685][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.624708][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1176.675288][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.687276][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.718094][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1176.834236][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1176.922368][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1176.997071][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.041495][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1177.075907][ T10] usb 5-1: Product: syz [ 1177.093488][ T10] usb 5-1: Manufacturer: syz [ 1177.113839][ T10] usb 5-1: SerialNumber: syz [ 1177.227823][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1177.280211][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1177.299901][ T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1177.326559][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1177.349744][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.376224][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input55 [ 1177.377048][T14656] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1177.555182][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1177.572300][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1177.604605][ T10] (id 0x00) [ 1177.962940][ T10] rc_core: IR keymap rc-imon-pad not found [ 1177.994936][ T10] Registered IR keymap rc-empty [ 1178.011089][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1178.054084][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1178.091106][ T12] hsr_slave_0: left promiscuous mode [ 1178.125463][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1178.190739][ T24] usb 7-1: USB disconnect, device number 18 [ 1178.198198][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input56 [ 1178.226964][ T12] hsr_slave_1: left promiscuous mode [ 1178.382400][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:14> initialized [ 1178.456302][ T12] veth1_macvtap: left promiscuous mode [ 1178.496107][ T12] veth0_macvtap: left promiscuous mode [ 1178.510108][ T12] veth1_vlan: left promiscuous mode [ 1178.526795][ T12] veth0_vlan: left promiscuous mode [ 1178.597526][ T5862] usb 3-1: USB disconnect, device number 24 [ 1179.126602][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'. [ 1179.291941][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1179.481600][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1179.523569][ T24] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1179.555420][ T24] usb 7-1: config 0 has no interface number 0 [ 1179.582505][ T24] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.635292][ T24] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1179.673793][ T24] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1179.706237][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1179.726035][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.748364][ T24] usb 7-1: Product: syz [ 1179.759208][ T24] usb 7-1: Manufacturer: syz [ 1179.769561][ T24] usb 7-1: SerialNumber: syz [ 1179.799212][ T24] usb 7-1: config 0 descriptor?? [ 1179.838685][ T24] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1179.873227][ T24] em28xx 7-1:0.89: Video interface 89 found: isoc [ 1179.968559][ T10] usb 5-1: USB disconnect, device number 14 [ 1180.112943][ T24] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1180.198924][ T24] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1180.217380][ T24] em28xx 7-1:0.89: board has no eeprom [ 1180.290666][ T24] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1180.304247][ T24] em28xx 7-1:0.89: analog set to isoc mode. [ 1180.330810][ T5862] em28xx 7-1:0.89: Registering V4L2 extension [ 1180.349654][ T24] usb 7-1: USB disconnect, device number 19 [ 1180.367008][ T24] em28xx 7-1:0.89: Disconnecting em28xx [ 1180.474224][T14674] bridge_slave_0: left allmulticast mode [ 1180.486202][T14674] bridge_slave_0: left promiscuous mode [ 1180.505197][T14674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.554469][ T5862] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1180.561934][ T5862] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1180.569060][ T5862] em28xx 7-1:0.89: No AC97 audio processor [ 1180.589662][ T5862] usb 7-1: Decoder not found [ 1180.599317][ T5862] em28xx 7-1:0.89: failed to create media graph [ 1180.608447][ T5862] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1180.625953][ T5862] em28xx 7-1:0.89: Registering snapshot button... [ 1180.636466][ T5862] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input57 [ 1180.695197][ T5862] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1180.712611][ T24] em28xx 7-1:0.89: Closing input extension [ 1180.718885][ T24] em28xx 7-1:0.89: Deregistering snapshot button [ 1180.902653][T14691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1631'. [ 1180.960885][T14674] bridge_slave_1: left allmulticast mode [ 1180.982428][T14674] bridge_slave_1: left promiscuous mode [ 1180.990625][T14674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.056326][ T24] em28xx 7-1:0.89: Freeing device [ 1181.068283][T14674] bond0: (slave bond_slave_0): Releasing backup interface [ 1181.107994][T14674] bond0: (slave bond_slave_1): Releasing backup interface [ 1181.166550][T14674] team0: Port device team_slave_0 removed [ 1181.197884][T14674] team0: Port device team_slave_1 removed [ 1181.229993][T14674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.270664][T14674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.305058][T14674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.322802][T14674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.356082][T14674] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1181.459345][T14682] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1181.461767][T14692] syz.4.1631 uses obsolete (PF_INET,SOCK_PACKET) [ 1181.510708][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1181.537679][T10970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.578649][T10970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.674223][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1181.712001][ T24] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.762473][ T24] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1181.800055][T10281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.829997][ T24] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.848930][T10281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.900645][ T24] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1181.980803][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1182.064097][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.130268][ T24] usb 7-1: Product: syz [ 1182.181220][ T24] usb 7-1: Manufacturer: syz [ 1182.242754][ T24] usb 7-1: SerialNumber: syz [ 1182.366505][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1182.408803][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input58 [ 1182.521797][T14717] kAFS: unable to lookup cell '' [ 1182.628325][ T24] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1182.638690][ T24] (id 0x00) [ 1182.944495][ T24] rc_core: IR keymap rc-imon-pad not found [ 1182.994271][ T24] Registered IR keymap rc-empty [ 1183.038006][ T24] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1183.095510][ T24] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1183.183811][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1183.261676][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input59 [ 1183.400250][ T24] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:20> initialized [ 1183.450627][ T5751] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1183.466139][ T24] usb 7-1: USB disconnect, device number 20 [ 1183.664839][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 1183.712868][ T5751] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.775595][ T5751] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1183.824915][ T5751] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.856621][ T5751] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1183.957695][ T5751] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1184.001679][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.044276][ T5751] usb 1-1: Product: syz [ 1184.058029][ T5751] usb 