last executing test programs: 23m39.028653115s ago: executing program 32 (id=112): openat$mice(0xffffff9c, &(0x7f00000002c0), 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r2, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80000) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz1\x00', 0x3c}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 23m6.653232352s ago: executing program 33 (id=150): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x28) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)={0xa0000013}) close_range(r0, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r8, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2a}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r10 = socket$kcm(0x2d, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000080)={r10}) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') 23m4.461702167s ago: executing program 34 (id=152): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x10) socket$kcm(0x10, 0x2, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) connect$inet(r0, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x44084) 19m5.182722779s ago: executing program 35 (id=514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}, {0x0}]}, 0x2, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x5, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0x0, 0x0}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2c8, 0xffffffff, 0xffffffff, 0x2c8, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'vcan0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r7, &(0x7f00000006c0)=[{0xe, 0x0, 0x0, 0xfd, @tick, {}, {0xe}, @connect={{0x4, 0x6}, {0x0, 0x3}}}], 0x1c) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 16m14.081720637s ago: executing program 36 (id=771): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc04c5609, 0x0) r3 = signalfd(r0, &(0x7f00000002c0)={[0x8]}, 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x100079af, 0x0, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2}) r8 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x80200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r8, 0x404c534a, &(0x7f0000000200)={0x7, 0x800, 0x5}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x30) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0xfffffffc, 0x10001, 0x1, 0x800, 0x15, "66e2c3908200"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r10, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$USBDEVFS_CONNECTINFO(r10, 0x40085511, &(0x7f0000000280)) 16m4.412844518s ago: executing program 37 (id=782): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000826000/0x1000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 13m32.240353295s ago: executing program 2 (id=972): syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x100) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) syz_pidfd_open(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f36006e090890e0878f0e1ac6e7049b3341959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x28d0}, 0x4) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m29.117334119s ago: executing program 2 (id=976): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x3, 0x1, 0x12, 0x2000000000800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(0x0, 0x102, 0xac6500) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, 0x0, 0x8040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8000) ioctl$EVIOCGPHYS(r6, 0x80404507, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@grpid}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) 13m26.056224286s ago: executing program 2 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000025000/0x2000)=nil, 0x2000, 0x3) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) unshare(0x22020400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r4}, 0x18) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x9, 0x0, 0x2, r2, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file1\x00'}, 0x6e) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x4, 0xe6e67000, 0x4, r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r7 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) ioctl$VIDIOC_QUERYMENU(r7, 0xc02c5625, &(0x7f00000000c0)={0xf00001, 0x9, @value=0x7fffffff}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 13m24.877536825s ago: executing program 7 (id=980): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000002c0)={{0xdddd2000, 0xeeee8000, 0xb, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xe, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x1}, {0xeeee0000, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6}, {0x4, 0xdddd1000, 0xf, 0xc, 0x1, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xb, 0xc, 0x8, 0x6, 0x2, 0x14}, {0x4, 0x9000, 0x10, 0x0, 0xdc, 0x3, 0xf8, 0x81, 0x1, 0x8, 0x0, 0x81}, {0x166672000, 0x0, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0x6000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000, 0x5}, {0xeeeeb000, 0x1}, 0x1, 0x0, 0x6000, 0x40504, 0x9, 0x9801, 0x1000, [0x9, 0x1, 0x5f, 0x3c4]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) 13m23.822610075s ago: executing program 7 (id=982): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) 13m23.349608484s ago: executing program 2 (id=983): socket$inet6(0xa, 0x2, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_io_uring_setup(0x3c92, &(0x7f00000002c0)={0x0, 0xa609, 0x1, 0x8000, 0x50024f}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0x84, &(0x7f0000000100)={0x0, 0x3f7, 0x3, 0x0, 0x2, 0x7fff, 0x9, 0x7, {0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0x7, 0x4, 0x1, 0x5}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r7, 0x0, r3}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 13m22.070997315s ago: executing program 2 (id=985): syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) epoll_create1(0xa1b80e0ec192df95) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x100) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) syz_pidfd_open(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x28d0}, 0x4) r6 = gettid() r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r7, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13m22.04204503s ago: executing program 7 (id=986): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000003c0)={0x3, 0x1, 0x12, 0x2000000000800}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(0x0, 0x102, 0xac6500) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, 0x0, 0x8040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x8000) ioctl$EVIOCGPHYS(r6, 0x80404507, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@grpid}]}, 0x3, 0x4f8, &(0x7f0000000140)="$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") r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) 13m20.020093631s ago: executing program 38 (id=966): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000008100001ffffffe9000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r4 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x3b53, 0x10000, 0x1, 0xd4}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_enter(r4, 0x27e2, 0x0, 0x7, 0x0, 0x0) r5 = io_uring_setup(0x25f5, 0x0) io_uring_enter(r5, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @rand_addr=0x3}}}}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 13m17.440374684s ago: executing program 7 (id=989): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_submit(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x1}}], 0x5, 0x4040000) close(0x3) 13m16.093872906s ago: executing program 7 (id=991): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x310f000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67c044564934db01395590d790b885e517196ffa5c6b", 0x7e}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="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", 0xda8}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b", 0xf}, {&(0x7f0000001040)="c97a88346df6", 0x6}], 0x6) 13m15.439007587s ago: executing program 2 (id=992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 13m15.083022242s ago: executing program 7 (id=993): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 13m0.185789648s ago: executing program 39 (id=992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000500)=""/156, 0x9c}], 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0x3, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffed3, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 12m59.920050521s ago: executing program 40 (id=993): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x4000004) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x0, 0x4}, 'syz1\x00', 0x4b}) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x44) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0xd, 0x2040000, 0x3, 0xfffffffd, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) 11m30.810565525s ago: executing program 0 (id=1132): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0xc008aec1, &(0x7f00000000c0)=0xffff) 11m30.391825665s ago: executing program 0 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)={0x44, r1, 0xd3a8b31d391de849, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "31127ff20df5a999aba5ade85a"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11m29.529001555s ago: executing program 0 (id=1135): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 11m27.688585642s ago: executing program 0 (id=1139): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24c28c8377c1f0ae1469ee52594d0901986ec0a8db4304da11dfb7bd43359182a392c5b8139307ff97b41b8901266ce38b6fe269f771fe3b3413d783ee9f1d655aaa1bf17834be72011f8c0bbca8ddcea41d57c3c85a626b4fb3727de761c94deed7b2607799714096dd53d8355999021f7ba9f0dc6145682e7b494d7182e9cd159cb9f8fe6fcf58c0537ce0a3c32c872d239bc219b4a22d", 0x98}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)}}], 0x1, 0x40) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000600)=""/68, 0x44}], 0x2}, 0x1ff}], 0x1, 0x40, 0x0) 11m26.658968556s ago: executing program 0 (id=1142): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000000c0)=0x46b, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="3303120081fd120000007ef52f", 0xd, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0xcf, 0x6, @local}, 0x14) 11m25.840852656s ago: executing program 0 (id=1144): socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') preadv(r3, 0x0, 0x0, 0xb, 0x1000) socketpair(0x2b, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 11m10.135307936s ago: executing program 41 (id=1144): socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') preadv(r3, 0x0, 0x0, 0xb, 0x1000) socketpair(0x2b, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 10m15.045510785s ago: executing program 4 (id=1273): syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xfb, 0xf8, 0xe6, 0x8, 0xbfd, 0x121, 0xa47d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x56, 0x3, 0x0, 0x0, "", [{{0x9, 0x4, 0x4e, 0x80, 0x2, 0x5b, 0x9d, 0x15, 0x4, [], [{{0x9, 0x5, 0xcd2fc2202b627288, 0x2, 0x400, 0x80, 0x46, 0x3}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xf0, 0x3, 0x5}}]}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0}) 10m12.405454547s ago: executing program 4 (id=1281): r0 = semget$private(0x0, 0x3, 0x22) semctl$SETVAL(r0, 0x3, 0x10, 0x0) 10m11.597143876s ago: executing program 4 (id=1282): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x20, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}], 0x20}}], 0x1, 0x84) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) 10m10.708551663s ago: executing program 4 (id=1285): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 10m8.61476616s ago: executing program 4 (id=1291): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @loopback}, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x8a, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 10m7.707872296s ago: executing program 4 (id=1297): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000300)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x4, 0x7a, 0x40, 0x40, 0x85}, 0x76, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 9m52.382203147s ago: executing program 42 (id=1297): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000300)=ANY=[], &(0x7f0000000880)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0x4, 0x7a, 0x40, 0x40, 0x85}, 0x76, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 9m10.161738114s ago: executing program 3 (id=1430): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) shutdown(r0, 0x1) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r2}, &(0x7f0000000240)=0x8) 9m9.072572383s ago: executing program 3 (id=1435): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x86a, &(0x7f00000000c0)={0x0, 0x2822, 0x400, 0x4, 0xc1}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9m6.49562548s ago: executing program 3 (id=1440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) 9m4.276690783s ago: executing program 3 (id=1446): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{0x0}], 0x1) 9m0.820947588s ago: executing program 3 (id=1455): r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x310f000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67c044564934db01395590d790b885e517196ffa5c6b", 0x7e}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000", 0xd6}, {&(0x7f0000004480)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce66848b7392445ffb232c6b70bff2783564b2a62fa6cf3783f6cf6e84c90162b7cbf0192971f05c597dc20b3c879bd342e9e29e93c8240e8dbb137d3d8fcc8f49b37938a52ef12f7d963ff76b91f1473369d06d500d9b88c4f0e0b0ca9049d6b2f3c1886ff41404fab2855eaf1310fa65425a3e9513e33cee970a08de795368e9fe8055fdc5786010c764b3d3ccebec687d242267e932df33cf50c665ea82f1dcf1af952b0e4bf2e35d3c1bdead12e22b371543769fc19a0d893ebb9d71c4da000e2d18a572fdf7c23d921d959caebfbe3ab9157fc9ab6e3dcb88eaa5a5a8af223d7a25a8f198b10dedf68b6d2759a806b6a5bcf3693734ceebeea16b995304511db8d97b62f548213c614bc2dd9b843450eb575c8a8f290af70331a269f1cab6fd6e1f9ef687d80952ba7f14da8cf892d0a5b16dd181d8a7b780055d3b79782a2f4c29c6b9c64bdcde1175ef26c75d0bca19e2be27acb3fdf22a7cff8a659899de59fb2d3e4920881a0900958685263b3fb8dafa6402f5812f16de9e53eda3c86520d5267df729d2add8724d7541b60a3e9a4b70b5f1af83e81071d7e3eb6a9817383632008fbfff89f1c1ab39d9d898d555a0190fa11c8bdfd2d1b49d06fc56acdc426568ccbebbf6f3ce278148f319a1f84adcfb49a675c6d119f52e10386cdd0740199b20087f7c8f75d93959e39d2948a17789f6c6fda65dcb42743b466bcdd06bbe7afccd2b59c0c3f4dc62b8cee2a785ce704bbc47f480079b5f21ace7e5f2f149360370e866565af026b14ec4d9214884661156b5313c233ef1abd2807eb9b586845e3df8001e56b8d4f7c5c9b7e46b81e278ea0a7afb8286183285c390558d750277a7d72a6dab2cf1f29b0d4c847991ec65dd1757889dc9a6e94ce22b58e25cfac06c73532a53663a27208daaf3b4ad5a8c74e4e62b160219f49b6983674f7a71e56f45c3df8c13c93b2ed468749843dd8954a0d03acc61e5008ccc5a5db5a42d04abdf112e71e4d5876c3ea0db715648a5bb55b5ffd2377aea32f19a07e610456b5a6dda7ab4e6d11a88a5910f7f394c7a53d7c032e5506c3b26d54cbe73bfb37cda2439b23c785566668d8111570b7004fa565a156e45c9b672c6ebfb4d08bc681de9ea0215a43a1eefe7a0fb72caf494414c61510c00a8c5e37c4efeca3a1d171f44abbca94a9899b299363bbd1ecdc91d19d6a179f00bd958e372916fde873aaa167bb6be50219c76e6bee7a207f43b729eea5c00052eccb9986b6c137019c47f3fc1d69d68569f8c1d97ecc6b3dec37813f358778edfa2515fd9c4ca7e73966942f65c1a3cc9770065836625671725e3617030df067961c50d2e53a1c69d0e116eb9e0c052e71b3bcc85354829b71295cae5ffbcd5c2794fd16f8601ff5d7278693e384d477920e4619be578ac11f4ef327e5c5298d24ba29fddc7317fc90c69ddc991ee2f3a34c40c2afcd77350c008b9f70b76c97f51bd1359d376cfc83ec0f14a183cef8eccc014bf36d8384262edd4bb03f743c4628bccfef1050deafd13bdcbd73a356a8c630cc4f0665420d414c59276ff1d85ef058069a1ea280b9ae476ea9aa64652c4a83b9b086fd02a3372ae9683521d81ce846ce9b030e81b7523e8f5355c26c66d9182b9b3e089917089a07bf5159f1439200ad74d735b020ccb78225a015c76a57c19344556bce75da0d44e88e2227f5f4a90bb00eb27decf0d0dcf1b6dd0f9146f0191a7f58e3c6a1568e747ba674c33fd6715678232ea1385e8e54955e70ce306fad514235c8bc2576e84444a674c149a67d8db5fea81813aa311fa701bc401101b14661b0f091dad3a1895f3d32fc7012e59e090f487fc9f19e878e04c40eb906deedb29cf65839486f11c4fb7d9c1be6a1c95471d939cc0c85f6fead85e4d081ccc6e2a51784ec4d3f0b13796609161bfcb38a029c10b084e87ceff5483ec6c9691b0ad6a3d05e13e8c48d0700cc58b9436d8011c48381d6ca0ac279c3c71a625585c8b257c54fcb9e9d07183ee0d90b0b5255d153fae38c6c25636846c31142f269229ac4a1d35df88eeaa9413dde791642c9b0ce903cef64609886d18df63515de769df208c9db2acda7db5181f52bb99e74f84b01106c8419543ec2b5106623789316cd825995e42d0cf9f8296f2e5155dbaae8113de5c7a1dddfe42770064e2aae3f100f97d890e3e7eb63ca80d1a8c672ae8e8eaee5b838653a20a58171dc78509a55ea2c590bcffe3f0ca7731edecc2cf3e63c8e8ce335a4f9541691282df4f24a208cd1400dce5e40ddde35dd22c9e75ded061cb349d8cbc92bc00f9c9c4ff49fe887ea630ffc66a087065a90e072b56c9386f3cccda4acb0f10538f361cd860a7efec0eb83ea5165d6a6612800a8d6c7426b0916fc6aec0e7d81ee1a57657ac5c32b58d4e573bf820bc67cc0896012ccff2ace1de0b13f70a744e116a300aaffd1a6ad24513532fb9b9452454874a432cb5f5f6fa2f35668e6e3eb98fdc5c15dc5513c44a26d318d2b7372d6dc1da69d342b95ecb05777716264c79f4a3b953d6acc1006318fd352eb92621360d62b1c651c1fa0dec9a9fe674347902228373bed540251eebb2a8ede5e4f47bacf6acde6f8c5b95dc8b8214175d5649994c710709a5bfdd73360c35af7fc2ea4d35f14994bdccce242be14bff1ce7010b1c353479a1f038dc52e76d5d97340d98e3ad783a4ad95a469eee9193c7e5f93d84f847a6710230fb26f6e0122cb3f0400e7c485b704e3916c4fb0340bed2b4e7640b3ea40a9741f32f81e761119919e9e3fe16aba0b691e9d4e8fc959ae97dad37225a0d3fff627d6241fc0826cc863ec6e0a6c78956dc8878bb8c34dec173161c844462baf2a0d40fb6ea7c6bcf6a4501b92b1bf35c9b1c7d09ad3ee84b5c846404062d6fef2e53f4121b3a04341b58c05460bfa09ff6b92275923798897293e4cc80e6ee6facbab718550e838724ac19c2f86ee656fd607106951936eb56a3263819a69525b9d8bd4b1196ae503b6ee7071f881d740c5781040a78168037ccf819e24a9e3b55dc629aa788972a018d72371e2d64905bcc52b68977a5be41c52dfd42c6dd106a073682ef6c1b09c3d6004436bb6f59c06445768c217b3f36cf8f231e5128944f15fca908e1340cb4d175e9da1f15d5cbdf8fdc2493620b62dee93dfcaf1a56f781b04ef16d0b33e774d89deb827c6ccc4cb83d510c5ba6029317379896b3880f1b2d9f08e6aaf1518b9378f87b135c526782c09eb28b5d74d09cae156dc1809ae258753a59a6b453f28580c3f8ca41cd2977fb2c8f78159e5b5360417b2a72e359e8dc3ee76bed00cce7018286ddd88ee211457683b8136380c1f6281c23308dc08943bdcc36a4bd310d097ac2f5603b214fc3616e1092f3f4c2cda3e098709cf98cbfbd20995c8daa7ece6bb4349c17f07c591eebf1a94c94f1211c6e52837c1e75409c7e7c115b3871fc5cdf1262ece5894a9a4cb264931047074ddc6b4cccf6707b160be4558c6cc0d8c7dc2de6b86af7489815c84517d106ba538c1f4ea22ec6fd29cbc76f94467c51684778649d867041e2c952f4717c6d20345c94ad67f343985f7db04bf6010f6f9308d4ec9ed41620efc7c95fd8c596d22d0302654f81f96a31a05b954768deb359c624537a6fdb450ad54324618b14df9e03f82cbf3f7b73f3535bfe44553c0a37dad2070b5c0565111da8ecf31d412b744d897ebc8e98fbb1e25312686539fd021b68ce5cfada2682a617932911350326eab213b43f436b0d65922bfbc459238d54708f39bdff1ee745aa1bf072670fa55a13e146df08c157927326556667f98002b54fe3ed150a59d359c2b481708b92e204dc3b9a30aae1489cfdc37a17669f5b5077945e0a8ae33c8c1c228486a313560773b32b05aec13f3fd9c42a1824d7c82c7b0b04d55064cf7a0924b243cf184567d26bd4095fbe0dc326ca71b0a3dba3b66511ad69cfb9dabcf71b85342db0bb9d23f29b7d1f1213d48e215eaf70e132e8ce34cf5e2dfd93bbbe7420a6db52641d1be52abeccb216193a993a18f0620a70b479776ccc705f095e915b9cc4a0fb62d11228fb1e5bcc0efa78969639969799dbe63f5f27be3d3fd7f2f5134f5ac3abf3a0a5601480296a6b85bea2090bf13c8f3d3c3a7ffa858b20775f249aaea7d753e9129bae065332bad8d783f9967322a2c358147f450fb5d6a7176c8015b33333106d30d2c690781703c18afb5e88423ffd8b6da20901db90e28647cb4727dbed71210db7ab7c9909b6a142e26757f22f742f84148ac2d88c6ec3bb24832a4b9889705571ced0e0d541a6ae909e3aa854c7f52e939c7062563711890e7046f0736b92188fdbae304953dc5e0bf9de92558ef9d41524ea68ec5f380902fd00719afd0bbc77e9b5034004f0820f22cac8ba92557c9186050a8aa7065a5d5d06b7d8b7bd0fcc4a30aaff5fa0bb2fdd85e801b53859dad6151be7c00f68c34ca8fcd96ddf9980d809d28730d1a86d057f2716637bea7ae9c34dcbf69a9e400cf42dfbbea8b03dc34683df85b3696c7570bed2bfee77bcbbaf3035d81a0308371ff1df315c53c66198221e3be1046eab7e71903dea93c388de23a13848d4b1d6109c067f40f67b17ab3dd7554ba9c51fc7b715acf04ff50d5588898c2db0f83c7b3948fe7ce0dbb6fde93de2d6bd3b27487a3f85ae7aa0000000000", 