1-1: Manufacturer: syz [ 1184.070664][ T5751] usb 1-1: SerialNumber: syz [ 1184.145967][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1184.176463][ T5751] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input60 [ 1184.390991][ T5751] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1184.428095][ T5751] (id 0x00) [ 1184.792288][ T5751] rc_core: IR keymap rc-imon-pad not found [ 1184.843705][T14741] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14741 comm: syz.8.1639) [ 1184.859623][ T5751] Registered IR keymap rc-empty [ 1184.881032][ T5751] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1184.952392][ T5751] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1184.988627][ T30] audit: type=1800 audit(1779483863.379:19): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1639" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50991 res=0 errno=0 [ 1185.056185][ T5751] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 1185.098118][ T5751] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input61 [ 1185.164262][ T5751] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:2> initialized [ 1187.157983][T14768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1645'. [ 1187.343822][ T9] usb 1-1: USB disconnect, device number 2 [ 1189.568152][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 1189.655298][T14807] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[5626] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[14807] [ 1190.431442][T14818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1655'. [ 1190.632716][T14497] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1190.850873][T14497] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1190.898619][T14497] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1190.948646][T14497] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1190.980204][T11122] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1191.000190][T14497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.053873][T14817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1191.120132][T14497] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1191.150673][ T5751] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1191.164662][T11122] usb 5-1: Using ep0 maxpacket: 32 [ 1191.204243][T11122] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.236583][T11122] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1191.309935][T11122] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.365529][ T5751] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1191.397087][T11122] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1191.464466][ T5751] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1191.479320][T14497] usb 4-1: USB disconnect, device number 15 [ 1191.538320][T11122] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1191.560274][ T5751] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1191.638734][T11122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.684751][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.750990][T11122] usb 5-1: Product: syz [ 1191.820853][T11122] usb 5-1: Manufacturer: syz [ 1191.840326][T11122] usb 5-1: SerialNumber: syz [ 1191.869267][T14824] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1191.938952][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1191.963425][T11122] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input62 [ 1192.053183][ T5751] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1192.151665][T11122] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1192.168634][T11122] (id 0x00) [ 1192.388354][T14832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1659'. [ 1192.460625][T11122] rc_core: IR keymap rc-imon-pad not found [ 1192.474102][T11122] Registered IR keymap rc-empty [ 1192.496222][T11122] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1192.535461][T11122] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1192.594799][T11122] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1192.671730][T11122] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input63 [ 1192.831802][T11122] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:15> initialized [ 1193.090692][ T5751] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1193.301709][ T5751] usb 4-1: Using ep0 maxpacket: 8 [ 1193.358155][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1193.389137][ T5751] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1193.399917][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.417636][ T5751] usb 4-1: config 0 descriptor?? [ 1193.706203][ T5751] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1193.943716][ T5751] usb 4-1: USB disconnect, device number 16 [ 1194.209947][ T9663] usb 3-1: USB disconnect, device number 25 [ 1194.337182][ T5751] usb 5-1: USB disconnect, device number 15 [ 1194.420948][T11122] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1194.607022][T11122] usb 9-1: Using ep0 maxpacket: 8 [ 1194.639715][T11122] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1194.693726][T11122] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1194.720220][T11122] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.844732][T11122] usb 9-1: config 0 descriptor?? [ 1195.414232][T14879] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14879 comm: syz.4.1666) [ 1195.430975][ T30] audit: type=1800 audit(1779483873.839:20): pid=14879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1666" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=54172 res=0 errno=0 [ 1195.491838][T11122] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1195.715155][T11122] usb 9-1: USB disconnect, device number 16 [ 1195.800932][ T9663] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1196.001923][ T9663] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.099877][ T9663] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1196.180004][ T9663] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1196.251711][ T9663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.342233][T14883] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1196.431272][T14890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1670'. [ 1196.432586][ T9663] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.915062][ T9663] usb 4-1: USB disconnect, device number 17 [ 1196.976645][T14904] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1671'. [ 1197.304162][T14898] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14898 comm: syz.2.1672) [ 1197.429608][ T30] audit: type=1800 audit(1779483875.839:21): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1672" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=43369 res=0 errno=0 [ 1198.324421][T14915] bridge_slave_0: left allmulticast mode [ 1198.378138][T14915] bridge_slave_0: left promiscuous mode [ 1198.411899][T14915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.510446][T14915] bridge_slave_1: left allmulticast mode [ 1198.558524][T14915] bridge_slave_1: left promiscuous mode [ 1198.608403][T14915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.775163][T14915] bond0: (slave bond_slave_0): Releasing backup interface [ 1198.870745][T14915] bond0: (slave bond_slave_1): Releasing backup interface [ 1198.934831][T14925] kAFS: unable to lookup cell '' [ 1199.013138][T14915] team0: Port device team_slave_0 removed [ 1199.095135][T14915] team0: Port device team_slave_1 removed [ 1199.143470][T14915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.206245][T14915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.283021][T14915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.318197][T14915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.426305][T14915] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1200.859522][T14940] kAFS: unable to lookup cell '' [ 1201.211567][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1201.410747][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1201.443110][ T10] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.506894][ T10] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1201.584973][ T10] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1201.687681][ T10] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1201.802042][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1201.847891][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.885821][ T10] usb 5-1: Product: syz [ 1201.903967][ T10] usb 5-1: Manufacturer: syz [ 1201.936945][ T10] usb 5-1: SerialNumber: syz [ 1201.980723][T11122] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1202.042265][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1202.075108][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input64 [ 1202.200944][T11122] usb 3-1: Using ep0 maxpacket: 8 [ 1202.239727][T11122] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1202.275794][T11122] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1202.299997][T11122] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1202.334864][ T10] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1202.369475][T11122] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1202.408735][ T10] (id 0x00) [ 1202.410382][T11122] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.484987][T11122] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1202.541744][T11122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.760759][ T10] rc_core: IR keymap rc-imon-pad not found [ 1202.796737][ T10] Registered IR keymap rc-empty [ 1202.815858][ T10] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1202.869586][ T10] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1202.886211][T11122] usb 3-1: usb_control_msg returned -32 [ 1202.920311][T11122] usbtmc 3-1:16.0: can't read capabilities [ 1202.969007][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1203.035987][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input65 [ 1203.120143][ T10] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:16> initialized [ 1203.145635][ T9483] usb 3-1: USB disconnect, device number 26 [ 1203.541663][T14497] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1203.753565][T14497] usb 4-1: Using ep0 maxpacket: 32 [ 1203.849984][T14497] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.881861][T14497] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1203.930986][T14497] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1204.037058][T14497] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1204.117902][T14497] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1204.174542][T14497] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.222020][T14497] usb 4-1: Product: syz [ 1204.249817][T14497] usb 4-1: Manufacturer: syz [ 1204.395334][T14497] usb 4-1: SerialNumber: syz [ 1204.469247][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1204.493996][T14983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1687'. [ 1204.540514][T14497] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input66 [ 1204.801837][ T10] usb 5-1: USB disconnect, device number 16 [ 1204.883619][T14497] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1204.954814][T14497] (id 0x00) [ 1205.264490][T14497] rc_core: IR keymap rc-imon-pad not found [ 1205.285560][T14994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1205.456624][T14497] Registered IR keymap rc-empty [ 1205.547972][T14497] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1205.626646][T14497] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1205.768158][T14497] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1205.900244][T14497] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input67 [ 1206.050431][T14497] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:18> initialized [ 1206.061427][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1206.167570][T15009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1692'. [ 1206.300853][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1206.343461][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.397332][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1206.449398][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1206.512443][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1206.583029][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.616364][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1206.662499][ T10] usb 3-1: SerialNumber: syz [ 1206.711205][T15004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1206.733295][T15004] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1206.773301][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 1206.790215][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1207.256988][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1207.305249][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1207.358444][T15015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1693'. [ 1207.409612][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 1207.562328][ T5751] usb 4-1: USB disconnect, device number 18 [ 1207.586797][ T10] usb 3-1: USB disconnect, device number 27 [ 1208.560631][ T9663] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1208.819354][ T9663] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1208.932842][ T9663] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1209.014213][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1209.024520][ T9663] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1209.094816][ T9663] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.169039][T15024] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1209.257577][ T9663] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1209.493124][ T9663] usb 5-1: USB disconnect, device number 17 [ 1209.521951][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1209.580641][ T5751] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1209.705563][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 1209.730278][ T10] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.765511][ T10] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1209.768702][ T5751] usb 7-1: Using ep0 maxpacket: 32 [ 1209.785205][ T10] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.829423][ T10] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1209.842003][ T5751] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.876198][ T10] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1209.887955][ T5751] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1209.907454][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.938758][ T10] usb 9-1: Product: syz [ 1209.951251][ T5751] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1209.951823][ T10] usb 9-1: Manufacturer: syz [ 1209.980597][ T5751] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1210.006806][ T10] usb 9-1: SerialNumber: syz [ 1210.017600][ T5751] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1210.036880][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.048203][ T5751] usb 7-1: Product: syz [ 1210.055923][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1210.065715][ T5751] usb 7-1: Manufacturer: syz [ 1210.070821][ T5751] usb 7-1: SerialNumber: syz [ 1210.087747][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input68 [ 1210.133262][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1210.173550][ T5751] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input69 [ 1210.330676][ T10] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1210.360568][ T10] (id 0x00) [ 1210.397592][ T5751] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1210.420298][ T5751] (id 0x00) [ 1210.511755][ T5751] rc_core: IR keymap rc-imon-pad not found [ 1210.534077][ T5751] Registered IR keymap rc-empty [ 1210.545331][ T5751] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1210.570033][ T5751] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1210.614601][ T5751] rc rc1: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1 [ 1210.660809][ T5751] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc1/input71 [ 1210.719697][ T5751] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:21> initialized [ 1210.730889][ T10] rc_core: IR keymap rc-imon-pad not found [ 1210.766808][ T10] Registered IR keymap rc-empty [ 1210.782260][ T10] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1210.821971][ T10] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1210.925495][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1211.052603][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input70 [ 1211.111470][ T10] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:17> initialized [ 1211.202226][ T5751] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1211.410137][ T5751] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1211.454005][T15067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1211.493622][ T5751] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1211.536940][ T5751] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1211.579167][T15073] netlink: 'syz.2.1706': attribute type 2 has an invalid length. [ 1211.590323][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.619003][T15073] netlink: 'syz.2.1706': attribute type 2 has an invalid length. [ 1211.662425][T15064] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1211.728083][ T5751] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1211.803399][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1212.055061][ T5751] usb 5-1: USB disconnect, device number 18 [ 1212.221331][ T9663] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1212.339922][T11122] usb 7-1: USB disconnect, device number 21 [ 1212.392662][ T9663] usb 3-1: Using ep0 maxpacket: 32 [ 1212.413389][ T9663] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1212.436847][ T9663] usb 3-1: config 0 has no interface number 0 [ 1212.451156][ T9663] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.462923][ T9663] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1212.482368][ T9663] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1212.495906][ T9663] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1212.510023][ T9663] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.518489][ T9663] usb 3-1: Product: syz [ 1212.523023][ T9663] usb 3-1: Manufacturer: syz [ 1212.533002][ T9663] usb 3-1: SerialNumber: syz [ 1212.540640][ T5751] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1212.639808][T15089] kAFS: unable to lookup cell '' [ 1212.656283][ T9663] usb 3-1: config 0 descriptor?? [ 1212.692449][ T5751] usb 1-1: Using ep0 maxpacket: 32 [ 1212.712763][ T9663] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1212.729586][ T5751] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 1212.732429][ T9663] em28xx 3-1:0.89: Video interface 89 found: isoc [ 1212.776416][ T5751] usb 1-1: config 0 has no interface number 0 [ 1212.800092][ T5751] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.828628][ T5751] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1212.861683][ T5751] usb 1-1: config 0 interface 89 has no altsetting 0 [ 1212.888007][ T5751] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1212.922805][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.948716][ T5751] usb 1-1: Product: syz [ 1212.964309][ T5751] usb 1-1: Manufacturer: syz [ 1212.975765][ T5751] usb 1-1: SerialNumber: syz [ 1213.087646][ T5751] usb 1-1: config 0 descriptor?? [ 1213.124775][ T9663] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1213.153910][ T9] usb 9-1: USB disconnect, device number 17 [ 1213.215208][ T5751] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1213.266745][ T5751] em28xx 1-1:0.89: Video interface 89 found: isoc [ 1213.304134][ T9663] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1213.369337][ T9663] em28xx 3-1:0.89: board has no eeprom [ 1213.474686][ T5751] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 1213.512214][ T9663] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1213.585552][ T9663] em28xx 3-1:0.89: analog set to isoc mode. [ 1213.608547][ T5751] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1213.677420][ T9483] em28xx 3-1:0.89: Registering V4L2 extension [ 1213.701203][ T5751] em28xx 1-1:0.89: board has no eeprom [ 1213.772232][ T9663] usb 3-1: USB disconnect, device number 28 [ 1213.793000][ T5751] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 1213.823103][ T9663] em28xx 3-1:0.89: Disconnecting em28xx [ 1213.859412][ T5751] em28xx 1-1:0.89: analog set to isoc mode. [ 1213.951132][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1213.965054][ T5751] usb 1-1: USB disconnect, device number 3 [ 1214.049960][ T5751] em28xx 1-1:0.89: Disconnecting em28xx [ 1214.064147][ T9483] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1214.107989][ T9483] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1214.153625][ T9483] em28xx 3-1:0.89: No AC97 audio processor [ 1214.161507][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1214.186268][ T9] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1214.229761][ T9] usb 4-1: config 0 has no interface number 0 [ 1214.269495][ T9] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1214.292353][ T9483] usb 3-1: Decoder not found [ 1214.315222][ T9483] em28xx 3-1:0.89: failed to create media graph [ 1214.333695][ T9] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1214.352484][ T9483] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1214.437013][ T9] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1214.444174][ T9483] em28xx 3-1:0.89: Registering snapshot button... [ 1214.497882][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1214.552488][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.588208][ T9] usb 4-1: Product: syz [ 1214.608119][ T9] usb 4-1: Manufacturer: syz [ 1214.636194][ T9] usb 4-1: SerialNumber: syz [ 1214.708438][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1214.807176][T15113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1715'. [ 1215.226215][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1215.262812][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 1215.322835][ T9483] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input72 [ 1215.406855][ T9] usb 4-1: config 0 descriptor?? [ 1215.428444][ T9483] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1215.440437][ T10] usb 5-1: device descriptor read/64, error -32 [ 1215.470352][ T9] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1215.490017][ T5862] em28xx 1-1:0.89: Registering V4L2 extension [ 1215.525622][ T9] em28xx 4-1:0.89: Video interface 89 found: isoc [ 1215.730964][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1215.766817][ T9] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1215.927387][ T5862] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 1215.929668][ T9] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1215.994035][ T9] em28xx 4-1:0.89: board has no eeprom [ 1216.002262][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1216.043066][ T5862] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 1216.073993][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1216.077214][ T5862] em28xx 1-1:0.89: No AC97 audio processor [ 1216.084097][ T9] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1216.140118][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1216.151396][ T9] em28xx 4-1:0.89: analog set to isoc mode. [ 1216.162145][ T5862] usb 1-1: Decoder not found [ 1216.189355][ T5862] em28xx 1-1:0.89: failed to create media graph [ 1216.210439][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.213263][ T5862] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 1216.260208][ T9] usb 4-1: USB disconnect, device number 19 [ 1216.326091][ T9] em28xx 4-1:0.89: Disconnecting em28xx [ 1216.367578][T15116] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1216.433753][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1216.458388][ T5862] em28xx 1-1:0.89: Registering snapshot button... [ 1216.543009][ T5862] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input73 [ 1216.647206][ T5862] em28xx 1-1:0.89: Remote control support is not available for this card. [ 1216.702761][ T9663] em28xx 3-1:0.89: Closing input extension [ 1216.743657][ T9663] em28xx 3-1:0.89: Deregistering snapshot button [ 1216.828677][ T9482] em28xx 4-1:0.89: Registering V4L2 extension [ 1216.867039][ T9663] em28xx 3-1:0.89: Freeing device [ 1217.106434][ T9482] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1217.120663][ T10] usb 5-1: USB disconnect, device number 20 [ 1217.136875][ T9482] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1217.158459][ T9482] em28xx 4-1:0.89: No AC97 audio processor [ 1217.267831][ T9482] usb 4-1: Decoder not found [ 1217.308135][ T9482] em28xx 4-1:0.89: failed to create media graph [ 1217.330660][T14497] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1217.360794][ T9663] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1217.372351][ T9482] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1217.459058][ T9482] em28xx 4-1:0.89: Registering snapshot