0xda8}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a", 0xe}, {&(0x7f0000001040)="c97a88346df6", 0x6}], 0x6) 9m0.020256851s ago: executing program 3 (id=1458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xa1fa, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x0, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x407ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x8, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x6a, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7fffffff, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x11, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x2, 0x5, 0xce7, 0x7, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x14, 0x8, 0xf76, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x4, 0x1, 0x10000, 0x5, 0x8, 0x4, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 8m44.293667642s ago: executing program 43 (id=1458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0xa1fa, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x5, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x0, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x407ff, 0x5f31, 0x4, 0x0, 0x9, 0x2, 0x9, 0x4, 0x8, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0x6a, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x1, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7fffffff, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x11, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x2, 0x5, 0xce7, 0x7, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x7ffffffe, 0x14, 0x8, 0xf76, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x80000001, 0x9602, 0xa, 0x8, 0x4, 0x4, 0x1, 0x10000, 0x5, 0x8, 0x4, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) 4.763539959s ago: executing program 9 (id=3325): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x22, 0x0, &(0x7f0000000200)) 4.61318339s ago: executing program 1 (id=3327): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r2, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xf3a, 0x2) splice(r0, 0x0, r5, 0x0, 0x1000080, 0x8) write(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xcc, 0x80000000, 0x2d, @local, @mcast1, 0x8, 0x40, 0x2, 0x231b}}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="7ae4995774fcffed99fc01de460d04675c5543609b9458861e06720292aad416f242fb3a990b0205", @ANYBLOB="522ae173b8fc665400"/20, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff25000600ffffffff7a0a18001000000018120000b005c3dc32", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r9) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000400000042bbd7000fadbdf25037c00000400c28004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.481013356s ago: executing program 8 (id=3328): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42c40, 0xa0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(0x0, 0x20fffbfffc) finit_module(r0, 0x0, 0x1) 4.37939542s ago: executing program 6 (id=3329): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'hsr0\x00', @multicast}) 4.198231934s ago: executing program 9 (id=3331): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0)='}', &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000340), &(0x7f0000000400)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @remote, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 3.942637439s ago: executing program 8 (id=3332): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000100)=r1, 0x4) 3.797249278s ago: executing program 1 (id=3333): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880811fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.633912784s ago: executing program 6 (id=3334): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001380)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb8, 0x67, 0xa4f, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c) 3.628304974s ago: executing program 9 (id=3335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) 3.624711366s ago: executing program 5 (id=3336): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$sock(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}, 0x8000) 3.316662551s ago: executing program 8 (id=3337): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3.15313458s ago: executing program 1 (id=3338): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) 3.115498486s ago: executing program 5 (id=3339): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) 2.985434476s ago: executing program 6 (id=3340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000090000000000000001000000850000002800000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.942008897s ago: executing program 9 (id=3341): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x22, 0x0, &(0x7f0000000200)) 2.814496974s ago: executing program 8 (id=3342): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42c40, 0xa0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(0x0, 0x20fffbfffc) finit_module(r0, 0x0, 0x1) 2.64531323s ago: executing program 1 (id=3343): openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r2, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0xf3a, 0x2) splice(r0, 0x0, r5, 0x0, 0x1000080, 0x8) write(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xcc, 0x80000000, 0x2d, @local, @mcast1, 0x8, 0x40, 0x2, 0x231b}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="7ae4995774fcffed99fc01de460d04675c5543609b9458861e06720292aad416f242fb3a990b0205", @ANYBLOB="522ae173b8fc665400"/20, @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff25000600ffffffff7a0a18001000000018120000b005c3dc32", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r8) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000400000042bbd7000fadbdf25037c00000400c28004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.529575483s ago: executing program 5 (id=3344): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0xf, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548cfee54414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3079cffcfd"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 2.372209214s ago: executing program 9 (id=3345): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 2.190766522s ago: executing program 8 (id=3346): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2309e}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.116592489s ago: executing program 6 (id=3347): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x64082000, 0x0, 0x0, 0x7, 0xa18, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x90, 0x0, 0x80, {0x1, 0xfffffffffffffffe, 0x402a, 0x401, 0x4, 0xb77e, {0x6, 0xdf4d, 0x10, 0xa0c, 0x80000000000, 0x8, 0x5, 0x4, 0x3ff, 0xc000, 0x4, r2, 0x0, 0x6, 0xe0000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.972488171s ago: executing program 5 (id=3348): r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/161, 0xa1) getdents64(r0, 0x0, 0x0) 1.938783627s ago: executing program 1 (id=3349): openat(0xffffffffffffff9c, 0x0, 0x101184, 0xc4) r0 = socket$inet(0x2, 0xa, 0x266) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @empty}, {0x0, @multicast}, 0x2e, {0x2, 0x2, @broadcast}, 'macvlan0\x00'}) 747.467886ms ago: executing program 6 (id=3350): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28, 0x0, 0x0, 0xfff}, 0x28) 746.842252ms ago: executing program 5 (id=3351): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="09f8", 0x2) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000000)={[{@check_relaxed}, {@hide}, {@hide}, {@map_normal}, {@utf8}, {@hide}, {@dmode={'dmode', 0x3d, 0x800}}, {@session={'session', 0x3d, 0x54}}, {@block={'block', 0x3d, 0x775be75c0c5b3a59}}]}, 0x1, 0x557, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESDEC=0x0, @ANYRES16=0x0], 0xfd, 0x1b1, &(0x7f0000000d00)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000002c0)) 129.104125ms ago: executing program 8 (id=3352): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 79.574167ms ago: executing program 5 (id=3353): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="eab5", 0x2}], 0x1}, 0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0) 12.916384ms ago: executing program 1 (id=3354): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaac1aaaaaaaaaaaaaaaa88a80c40814f8a1ede4ccb036613006700000106"], 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}, {&(0x7f0000000600)=ANY=[], 0x290}], 0x2}, 0x200400d1) 12.689295ms ago: executing program 9 (id=3355): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) 0s ago: executing program 6 (id=3356): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42c40, 0xa0) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(0x0, 0x20fffbfffc) finit_module(r0, 0x0, 0x1) kernel console output (not intermixed with test programs): cycle [ 1405.439929][ T9] rc_core: IR keymap rc-hauppauge not found [ 1405.469558][ T9] Registered IR keymap rc-empty [ 1405.475078][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.514126][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.539673][T10685] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1405.561103][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1405.592220][T10685] usb 10-1: device descriptor read/8, error -71 [ 1405.640638][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 