button... [ 1217.494663][T13646] udevd[13646]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.524915][T14497] usb 7-1: Using ep0 maxpacket: 32 [ 1217.549187][ T9482] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input74 [ 1217.582846][T14497] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.627612][ T9663] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1217.648639][ T9482] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1217.680059][ T9663] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1217.698023][ T9] em28xx 4-1:0.89: Closing input extension [ 1217.721821][T14497] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1217.722064][ T9] em28xx 4-1:0.89: Deregistering snapshot button [ 1217.762738][ T9663] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1217.783235][T14497] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1217.804144][ T9663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.849430][T14497] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1217.928910][T14497] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1217.961592][T14497] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.985421][T14497] usb 7-1: Product: syz [ 1217.991679][T14497] usb 7-1: Manufacturer: syz [ 1217.997590][T14497] usb 7-1: SerialNumber: syz [ 1218.207160][ T5751] em28xx 1-1:0.89: Closing input extension [ 1218.237734][ T5751] em28xx 1-1:0.89: Deregistering snapshot button [ 1218.248494][T15133] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1218.274666][ T9] em28xx 4-1:0.89: Freeing device [ 1218.283613][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1218.311308][ T9663] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1218.365577][T14497] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input75 [ 1218.431891][ T9482] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1218.600708][ T9482] usb 5-1: Using ep0 maxpacket: 32 [ 1218.611593][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1218.625834][ T9482] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1218.640800][ T9482] usb 5-1: config 0 has no interface number 0 [ 1218.652770][ T9482] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1218.680699][ T9482] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 1218.704398][ T9482] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1218.725135][ T9482] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1218.741007][ T9482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.759285][ T9482] usb 5-1: Product: syz [ 1218.763752][ T9482] usb 5-1: Manufacturer: syz [ 1218.779591][ T9482] usb 5-1: SerialNumber: syz [ 1218.789031][ T9482] usb 5-1: config 0 descriptor?? [ 1218.809292][ T9482] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1218.832673][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1218.850772][ T9482] em28xx 5-1:0.89: Video interface 89 found: isoc [ 1218.864486][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1218.890909][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1218.910359][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.951756][T15152] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1219.024215][T14497] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1219.036662][T14497] (id 0x00) [ 1219.072557][ T9482] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 1219.084885][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1219.174597][ T9482] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1219.190809][ T9482] em28xx 5-1:0.89: board has no eeprom [ 1219.191868][T14497] rc_core: IR keymap rc-imon-pad not found [ 1219.234808][T14497] Registered IR keymap rc-empty [ 1219.249767][T14497] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1219.267227][ T9482] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 1219.301584][ T9482] em28xx 5-1:0.89: analog set to isoc mode. [ 1219.324226][ T10] em28xx 5-1:0.89: Registering V4L2 extension [ 1219.349778][ T9482] usb 5-1: USB disconnect, device number 21 [ 1219.378988][T14497] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1219.409974][ T5751] em28xx 1-1:0.89: Freeing device [ 1219.456356][ T9482] em28xx 5-1:0.89: Disconnecting em28xx [ 1219.470079][T14497] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 1219.558945][T14497] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input76 [ 1219.617225][T14497] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:22> initialized [ 1219.645828][ T10] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 1219.682566][ T10] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 1219.726964][ T10] em28xx 5-1:0.89: No AC97 audio processor [ 1219.890691][ T5751] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1219.914308][T15178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1729'. [ 1220.006414][ T10] usb 5-1: Decoder not found [ 1220.012123][T14497] usb 7-1: USB disconnect, device number 22 [ 1220.038532][ T10] em28xx 5-1:0.89: failed to create media graph [ 1220.086594][ T5751] usb 1-1: Using ep0 maxpacket: 8 [ 1220.089461][ T10] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 1220.129351][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1220.195680][ T5751] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1220.229808][T15182] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1220.280454][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.368184][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1220.377109][ T10] em28xx 5-1:0.89: Registering snapshot button... [ 1220.388917][ T9663] usb 3-1: USB disconnect, device number 29 [ 1220.404967][T15176] ================================================================== [ 1220.413044][T15176] BUG: KASAN: slab-use-after-free in v4l2_open+0x351/0x490 [ 1220.420264][T15176] Read of size 4 at addr ffff8880a83b4860 by task v4l_id/15176 [ 1220.427810][T15176] [ 1220.430135][T15176] CPU: 1 UID: 0 PID: 15176 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1220.430184][T15176] Tainted: [L]=SOFTLOCKUP [ 1220.430197][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1220.430218][T15176] Call Trace: [ 1220.430229][T15176] [ 1220.430241][T15176] dump_stack_lvl+0x100/0x190 [ 1220.430280][T15176] print_report+0x13d/0x4b0 [ 1220.430332][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.430375][T15176] ? __virt_addr_valid+0x239/0x430 [ 1220.430413][T15176] ? v4l2_open+0x351/0x490 [ 1220.430447][T15176] kasan_report+0xdf/0x1d0 [ 1220.430500][T15176] ? v4l2_open+0x351/0x490 [ 1220.430542][T15176] v4l2_open+0x351/0x490 [ 1220.430581][T15176] ? __pfx_v4l2_open+0x10/0x10 [ 1220.430617][T15176] chrdev_open+0x234/0x6a0 [ 1220.430653][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1220.430688][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.430731][T15176] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1220.430780][T15176] do_dentry_open+0x6d8/0x1660 [ 1220.430835][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1220.430871][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.430917][T15176] vfs_open+0x82/0x3f0 [ 1220.430954][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.431005][T15176] path_openat+0x208c/0x31a0 [ 1220.431048][T15176] ? __pfx_path_openat+0x10/0x10 [ 1220.431092][T15176] do_file_open+0x20e/0x430 [ 1220.431129][T15176] ? __pfx_do_file_open+0x10/0x10 [ 1220.431181][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.431224][T15176] ? alloc_fd+0x476/0x790 [ 1220.431261][T15176] ? do_getname+0x191/0x390 [ 1220.431307][T15176] do_sys_openat2+0x10d/0x1e0 [ 1220.431348][T15176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1220.431391][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.431441][T15176] __x64_sys_openat+0x12d/0x210 [ 1220.431485][T15176] ? __pfx___x64_sys_openat+0x10/0x10 [ 1220.431533][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1220.431576][T15176] ? rcu_is_watching+0x12/0xc0 [ 1220.431631][T15176] do_syscall_64+0x10b/0xf80 [ 1220.431666][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.431703][T15176] RIP: 0033:0x7fc15d6a7407 [ 1220.431729][T15176] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1220.431764][T15176] RSP: 002b:00007ffd3d007a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1220.431797][T15176] RAX: ffffffffffffffda RBX: 00007fc15dd70880 RCX: 00007fc15d6a7407 [ 1220.431820][T15176] RDX: 0000000000000000 RSI: 00007ffd3d008f1b