1405.727981][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.810042][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.830125][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.843153][T10685] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1405.870046][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.913271][T10685] usb 10-1: device descriptor read/8, error -71 [ 1405.930757][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1405.969913][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1406.011746][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1406.053331][T10685] usb usb10-port1: unable to enumerate USB device [ 1406.081888][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1406.139060][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1406.170136][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1406.236630][ T9] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1406.276579][ T9] mceusb 7-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1406.350786][ T9] usb 7-1: USB disconnect, device number 28 [ 1407.457618][T15666] netlink: 'syz.1.2238': attribute type 4 has an invalid length. [ 1410.859800][T10685] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1411.045470][T10685] usb 6-1: Using ep0 maxpacket: 32 [ 1411.094064][T10685] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1411.113477][T10685] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.129713][ T794] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1411.160400][T10685] usb 6-1: config 0 has no interface number 0 [ 1411.179217][T10685] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1411.231237][T15714] netlink: 'syz.1.2251': attribute type 4 has an invalid length. [ 1411.301437][T10685] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1411.313370][ T794] usb 7-1: device descriptor read/64, error -71 [ 1411.329726][T10685] usb 6-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1411.384088][T10685] usb 6-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1411.424285][T10685] usb 6-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1411.476670][T10685] usb 6-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1411.539970][T10685] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1411.583916][ T794] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1411.615189][T10685] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1411.644114][T10685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.672930][T10685] usb 6-1: Product: syz [ 1411.682548][T15720] fuse: Bad value for 'fd' [ 1411.689569][T10685] usb 6-1: Manufacturer: syz [ 1411.694789][T10685] usb 6-1: SerialNumber: syz [ 1411.742080][T10685] usb 6-1: config 0 descriptor?? [ 1411.779914][ T794] usb 7-1: device descriptor read/64, error -71 [ 1411.792852][T15708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1411.812055][T15708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1411.890817][ T794] usb usb7-port1: attempt power cycle [ 1412.105718][T10685] usb 6-1: USB disconnect, device number 34 [ 1412.285945][ T794] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1412.361352][ T794] usb 7-1: device descriptor read/8, error -71 [ 1412.640118][ T794] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1412.681805][ T794] usb 7-1: device descriptor read/8, error -71 [ 1412.796248][ T9] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1412.816726][ T794] usb usb7-port1: unable to enumerate USB device [ 1412.998739][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.035322][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1413.091103][ T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1413.114725][ T9] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.208797][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1413.238805][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.259924][ T9] usb 10-1: Product: syz [ 1413.275634][ T9] usb 10-1: Manufacturer: syz [ 1413.303957][ T9] usb 10-1: SerialNumber: syz [ 1413.381435][ T9] cdc_mbim 10-1:1.0: skipping garbage [ 1413.440361][ T794] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1413.567429][T15727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1413.668976][ T794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.698515][ T794] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.745400][ T794] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1413.764870][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.833717][ T794] usb 6-1: Product: syz [ 1413.848726][ T794] usb 6-1: Manufacturer: syz [ 1413.853646][ T794] usb 6-1: SerialNumber: syz [ 1413.893197][ T794] usb 6-1: config 0 descriptor?? [ 1414.210387][T15727] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1414.461346][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.482594][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.762865][ T9] cdc_mbim 10-1:1.0: bind() failure [ 1414.815122][ T9] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1414.857426][ T9] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1414.906208][ T9] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1414.990418][ T9] usb 10-1: USB disconnect, device number 34 [ 1415.506125][T15757] netlink: 'syz.6.2262': attribute type 4 has an invalid length. [ 1415.744655][T15762] fuse: Bad value for 'fd' [ 1416.411944][T15773] fuse: Bad value for 'fd' [ 1416.520246][ T9] usb 6-1: USB disconnect, device number 35 [ 1419.228471][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1419.354333][T15798] netlink: 'syz.8.2274': attribute type 4 has an invalid length. [ 1419.483715][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.524767][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.559582][ T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1419.639550][ T9] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1419.705526][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.739531][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.747852][ T9] usb 6-1: Product: syz [ 1419.776222][ T9] usb 6-1: Manufacturer: syz [ 1419.780651][T15804] fuse: Invalid rootmode [ 1419.798265][ T9] usb 6-1: SerialNumber: syz [ 1419.843288][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 1420.071553][T15794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1420.080338][T10673] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1420.287502][T10673] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.310770][T10673] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1420.349166][T10673] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1420.389850][T10673] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.406808][T10673] usb 10-1: Product: syz [ 1420.419852][T10673] usb 10-1: Manufacturer: syz [ 1420.424864][T10673] usb 10-1: SerialNumber: syz [ 1420.483170][T10673] usb 10-1: config 0 descriptor?? [ 1420.737783][T15794] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1421.005051][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.048286][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1421.294001][ T9] cdc_mbim 6-1:1.0: bind() failure [ 1421.361839][ T9] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1421.391283][ T9] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1421.420073][ T9] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1421.477764][ T9] usb 6-1: USB disconnect, device number 36 [ 1421.890311][T15836] fuse: Bad value for 'fd' [ 1422.373742][T15839] netlink: 'syz.5.2288': attribute type 4 has an invalid length. [ 1422.918637][T15846] fuse: Invalid rootmode [ 1423.166037][ T9] usb 10-1: USB disconnect, device number 35 [ 1424.962265][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1425.120379][ T794] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1425.129716][ T9] usb 7-1: device descriptor read/64, error -71 [ 1425.159804][T15877] netlink: 'syz.5.2299': attribute type 4 has an invalid length. [ 1425.334968][ T794] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.367474][ T794] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1425.391337][ T9] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1425.413576][ T794] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1425.498551][ T794] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1425.514736][ T794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.539877][ T794] usb 10-1: Product: syz [ 1425.554099][ T9] usb 7-1: device descriptor read/64, error -71 [ 1425.555084][ T794] usb 10-1: Manufacturer: syz [ 1425.624281][ T794] usb 10-1: SerialNumber: syz [ 1425.666773][ T794] cdc_mbim 10-1:1.0: skipping garbage [ 1425.709027][ T9] usb usb7-port1: attempt power cycle [ 1425.829809][T15884] fuse: Unknown parameter '0x0000000000000005' [ 1425.943374][T15875] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1426.081452][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1426.146916][ T9] usb 7-1: device descriptor read/8, error -71 [ 1426.430032][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1426.512017][ T9] usb 7-1: device descriptor read/8, error -71 [ 1426.579261][T15875] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1426.641675][ T9] usb usb7-port1: unable to enumerate USB device [ 1426.793367][T15875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.862266][T15875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.112734][ T794] cdc_mbim 10-1:1.0: bind() failure [ 1427.233072][ T794] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1427.255141][ T794] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1427.278675][ T794] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1427.311923][ T794] usb 10-1: USB disconnect, device number 36 [ 1428.754576][T15912] loop9: detected capacity change from 0 to 16 [ 1428.772173][T15912] erofs (device loop9): mounted with root inode @ nid 36. [ 1429.262342][T15918] netlink: 'syz.9.2310': attribute type 4 has an invalid length. [ 1430.006415][T15932] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1430.210142][ T794] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1430.391890][ T794] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.460466][ T794] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1430.489847][ T794] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1430.567511][ T794] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1430.605964][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.636031][ T794] usb 6-1: Product: syz [ 1430.651201][ T794] usb 6-1: Manufacturer: syz [ 1430.657348][ T794] usb 6-1: SerialNumber: syz [ 1430.686685][ T794] cdc_mbim 6-1:1.0: skipping garbage [ 1430.881828][T10685] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1430.910381][T15930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1431.076521][T10685] usb 10-1: Using ep0 maxpacket: 16 [ 1431.121666][T10685] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.167771][T10685] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1431.220096][T10685] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1431.250237][T10685] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1431.280018][T10685] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1431.328539][T10685] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1431.392959][T10685] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1431.406899][T10685] usb 10-1: Manufacturer: syz [ 1431.446757][T10685] usb 10-1: config 0 descriptor?? [ 1431.549797][T15930] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1431.717199][T15939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.764207][T15939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.811602][T15930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.872379][T15930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.151412][ T794] cdc_mbim 6-1:1.0: bind() failure [ 1432.410395][T10685] rc_core: IR keymap rc-hauppauge not found [ 1432.416488][T10685] Registered IR keymap rc-empty [ 1432.431817][ T794] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1432.440894][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1432.470140][ T794] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1432.494292][ T794] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1432.509913][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1432.546252][ T794] usb 6-1: USB disconnect, device number 37 [ 1432.557511][T10685] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1432.658581][T10685] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input20 [ 1432.747309][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.769934][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.833442][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1432.880136][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1432.920554][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1432.946412][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1432.994021][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1433.042321][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1433.089967][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1433.139816][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1433.161106][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1433.204739][T10685] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1433.252393][T10685] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1433.300143][T10685] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1433.363309][T10685] usb 10-1: USB disconnect, device number 37 [ 1433.427140][T15962] netlink: 'syz.5.2324': attribute type 4 has an invalid length. [ 1434.199949][T15968] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1434.280245][T15968] syzkaller0: entered promiscuous mode [ 1434.285909][T15968] syzkaller0: entered allmulticast mode [ 1434.814774][T15973] loop9: detected capacity change from 0 to 8192 [ 1436.655462][ T24] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1436.849949][ T24] usb 6-1: device descriptor read/64, error -71 [ 1437.090759][T16006] netlink: 'syz.9.2336': attribute type 4 has an invalid length. [ 1437.109875][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1437.150266][ T9] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1437.290221][ T24] usb 6-1: device descriptor read/64, error -71 [ 1437.371132][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1437.408341][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.442450][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1437.459735][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1437.470243][ T24] usb usb6-port1: attempt power cycle [ 1437.538164][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1437.576828][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1437.672122][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1437.708918][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1437.745987][ T9] usb 7-1: Manufacturer: syz [ 1437.771811][ T9] usb 7-1: config 0 descriptor?? [ 1437.852260][ T24] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1437.930624][ T24] usb 6-1: device descriptor read/8, error -71 [ 1438.038187][T16004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.060630][T15956] usb 10-1: new full-speed USB device number 38 using dummy_hcd [ 1438.081037][T16004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.221496][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1438.281926][T15956] usb 10-1: config 0 has no interfaces? [ 1438.287651][T15956] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1438.302727][ T24] usb 6-1: device descriptor read/8, error -71 [ 1438.349767][T15956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.430559][T15956] usb 10-1: config 0 descriptor?? [ 1438.451222][ T24] usb usb6-port1: unable to enumerate USB device [ 1438.469901][ T9] rc_core: IR keymap rc-hauppauge not found [ 1438.475981][ T9] Registered IR keymap rc-empty [ 1438.513412][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.579994][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.622205][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1438.671572][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21 [ 1438.711414][T15956] usb 10-1: USB disconnect, device number 38 [ 1438.797242][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.880651][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.921524][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.943029][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1438.999997][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1439.042267][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1439.082538][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1439.119983][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1439.152988][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1439.190245][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1439.222140][T15956] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1439.258460][ T9] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1439.302432][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1439.382322][ T9] usb 7-1: USB disconnect, device number 37 [ 1439.434111][T15956] usb 10-1: Using ep0 maxpacket: 32 [ 1439.471816][T15956] usb 10-1: config 0 has no interfaces? [ 1439.498986][T15956] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1439.545524][T15956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.611810][T15956] usb 10-1: config 0 descriptor?? [ 1439.893082][T16012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.963835][T16012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.077642][T16027] IPv6: addrconf: prefix option has invalid lifetime [ 1440.970738][T16035] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1441.055151][T16035] syzkaller0: entered promiscuous mode [ 1441.070409][T16035] syzkaller0: entered allmulticast mode [ 1441.356303][T12226] usb 10-1: USB disconnect, device number 39 [ 1441.973430][T12226] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1442.219944][T12226] usb 10-1: Using ep0 maxpacket: 8 [ 1442.269965][T12226] usb 10-1: no configurations [ 1442.274881][T12226] usb 10-1: can't read configurations, error -22 [ 1442.482686][T12226] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1442.730168][T12226] usb 10-1: Using ep0 maxpacket: 8 [ 1442.777703][T12226] usb 10-1: no configurations [ 1442.787734][T12226] usb 10-1: can't read configurations, error -22 [ 1442.834696][T12226] usb usb10-port1: attempt power cycle [ 1443.195135][T16062] netlink: 'syz.5.2349': attribute type 4 has an invalid length. [ 1443.259967][T12226] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1443.332369][T12226] usb 10-1: Using ep0 maxpacket: 8 [ 1443.357012][T12226] usb 10-1: no configurations [ 1443.385357][T12226] usb 10-1: can't read configurations, error -22 [ 1443.554123][T12226] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1443.621805][T12226] usb 10-1: Using ep0 maxpacket: 8 [ 1443.644111][T12226] usb 10-1: no configurations [ 1443.669648][T12226] usb 10-1: can't read configurations, error -22 [ 1443.687627][T12226] usb usb10-port1: unable to enumerate USB device [ 1444.023855][T15956] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1444.026540][T16072] IPv6: addrconf: prefix option has invalid lifetime [ 1444.739799][T15956] usb 6-1: device descriptor read/64, error -71 [ 1445.098396][T15956] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1445.650143][T15956] usb 6-1: device descriptor read/64, error -71 [ 1445.761065][T15956] usb usb6-port1: attempt power cycle [ 1445.771413][T16088] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1445.819929][T16088] syzkaller0: entered promiscuous mode [ 1445.890184][T16088] syzkaller0: entered allmulticast mode [ 1446.119694][T15956] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1446.201402][T15956] usb 6-1: device descriptor read/8, error -71 [ 1446.447967][T15956] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1446.495935][T15956] usb 6-1: device descriptor read/8, error -71 [ 1446.650485][T15956] usb usb6-port1: unable to enumerate USB device [ 1447.441130][T16103] netlink: 'syz.5.2360': attribute type 4 has an invalid length. [ 1448.128725][T16115] IPv6: addrconf: prefix option has invalid lifetime [ 1448.674250][T16121] binder: BINDER_SET_CONTEXT_MGR already set [ 1448.689794][T16121] binder: 16120:16121 ioctl 4018620d 200000000040 returned -16 [ 1448.732147][T16121] binder: 16120:16121 ioctl c0306201 0 returned -14 [ 1449.453324][T12226] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1449.656189][T12226] usb 6-1: Using ep0 maxpacket: 8 [ 1449.684532][T12226] usb 6-1: no configurations [ 1449.703762][T12226] usb 6-1: can't read configurations, error -22 [ 1449.879838][T12226] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1450.069774][T12226] usb 6-1: Using ep0 maxpacket: 8 [ 1450.088763][T12226] usb 6-1: no configurations [ 1450.102327][T12226] usb 6-1: can't read configurations, error -22 [ 1450.149776][T12226] usb usb6-port1: attempt power cycle [ 1450.514011][T12226] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1450.585688][T12226] usb 6-1: Using ep0 maxpacket: 8 [ 1450.596961][T12226] usb 6-1: no configurations [ 1450.620126][T12226] usb 6-1: can't read configurations, error -22 [ 1450.820965][T12226] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1450.896427][T12226] usb 6-1: Using ep0 maxpacket: 8 [ 1450.916295][T12226] usb 6-1: no configurations [ 1450.931129][T12226] usb 6-1: can't read configurations, error -22 [ 1450.949936][T12226] usb usb6-port1: unable to enumerate USB device [ 1451.339877][T12226] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1451.499748][T12226] usb 10-1: device descriptor read/64, error -71 [ 1451.742743][T12226] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1451.893679][T16159] netlink: 'syz.8.2374': attribute type 4 has an invalid length. [ 1451.907052][T12226] usb 10-1: device descriptor read/64, error -71 [ 1451.908555][T16162] IPv6: addrconf: prefix option has invalid lifetime [ 1452.030585][T12226] usb usb10-port1: attempt power cycle [ 1452.399665][T12226] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1452.477362][T12226] usb 10-1: device descriptor read/8, error -71 [ 1452.799074][T12226] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1452.862297][T12226] usb 10-1: device descriptor read/8, error -71 [ 1453.000376][T12226] usb usb10-port1: unable to enumerate USB device [ 1453.818242][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2381'. [ 1453.831149][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.839662][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.267934][T16212] netlink: 'syz.9.2386': attribute type 4 has an invalid length. [ 1457.908080][T16221] IPv6: addrconf: prefix option has invalid lifetime [ 1458.199811][T15956] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1458.379801][T15956] usb 10-1: Using ep0 maxpacket: 8 [ 1458.452837][T15956] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.469775][T15956] usb 10-1: config 0 has no interfaces? [ 1458.475588][T15956] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1458.530521][T15956] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.610303][T15956] usb 10-1: config 0 descriptor?? [ 1459.234364][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.313521][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.376950][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.431172][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.497628][T16243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.558204][T16243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.886961][T16252] netlink: 'syz.5.2399': attribute type 4 has an invalid length. [ 1460.941344][T15956] usb 10-1: USB disconnect, device number 48 [ 1461.199473][T16268] IPv6: addrconf: prefix option has invalid lifetime [ 1462.430285][ T9] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1462.555687][T16288] netlink: 'syz.8.2410': attribute type 4 has an invalid length. [ 1462.595981][ T9] usb 6-1: device descriptor read/64, error -71 [ 1462.849999][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1463.032562][ T9] usb 6-1: device descriptor read/64, error -71 [ 1463.140737][ T9] usb usb6-port1: attempt power cycle [ 1463.520231][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1463.572343][ T9] usb 6-1: device descriptor read/8, error -71 [ 1463.580138][T12226] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1463.759809][T12226] usb 10-1: Using ep0 maxpacket: 16 [ 1463.785316][T12226] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.818267][T12226] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1463.839692][ T9] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1463.865373][T12226] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1463.899588][T12226] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1463.900008][ T9] usb 6-1: device descriptor read/8, error -71 [ 1463.929830][T12226] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.977682][T12226] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1464.006934][T12226] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1464.034514][T12226] usb 10-1: Manufacturer: syz [ 1464.042117][ T9] usb usb6-port1: unable to enumerate USB device [ 1464.057573][T12226] usb 10-1: config 0 descriptor?? [ 1464.416639][T16304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.471692][T16304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.481794][T16341] netlink: 'syz.5.2423': attribute type 4 has an invalid length. [ 1467.076327][T12226] rc_core: IR keymap rc-hauppauge not found [ 1467.123186][T12226] Registered IR keymap rc-empty [ 1467.145746][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.199862][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.274478][T12226] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1467.364145][T12226] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input22 [ 1467.489277][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.528704][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.580837][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.653302][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.714684][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.755132][T16361] syzkaller0: entered promiscuous mode [ 1467.767784][T16361] syzkaller0: entered allmulticast mode [ 1467.780488][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.828218][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.895487][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1467.954762][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1467.963470][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1468.009992][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1468.045277][T12226] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1468.079845][T12226] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1468.125826][ T24] usb 7-1: device descriptor read/64, error -71 [ 1468.153087][T12226] usb 10-1: USB disconnect, device number 49 [ 1468.430997][ T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1468.538375][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2434'. [ 1468.589848][ T24] usb 7-1: device descriptor read/64, error -71 [ 1468.711108][ T24] usb usb7-port1: attempt power cycle [ 1469.115516][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1469.192817][ T24] usb 7-1: device descriptor read/8, error -71 [ 1469.274046][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1469.436551][T16387] netlink: 'syz.9.2437': attribute type 4 has an invalid length. [ 1469.449651][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1469.449673][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1469.483286][ T24] usb 7-1: device descriptor read/8, error -71 [ 1469.503574][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.545947][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1469.590183][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1469.611408][ T24] usb usb7-port1: unable to enumerate USB device [ 1469.619811][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1469.649699][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1469.732642][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1469.776136][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1469.818671][ T10] usb 6-1: Manufacturer: syz [ 1469.853187][ T10] usb 6-1: config 0 descriptor?? [ 1470.013658][T16393] macvtap1: entered promiscuous mode [ 1470.146831][T16384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.206638][T16384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.751275][T12243] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1471.966218][T12243] usb 7-1: config 0 has no interfaces? [ 1472.020365][T12243] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1472.100402][T12243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.195734][T12243] usb 7-1: config 0 descriptor?? [ 1472.538231][T16414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.586394][T16414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.670132][ T24] usb 7-1: USB disconnect, device number 42 [ 1472.999592][ T10] rc_core: IR keymap rc-hauppauge not found [ 1473.029769][ T10] Registered IR keymap rc-empty [ 1473.035267][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.095683][T16439] netlink: 'syz.8.2448': attribute type 4 has an invalid length. [ 1473.111470][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.163461][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1473.231982][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 