RDI: ffffffffffffff9c [ 1220.431843][T15176] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1220.431863][T15176] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1220.431884][T15176] R13: 00007ffd3d007cd0 R14: 00007fc15ded7000 R15: 00005646456ba4d8 [ 1220.431920][T15176] [ 1220.431931][T15176] [ 1220.707952][T15176] Allocated by task 10: [ 1220.712103][T15176] kasan_save_stack+0x30/0x50 [ 1220.716803][T15176] kasan_save_track+0x14/0x30 [ 1220.721498][T15176] __kasan_kmalloc+0xaa/0xb0 [ 1220.726102][T15176] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1220.731414][T15176] em28xx_init_extension+0x13a/0x200 [ 1220.736716][T15176] request_module_async+0x61/0x80 [ 1220.741755][T15176] process_one_work+0xa0e/0x1980 [ 1220.746709][T15176] worker_thread+0x5ef/0xe50 [ 1220.751312][T15176] kthread+0x370/0x450 [ 1220.755392][T15176] ret_from_fork+0x72b/0xd50 [ 1220.760001][T15176] ret_from_fork_asm+0x1a/0x30 [ 1220.764800][T15176] [ 1220.767131][T15176] Freed by task 10: [ 1220.770932][T15176] kasan_save_stack+0x30/0x50 [ 1220.775646][T15176] kasan_save_track+0x14/0x30 [ 1220.780347][T15176] kasan_save_free_info+0x3b/0x70 [ 1220.785382][T15176] __kasan_slab_free+0x5f/0x80 [ 1220.790167][T15176] kfree+0x223/0x6c0 [ 1220.794067][T15176] kref_put.isra.0+0x53/0x75 [ 1220.798684][T15176] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1220.804087][T15176] em28xx_init_extension+0x13a/0x200 [ 1220.809389][T15176] request_module_async+0x61/0x80 [ 1220.814428][T15176] process_one_work+0xa0e/0x1980 [ 1220.819387][T15176] worker_thread+0x5ef/0xe50 [ 1220.823994][T15176] kthread+0x370/0x450 [ 1220.828077][T15176] ret_from_fork+0x72b/0xd50 [ 1220.832678][T15176] ret_from_fork_asm+0x1a/0x30 [ 1220.837463][T15176] [ 1220.839774][T15176] The buggy address belongs to the object at ffff8880a83b4000 [ 1220.839774][T15176] which belongs to the cache kmalloc-8k of size 8192 [ 1220.853827][T15176] The buggy address is located 2144 bytes inside of [ 1220.853827][T15176] freed 8192-byte region [ffff8880a83b4000, ffff8880a83b6000) [ 1220.867805][T15176] [ 1220.870128][T15176] The buggy address belongs to the physical page: [ 1220.876533][T15176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa83b0 [ 1220.885300][T15176] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1220.893801][T15176] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1220.901355][T15176] page_type: f5(slab) [ 1220.905351][T15176] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1220.913943][T15176] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1220.922538][T15176] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1220.931223][T15176] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1220.939903][T15176] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1220.948581][T15176] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1220.957247][T15176] page dumped because: kasan: bad access detected [ 1220.963650][T15176] page_owner tracks the page as allocated [ 1220.969353][T15176] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12626, tgid 12626 (syz-executor), ts 999563796309, free_ts 888799570219 [ 1220.990909][T15176] post_alloc_hook+0xfd/0x120 [ 1220.995618][T15176] get_page_from_freelist+0x11a6/0x33b0 [ 1221.001185][T15176] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1221.007098][T15176] new_slab+0xa6/0x6c0 [ 1221.011175][T15176] refill_objects+0x277/0x420 [ 1221.015862][T15176] __pcs_replace_empty_main+0x375/0x650 [ 1221.021422][T15176] __kvmalloc_node_noprof+0x7da/0xa00 [ 1221.026812][T15176] tun_attach.isra.0+0x8ef/0x17b0 [ 1221.031870][T15176] tun_net_init+0x416/0x560 [ 1221.036402][T15176] register_netdevice+0x685/0x24b0 [ 1221.041529][T15176] __tun_chr_ioctl+0x1ded/0x47c0 [ 1221.046493][T15176] __x64_sys_ioctl+0x18e/0x210 [ 1221.051286][T15176] do_syscall_64+0x10b/0xf80 [ 1221.055887][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.061791][T15176] page last free pid 23 tgid 23 stack trace: [ 1221.067769][T15176] __free_frozen_pages+0x747/0x1040 [ 1221.072998][T15176] tlb_remove_table_rcu+0x2cf/0x380 [ 1221.078208][T15176] rcu_core+0x5a2/0x10d0 [ 1221.082465][T15176] handle_softirqs+0x1ea/0xa00 [ 1221.087252][T15176] run_ksoftirqd+0x38/0x60 [ 1221.091688][T15176] smpboot_thread_fn+0x3d3/0xaa0 [ 1221.096629][T15176] kthread+0x370/0x450 [ 1221.100706][T15176] ret_from_fork+0x72b/0xd50 [ 1221.105320][T15176] ret_from_fork_asm+0x1a/0x30 [ 1221.110103][T15176] [ 1221.112418][T15176] Memory state around the buggy address: [ 1221.118041][T15176] ffff8880a83b4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1221.126101][T15176] ffff8880a83b4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1221.134162][T15176] >ffff8880a83b4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1221.142218][T15176] ^ [ 1221.149422][T15176] ffff8880a83b4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1221.157489][T15176] ffff8880a83b4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1221.165550][T15176] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1221.574444][T15176] Disabling lock debugging due to kernel taint [ 1221.581595][T15176] ================================================================== [ 1221.589674][T15176] BUG: KASAN: slab-use-after-free in kobject_put+0x590/0x640 [ 1221.597081][T15176] Read of size 1 at addr ffff8880a83b42f4 by task v4l_id/15176 [ 1221.604643][T15176] [ 1221.606979][T15176] CPU: 1 UID: 0 PID: 15176 Comm: v4l_id Tainted: G B L syzkaller #0 PREEMPT(full) [ 1221.607056][T15176] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1221.607073][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1221.607098][T15176] Call Trace: [ 1221.607110][T15176] [ 1221.607125][T15176] dump_stack_lvl+0x100/0x190 [ 1221.607171][T15176] print_report+0x13d/0x4b0 [ 1221.607245][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.607302][T15176] ? __virt_addr_valid+0x239/0x430 [ 1221.607350][T15176] ? kobject_put+0x590/0x640 [ 1221.607387][T15176] kasan_report+0xdf/0x1d0 [ 1221.607441][T15176] ? kobject_put+0x590/0x640 [ 1221.607482][T15176] kobject_put+0x590/0x640 [ 1221.607522][T15176] put_device+0x1f/0x30 [ 1221.607586][T15176] v4l2_open+0x2e5/0x490 [ 1221.607632][T15176] ? __pfx_v4l2_open+0x10/0x10 [ 1221.607678][T15176] chrdev_open+0x234/0x6a0 [ 1221.607717][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1221.607752][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.607795][T15176] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1221.607844][T15176] do_dentry_open+0x6d8/0x1660 [ 1221.607899][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1221.607935][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.607980][T15176] vfs_open+0x82/0x3f0 [ 1221.608023][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.608069][T15176] path_openat+0x208c/0x31a0 [ 1221.608111][T15176] ? __pfx_path_openat+0x10/0x10 [ 1221.608154][T15176] do_file_open+0x20e/0x430 [ 1221.608190][T15176] ? __pfx_do_file_open+0x10/0x10 [ 1221.608241][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.608283][T15176] ? alloc_fd+0x476/0x790 [ 1221.608320][T15176] ? do_getname+0x191/0x390 [ 1221.608366][T15176] do_sys_openat2+0x10d/0x1e0 [ 1221.608406][T15176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.608449][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.608498][T15176] __x64_sys_openat+0x12d/0x210 [ 1221.608541][T15176] ? __pfx___x64_sys_openat+0x10/0x10 [ 1221.608588][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1221.608631][T15176] ? rcu_is_watching+0x12/0xc0 [ 1221.608686][T15176] do_syscall_64+0x10b/0xf80 [ 1221.608721][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.608757][T15176] RIP: 0033:0x7fc15d6a7407 [ 1221.608784][T15176] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1221.608819][T15176] RSP: 002b:00007ffd3d007a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1221.608853][T15176] RAX: ffffffffffffffda RBX: 00007fc15dd70880 RCX: 00007fc15d6a7407 [ 1221.608876][T15176] RDX: 0000000000000000 RSI: 00007ffd3d008f1b RDI: ffffffffffffff9c [ 1221.608900][T15176] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1221.608921][T15176] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1221.608943][T15176] R13: 00007ffd3d007cd0 R14: 00007fc15ded7000 R15: 00005646456ba4d8 [ 1221.608977][T15176] [ 1221.608989][T15176] [ 1221.895145][T15176] Allocated by task 10: [ 1221.899294][T15176] kasan_save_stack+0x30/0x50 [ 1221.903999][T15176] kasan_save_track+0x14/0x30 [ 1221.908698][T15176] __kasan_kmalloc+0xaa/0xb0 [ 1221.913304][T15176] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1221.918619][T15176] em28xx_init_extension+0x13a/0x200 [ 1221.923925][T15176] request_module_async+0x61/0x80 [ 1221.928973][T15176] process_one_work+0xa0e/0x1980 [ 1221.933928][T15176] worker_thread+0x5ef/0xe50 [ 1221.938539][T15176] kthread+0x370/0x450 [ 1221.942620][T15176] ret_from_fork+0x72b/0xd50 [ 1221.947233][T15176] ret_from_fork_asm+0x1a/0x30 [ 1221.952021][T15176] [ 1221.954332][T15176] Freed by task 10: [ 1221.958131][T15176] kasan_save_stack+0x30/0x50 [ 1221.962824][T15176] kasan_save_track+0x14/0x30 [ 1221.967526][T15176] kasan_save_free_info+0x3b/0x70 [ 1221.972562][T15176] __kasan_slab_free+0x5f/0x80 [ 1221.977355][T15176] kfree+0x223/0x6c0 [ 1221.981261][T15176] kref_put.isra.0+0x53/0x75 [ 1221.985911][T15176] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1221.991324][T15176] em28xx_init_extension+0x13a/0x200 [ 1221.996625][T15176] request_module_async+0x61/0x80 [ 1222.001663][T15176] process_one_work+0xa0e/0x1980 [ 1222.006613][T15176] worker_thread+0x5ef/0xe50 [ 1222.011211][T15176] kthread+0x370/0x450 [ 1222.015297][T15176] ret_from_fork+0x72b/0xd50 [ 1222.019894][T15176] ret_from_fork_asm+0x1a/0x30 [ 1222.024705][T15176] [ 1222.027022][T15176] The buggy address belongs to the object at ffff8880a83b4000 [ 1222.027022][T15176] which belongs to the cache kmalloc-8k of size 8192 [ 1222.041079][T15176] The buggy address is located 756 bytes inside of [ 1222.041079][T15176] freed 8192-byte region [ffff8880a83b4000, ffff8880a83b6000) [ 1222.054973][T15176] [ 1222.057285][T15176] The buggy address belongs to the physical page: [ 1222.063685][T15176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa83b0 [ 1222.072453][T15176] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1222.080950][T15176] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1222.088502][T15176] page_type: f5(slab) [ 1222.092490][T15176] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1222.101085][T15176] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1222.109688][T15176] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1222.118365][T15176] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1222.127048][T15176] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1222.135725][T15176] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1222.144389][T15176] page dumped because: kasan: bad access detected [ 1222.150795][T15176] page_owner tracks the page as allocated [ 1222.156497][T15176] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12626, tgid 12626 (syz-executor), ts 999563796309, free_ts 888799570219 [ 1222.178052][T15176] post_alloc_hook+0xfd/0x120 [ 1222.182745][T15176] get_page_from_freelist+0x11a6/0x33b0 [ 1222.188313][T15176] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1222.194231][T15176] new_slab+0xa6/0x6c0 [ 1222.198308][T15176] refill_objects+0x277/0x420 [ 1222.202997][T15176] __pcs_replace_empty_main+0x375/0x650 [ 1222.208564][T15176] __kvmalloc_node_noprof+0x7da/0xa00 [ 1222.213954][T15176] tun_attach.isra.0+0x8ef/0x17b0 [ 1222.219008][T15176] tun_net_init+0x416/0x560 [ 1222.223550][T15176] register_netdevice+0x685/0x24b0 [ 1222.228687][T15176] __tun_chr_ioctl+0x1ded/0x47c0 [ 1222.233659][T15176] __x64_sys_ioctl+0x18e/0x210 [ 1222.238452][T15176] do_syscall_64+0x10b/0xf80 [ 1222.243043][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.248952][T15176] page last free pid 23 tgid 23 stack trace: [ 1222.254927][T15176] __free_frozen_pages+0x747/0x1040 [ 1222.260134][T15176] tlb_remove_table_rcu+0x2cf/0x380 [ 1222.265344][T15176] rcu_core+0x5a2/0x10d0 [ 1222.269613][T15176] handle_softirqs+0x1ea/0xa00 [ 1222.274395][T15176] run_ksoftirqd+0x38/0x60 [ 1222.278831][T15176] smpboot_thread_fn+0x3d3/0xaa0 [ 1222.283775][T15176] kthread+0x370/0x450 [ 1222.287862][T15176] ret_from_fork+0x72b/0xd50 [ 1222.292471][T15176] ret_from_fork_asm+0x1a/0x30 [ 1222.297265][T15176] [ 1222.299579][T15176] Memory state around the buggy address: [ 1222.305204][T15176] ffff8880a83b4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1222.313269][T15176] ffff8880a83b4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1222.321345][T15176] >ffff8880a83b4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1222.329406][T15176] ^ [ 1222.337122][T15176] ffff8880a83b4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1222.345189][T15176] ffff8880a83b4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1222.353249][T15176] ================================================================== [ 1222.400723][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input77 [ 1222.498379][T15176] ================================================================== [ 1222.506550][T15176] BUG: KASAN: slab-use-after-free in kobject_put+0x88/0x640 [ 1222.513850][T15176] Write of size 4 at addr ffff8880a83b42f0 by task v4l_id/15176 [ 1222.521483][T15176] [ 1222.523837][T15176] CPU: 1 UID: 0 PID: 15176 Comm: v4l_id Tainted: G B L syzkaller #0 PREEMPT(full) [ 1222.523891][T15176] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1222.523906][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.523928][T15176] Call Trace: [ 1222.523940][T15176] [ 1222.523952][T15176] dump_stack_lvl+0x100/0x190 [ 1222.523991][T15176] print_report+0x13d/0x4b0 [ 1222.524048][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.524091][T15176] ? __virt_addr_valid+0x239/0x430 [ 1222.524129][T15176] ? kobject_put+0x88/0x640 [ 1222.524167][T15176] kasan_report+0xdf/0x1d0 [ 1222.524220][T15176] ? kobject_put+0x88/0x640 [ 1222.524262][T15176] kasan_check_range+0x10f/0x1e0 [ 1222.524297][T15176] kobject_put+0x88/0x640 [ 1222.524335][T15176] put_device+0x1f/0x30 [ 1222.524390][T15176] v4l2_open+0x2e5/0x490 [ 1222.524426][T15176] ? __pfx_v4l2_open+0x10/0x10 [ 1222.524461][T15176] chrdev_open+0x234/0x6a0 [ 1222.524496][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1222.524532][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.524575][T15176] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1222.524622][T15176] do_dentry_open+0x6d8/0x1660 [ 1222.524678][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1222.524714][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.524759][T15176] vfs_open+0x82/0x3f0 [ 1222.524796][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.524854][T15176] path_openat+0x208c/0x31a0 [ 1222.524896][T15176] ? __pfx_path_openat+0x10/0x10 [ 1222.524940][T15176] do_file_open+0x20e/0x430 [ 1222.524977][T15176] ? __pfx_do_file_open+0x10/0x10 [ 1222.525031][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.525075][T15176] ? alloc_fd+0x476/0x790 [ 1222.525112][T15176] ? do_getname+0x191/0x390 [ 1222.525157][T15176] do_sys_openat2+0x10d/0x1e0 [ 1222.525199][T15176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1222.525241][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.525291][T15176] __x64_sys_openat+0x12d/0x210 [ 1222.525333][T15176] ? __pfx___x64_sys_openat+0x10/0x10 [ 1222.525381][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1222.525424][T15176] ? rcu_is_watching+0x12/0xc0 [ 1222.525479][T15176] do_syscall_64+0x10b/0xf80 [ 1222.525514][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.525551][T15176] RIP: 0033:0x7fc15d6a7407 [ 1222.525577][T15176] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1222.525612][T15176] RSP: 002b:00007ffd3d007a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1222.525645][T15176] RAX: ffffffffffffffda RBX: 00007fc15dd70880 RCX: 00007fc15d6a7407 [ 1222.525669][T15176] RDX: 0000000000000000 RSI: 00007ffd3d008f1b RDI: ffffffffffffff9c [ 1222.525692][T15176] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1222.525714][T15176] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1222.525736][T15176] R13: 00007ffd3d007cd0 R14: 00007fc15ded7000 R15: 00005646456ba4d8 [ 1222.525770][T15176] [ 1222.525782][T15176] [ 1222.816476][T15176] Allocated by task 10: [ 1222.820626][T15176] kasan_save_stack+0x30/0x50 [ 1222.825332][T15176] kasan_save_track+0x14/0x30 [ 1222.830029][T15176] __kasan_kmalloc+0xaa/0xb0 [ 1222.834632][T15176] em28xx_v4l2_init.cold+0x94/0x3a40 [ 1222.839947][T15176] em28xx_init_extension+0x13a/0x200 [ 1222.845245][T15176] request_module_async+0x61/0x80 [ 1222.850294][T15176] process_one_work+0xa0e/0x1980 [ 1222.855242][T15176] worker_thread+0x5ef/0xe50 [ 1222.859854][T15176] kthread+0x370/0x450 [ 1222.863937][T15176] ret_from_fork+0x72b/0xd50 [ 1222.868627][T15176] ret_from_fork_asm+0x1a/0x30 [ 1222.873453][T15176] [ 1222.875779][T15176] Freed by task 10: [ 1222.879575][T15176] kasan_save_stack+0x30/0x50 [ 1222.884274][T15176] kasan_save_track+0x14/0x30 [ 1222.888982][T15176] kasan_save_free_info+0x3b/0x70 [ 1222.894014][T15176] __kasan_slab_free+0x5f/0x80 [ 1222.898801][T15176] kfree+0x223/0x6c0 [ 1222.902705][T15176] kref_put.isra.0+0x53/0x75 [ 1222.907329][T15176] em28xx_v4l2_init.cold+0x280/0x3a40 [ 1222.912730][T15176] em28xx_init_extension+0x13a/0x200 [ 1222.918034][T15176] request_module_async+0x61/0x80 [ 1222.923079][T15176] process_one_work+0xa0e/0x1980 [ 1222.928031][T15176] worker_thread+0x5ef/0xe50 [ 1222.932643][T15176] kthread+0x370/0x450 [ 1222.936718][T15176] ret_from_fork+0x72b/0xd50 [ 1222.941325][T15176] ret_from_fork_asm+0x1a/0x30 [ 1222.946108][T15176] [ 1222.948419][T15176] The buggy address belongs to the object at ffff8880a83b4000 [ 1222.948419][T15176] which belongs to the cache kmalloc-8k of size 8192 [ 1222.962472][T15176] The buggy address is located 752 bytes inside of [ 1222.962472][T15176] freed 8192-byte region [ffff8880a83b4000, ffff8880a83b6000) [ 1222.976358][T15176] [ 1222.978670][T15176] The buggy address belongs to the physical page: [ 1222.985076][T15176] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa83b0 [ 1222.993838][T15176] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1223.002349][T15176] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1223.009895][T15176] page_type: f5(slab) [ 1223.013878][T15176] raw: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1223.022468][T15176] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1223.031073][T15176] head: 00fff00000000040 ffff88813fe35280 dead000000000100 dead000000000122 [ 1223.039761][T15176] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1223.048444][T15176] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1223.057124][T15176] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1223.065792][T15176] page dumped because: kasan: bad access detected [ 1223.072203][T15176] page_owner tracks the page as allocated [ 1223.077906][T15176] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12626, tgid 12626 (syz-executor), ts 999563796309, free_ts 888799570219 [ 1223.099474][T15176] post_alloc_hook+0xfd/0x120 [ 1223.104171][T15176] get_page_from_freelist+0x11a6/0x33b0 [ 1223.109736][T15176] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1223.115651][T15176] new_slab+0xa6/0x6c0 [ 1223.119746][T15176] refill_objects+0x277/0x420 [ 1223.124439][T15176] __pcs_replace_empty_main+0x375/0x650 [ 1223.130004][T15176] __kvmalloc_node_noprof+0x7da/0xa00 [ 1223.135413][T15176] tun_attach.isra.0+0x8ef/0x17b0 [ 1223.140489][T15176] tun_net_init+0x416/0x560 [ 1223.145020][T15176] register_netdevice+0x685/0x24b0 [ 1223.150159][T15176] __tun_chr_ioctl+0x1ded/0x47c0 [ 1223.155134][T15176] __x64_sys_ioctl+0x18e/0x210 [ 1223.159930][T15176] do_syscall_64+0x10b/0xf80 [ 1223.164528][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.170437][T15176] page last free pid 23 tgid 23 stack trace: [ 1223.176414][T15176] __free_frozen_pages+0x747/0x1040 [ 1223.181623][T15176] tlb_remove_table_rcu+0x2cf/0x380 [ 1223.186834][T15176] rcu_core+0x5a2/0x10d0 [ 1223.191100][T15176] handle_softirqs+0x1ea/0xa00 [ 1223.195882][T15176] run_ksoftirqd+0x38/0x60 [ 1223.200330][T15176] smpboot_thread_fn+0x3d3/0xaa0 [ 1223.205279][T15176] kthread+0x370/0x450 [ 1223.209373][T15176] ret_from_fork+0x72b/0xd50 [ 1223.213982][T15176] ret_from_fork_asm+0x1a/0x30 [ 1223.218783][T15176] [ 1223.221106][T15176] Memory state around the buggy address: [ 1223.226752][T15176] ffff8880a83b4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1223.234829][T15176] ffff8880a83b4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1223.242892][T15176] >ffff8880a83b4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1223.250947][T15176] ^ [ 1223.258655][T15176] ffff8880a83b4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1223.266716][T15176] ffff8880a83b4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1223.274777][T15176] ================================================================== [ 1223.355342][ T5751] usb 1-1: config 0 descriptor?? [ 1223.478518][ T5751] usb 1-1: can't set config #0, error -71 [ 1223.489158][ T10] em28xx 5-1:0.89: Remote control support is not available for this card. [ 1223.501774][ T9482] em28xx 5-1:0.89: Closing input extension [ 1223.532079][ T9482] em28xx 5-1:0.89: Deregistering snapshot button [ 1223.612504][ T9] usb 4-1: USB disconnect, device number 20 [ 1223.623400][ T5751] usb 1-1: USB disconnect, device number 4 [ 1223.917403][T15176] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 1223.925196][T15176] CPU: 1 UID: 0 PID: 15176 Comm: v4l_id Tainted: G B L syzkaller #0 PREEMPT(full) [ 1223.935838][T15176] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1223.941380][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1223.951444][T15176] Call Trace: [ 1223.954726][T15176] [ 1223.957660][T15176] dump_stack_lvl+0x100/0x190 [ 1223.962357][T15176] vpanic+0x552/0x970 [ 1223.966356][T15176] ? __pfx_vpanic+0x10/0x10 [ 1223.970877][T15176] ? __pfx___schedule+0x10/0x10 [ 1223.975761][T15176] ? kobject_put+0x88/0x640 [ 1223.980277][T15176] panic+0xd1/0xe0 [ 1223.984009][T15176] ? __pfx_panic+0x10/0x10 [ 1223.988439][T15176] ? preempt_schedule_common+0x42/0xc0 [ 1223.993937][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1223.999592][T15176] ? preempt_schedule_thunk+0x16/0x30 [ 1224.005007][T15176] end_report.part.0+0x68/0x90 [ 1224.009811][T15176] kasan_report.cold+0xe/0x18 [ 1224.014523][T15176] ? kobject_put+0x88/0x640 [ 1224.019050][T15176] kasan_check_range+0x10f/0x1e0 [ 1224.024004][T15176] kobject_put+0x88/0x640 [ 1224.028360][T15176] put_device+0x1f/0x30 [ 1224.032548][T15176] v4l2_open+0x2e5/0x490 [ 1224.036808][T15176] ? __pfx_v4l2_open+0x10/0x10 [ 1224.041607][T15176] chrdev_open+0x234/0x6a0 [ 1224.046045][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1224.050994][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1224.056655][T15176] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1224.063013][T15176] do_dentry_open+0x6d8/0x1660 [ 1224.067830][T15176] ? __pfx_chrdev_open+0x10/0x10 [ 1224.072784][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1224.078444][T15176] vfs_open+0x82/0x3f0 [ 1224.082536][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1224.088191][T15176] path_openat+0x208c/0x31a0 [ 1224.092806][T15176] ? __pfx_path_openat+0x10/0x10 [ 1224.097852][T15176] do_file_open+0x20e/0x430 [ 1224.102371][T15176] ? __pfx_do_file_open+0x10/0x10 [ 1224.107419][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1224.113069][T15176] ? alloc_fd+0x476/0x790 [ 1224.117410][T15176] ? do_getname+0x191/0x390 [ 1224.121932][T15176] do_sys_openat2+0x10d/0x1e0 [ 1224.126630][T15176] ? __pfx_do_sys_openat2+0x10/0x10 [ 1224.131849][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1224.137516][T15176] __x64_sys_openat+0x12d/0x210 [ 1224.142392][T15176] ? __pfx___x64_sys_openat+0x10/0x10 [ 1224.147789][T15176] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1224.153445][T15176] ? rcu_is_watching+0x12/0xc0 [ 1224.158248][T15176] do_syscall_64+0x10b/0xf80 [ 1224.162852][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.168762][T15176] RIP: 0033:0x7fc15d6a7407 [ 1224.173182][T15176] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1224.192808][T15176] RSP: 002b:00007ffd3d007a80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1224.201240][T15176] RAX: ffffffffffffffda RBX: 00007fc15dd70880 RCX: 00007fc15d6a7407 [ 1224.209221][T15176] RDX: 0000000000000000 RSI: 00007ffd3d008f1b RDI: ffffffffffffff9c [ 1224.217197][T15176] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1224.225172][T15176] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1224.233149][T15176] R13: 00007ffd3d007cd0 R14: 00007fc15ded7000 R15: 00005646456ba4d8 [ 1224.241138][T15176] [ 1224.244365][T15176] Kernel Offset: disabled [ 1224.248679][T15176] Rebooting in 86400 seconds..