1473.251054][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1473.294210][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.339809][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.430751][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.431047][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1473.468200][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.487691][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.533296][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.537940][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.602485][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.604049][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1473.642505][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.674167][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1473.691693][T16448] fuse: Bad value for 'fd' [ 1473.719997][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.724181][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.762510][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.803440][ T24] usb 7-1: config 0 descriptor?? [ 1473.811723][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2450'. [ 1473.821722][ T10] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1473.857665][ T10] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1473.903709][ T10] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1474.008634][ T10] usb 6-1: USB disconnect, device number 54 [ 1474.254683][ T24] hid_parser_main: 43 callbacks suppressed [ 1474.254782][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.300137][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.335208][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.355228][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.400971][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.451444][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.459127][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.529628][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.569125][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.594769][ T24] hid-picolcd 0003:04D8:F002.000E: unknown main item tag 0x0 [ 1474.736341][ T24] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf3 found [ 1474.771924][ T24] hid-picolcd 0003:04D8:F002.000E: No report with id 0xf4 found [ 1474.851876][ T24] usb 7-1: USB disconnect, device number 43 [ 1474.880239][T15983] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1475.099786][T15983] usb 6-1: Using ep0 maxpacket: 32 [ 1475.166932][T15983] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1475.201951][T15983] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.251634][T15983] usb 6-1: config 0 has no interface number 0 [ 1475.278292][T15983] usb 6-1: config 0 interface 239 has no altsetting 0 [ 1475.360113][T15983] usb 6-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1475.370511][T15983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.378721][T15983] usb 6-1: Product: syz [ 1475.420188][T15983] usb 6-1: Manufacturer: syz [ 1475.425019][T15983] usb 6-1: SerialNumber: syz [ 1475.492648][T15983] usb 6-1: config 0 descriptor?? [ 1475.709179][T15983] usb 6-1: USB disconnect, device number 55 [ 1476.162921][ T10] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1476.339602][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1476.378029][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.420195][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1476.494193][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1476.539864][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1476.614015][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1476.694484][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1476.739853][ T10] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1476.776919][ T10] usb 10-1: Manufacturer: syz [ 1476.827280][ T10] usb 10-1: config 0 descriptor?? [ 1477.129309][T16475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.317121][T16498] netlink: 'syz.6.2461': attribute type 4 has an invalid length. [ 1477.340663][T16475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.666092][T16501] fuse: Bad value for 'fd' [ 1478.060168][T16506] netlink: 'syz.5.2464': attribute type 13 has an invalid length. [ 1478.068189][T16506] netlink: 'syz.5.2464': attribute type 27 has an invalid length. [ 1479.599599][ T10] rc_core: IR keymap rc-hauppauge not found [ 1479.633935][ T10] Registered IR keymap rc-empty [ 1479.661495][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1479.690169][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1479.762168][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1479.838462][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input24 [ 1479.910199][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1479.969912][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.019947][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.049929][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.150089][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.181054][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.220472][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.266867][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.329816][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.379804][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1480.447722][ T10] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1480.487976][ T10] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1480.533079][T16552] fuse: Bad value for 'fd' [ 1480.604444][ T10] usb 10-1: USB disconnect, device number 50 [ 1480.716267][T16551] netlink: 'syz.8.2475': attribute type 4 has an invalid length. [ 1481.158688][T16540] syzkaller0: entered promiscuous mode [ 1481.210766][T16540] syzkaller0: entered allmulticast mode [ 1481.324829][T16562] netlink: 'syz.9.2477': attribute type 13 has an invalid length. [ 1481.363968][T16562] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2477'. [ 1482.689701][T12225] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1482.871816][T12225] usb 10-1: Using ep0 maxpacket: 16 [ 1482.912776][T12225] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.958910][T12225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1482.992444][T12225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1483.004482][T12225] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1483.004627][T12225] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1483.009833][T12225] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1483.009976][T12225] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1483.010093][T12225] usb 10-1: Manufacturer: syz [ 1483.031959][T12225] usb 10-1: config 0 descriptor?? [ 1483.315672][T16574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.344055][T16591] loop6: detected capacity change from 0 to 2364 [ 1483.371039][T16574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.385423][T16591] iso9660: Bad value for 'sbsector' [ 1484.541873][T16604] fuse: Bad value for 'fd' [ 1484.894364][T16608] netlink: 'syz.8.2490': attribute type 13 has an invalid length. [ 1484.953666][T16606] netlink: 'syz.5.2489': attribute type 4 has an invalid length. [ 1484.963336][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2490'. [ 1485.129173][T16611] syzkaller0: entered promiscuous mode [ 1485.160024][T16611] syzkaller0: entered allmulticast mode [ 1486.020295][T12225] rc_core: IR keymap rc-hauppauge not found [ 1486.026386][T12225] Registered IR keymap rc-empty [ 1486.065073][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.140075][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.200928][T12225] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1486.272735][T12225] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input25 [ 1486.347118][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.400023][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.440177][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.501672][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.540779][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.609808][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.644995][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.830042][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.860073][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.887076][T12225] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1486.934394][T12225] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1486.963249][T12225] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1487.050334][T12225] usb 10-1: USB disconnect, device number 51 [ 1487.509879][T12225] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 1487.510120][T16649] loop6: detected capacity change from 0 to 256 [ 1487.749607][T12225] usb 10-1: config 0 has no interfaces? [ 1487.803000][T12225] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1487.866856][T12225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.955313][T12225] usb 10-1: config 0 descriptor?? [ 1488.258252][T16626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.283268][T16626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1488.343067][T12225] usb 10-1: USB disconnect, device number 52 [ 1488.498844][T16658] netlink: 'syz.5.2503': attribute type 4 has an invalid length. [ 1488.890815][T12225] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1489.009833][T16456] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1489.109616][T12225] usb 10-1: Using ep0 maxpacket: 16 [ 1489.145151][T12225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.202181][T12225] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.213623][T16456] usb 7-1: Using ep0 maxpacket: 16 [ 1489.248768][T12225] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1489.251641][T16456] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.276668][T12225] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1489.330244][T12225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.373318][T12225] usb 10-1: config 0 descriptor?? [ 1489.379630][T16456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1489.435311][T16456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1489.497876][T16456] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1489.574796][T16456] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1489.713904][T16456] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1489.739955][T16456] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1489.779750][T16456] usb 7-1: Manufacturer: syz [ 1489.828829][T16456] usb 7-1: config 0 descriptor?? [ 1490.093647][T12225] usbhid 10-1:0.0: can't add hid device: -71 [ 1490.111734][T16666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1490.140379][T12225] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1490.181298][T16666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.213301][T12225] usb 10-1: USB disconnect, device number 53 [ 1492.431485][T16713] netlink: 'syz.8.2518': attribute type 4 has an invalid length. [ 1492.449866][T16456] rc_core: IR keymap rc-hauppauge not found [ 1492.455944][T16456] Registered IR keymap rc-empty [ 1492.495019][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1492.549822][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1492.600493][T16456] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1492.675960][T16456] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input26 [ 1492.769898][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1492.835931][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1492.900125][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1492.975393][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.030465][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.068496][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.130000][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.200108][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.259942][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.320683][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1493.396112][T16456] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1493.460333][T16456] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1493.638488][T16456] usb 7-1: USB disconnect, device number 44 [ 1494.178999][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.189802][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.391330][T16747] fuse: Unknown parameter 'user_id00000000000000000000' [ 1495.636204][T16767] netlink: 'syz.8.2532': attribute type 4 has an invalid length. [ 1497.159168][T16798] fuse: Unknown parameter 'user_id00000000000000000000' [ 1497.565586][T16805] ªªªªªª: renamed from vlan0 (while UP) [ 1498.089847][T16456] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1498.250316][T16816] netlink: 'syz.1.2546': attribute type 4 has an invalid length. [ 1498.303209][T16456] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.325243][T16456] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1498.353616][T16456] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1498.395632][T16456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.409871][T16456] usb 7-1: Product: syz [ 1498.414242][T16456] usb 7-1: Manufacturer: syz [ 1498.427140][T16456] usb 7-1: SerialNumber: syz [ 1498.510080][T16456] cdc_mbim 7-1:1.0: skipping garbage [ 1498.691060][T16812] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1499.963147][T16456] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 1499.980345][T16456] cdc_mbim 7-1:1.0: bind() failure [ 1500.118382][T16456] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1500.162443][T16456] cdc_ncm 7-1:1.1: bind() failure [ 1500.387372][T16812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.549821][T16812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.721408][T16854] fuse: Bad value for 'fd' [ 1502.004498][T16456] usb 7-1: USB disconnect, device number 45 [ 1502.452231][T16869] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1502.511990][T16868] netlink: 'syz.5.2560': attribute type 4 has an invalid length. [ 1502.557523][T16869] overlayfs: failed to set xattr on upper [ 1502.623015][T16869] overlayfs: ...falling back to redirect_dir=nofollow. [ 1502.679579][T16869] overlayfs: ...falling back to index=off. [ 1502.685568][T16869] overlayfs: ...falling back to uuid=null. [ 1504.531074][T16904] fuse: Bad value for 'fd' [ 1505.182280][T16913] netlink: 'syz.6.2574': attribute type 4 has an invalid length. [ 1506.080033][ T10] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1506.289280][ T10] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1506.337090][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.421911][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1506.467103][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.543936][ T10] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1506.578353][ T10] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1506.643413][ T10] usb 7-1: Product: syz [ 1506.679157][ T10] usb 7-1: Manufacturer: syz [ 1506.748938][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 1506.800268][ T10] cdc_wdm 7-1:1.0: skipping garbage [ 1506.841127][ T10] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1506.872275][ T10] cdc_wdm 7-1:1.0: Unknown control protocol [ 1507.000301][T16456] usb 7-1: USB disconnect, device number 46 [ 1507.044136][T16944] fuse: Bad value for 'fd' [ 1507.710570][T16456] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1507.842342][T16957] netlink: 'syz.8.2588': attribute type 4 has an invalid length. [ 1507.926217][T16456] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1507.955496][T16456] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1507.996231][T16456] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1508.021900][T16456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.049667][T16456] usb 10-1: Product: syz [ 1508.055709][T16456] usb 10-1: Manufacturer: syz [ 1508.070305][T16456] usb 10-1: SerialNumber: syz [ 1508.123312][T16456] cdc_mbim 10-1:1.0: skipping garbage [ 1508.337986][T16953] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1509.020570][T16953] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1509.030756][T16456] cdc_mbim 10-1:1.0: setting tx_max = 184 [ 1509.073114][T16456] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 1509.162290][T16456] wwan wwan0: port wwan0mbim0 attached [ 1509.220621][T16979] fuse: Unknown parameter '0x0000000000000003' [ 1509.245313][T16456] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 1e:bd:e9:fc:20:28 [ 1509.529859][T16456] usb 10-1: USB disconnect, device number 54 [ 1509.571593][T16456] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 1509.833215][T16456] wwan wwan0: port wwan0mbim0 disconnected [ 1510.837701][T16995] netlink: 'syz.1.2601': attribute type 4 has an invalid length. [ 1511.509742][ T10] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1511.705854][ T10] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1511.741395][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.773257][ T10] usb 10-1: Product: syz [ 1511.787218][ T10] usb 10-1: Manufacturer: syz [ 1511.816307][ T10] usb 10-1: SerialNumber: syz [ 1512.290423][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1512.359887][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1512.461507][T17025] fuse: Unknown parameter '0x0000000000000003' [ 1512.818534][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1512.862142][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1512.920710][ T10] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1513.073830][ T10] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -32 [ 1513.710352][T17043] netlink: 'syz.6.2616': attribute type 4 has an invalid length. [ 1514.283771][ T29] audit: type=1326 audit(1773296375.796:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17056 comm="syz.6.2622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4ebb9c799 code=0x0 [ 1514.524829][T16456] usb 10-1: USB disconnect, device number 55 [ 1514.920382][T17069] fuse: Unknown parameter '0x0000000000000003' [ 1516.741967][T17098] netlink: 'syz.1.2632': attribute type 4 has an invalid length. [ 1516.789737][T16456] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1517.001988][T16456] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.053972][T16456] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1517.101997][T16456] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1517.112130][T16456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.165167][T16456] usb 7-1: Product: syz [ 1517.178740][T16456] usb 7-1: Manufacturer: syz [ 1517.198903][T16456] usb 7-1: SerialNumber: syz [ 1517.269738][T16456] cdc_mbim 7-1:1.0: skipping garbage [ 1517.466169][T17094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1518.106264][T17094] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1518.115367][T16456] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 1518.127393][T17118] fuse: Unknown parameter '0x0000000000000003' [ 1518.165295][T16456] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1518.221041][T16456] wwan wwan0: port wwan0mbim0 attached [ 1518.308750][T16456] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, c2:64:19:75:b6:2d [ 1518.536084][ T10] usb 7-1: USB disconnect, device number 47 [ 1518.565267][ T10] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1519.075322][ T10] wwan wwan0: port wwan0mbim0 disconnected [ 1519.482061][T17134] netlink: 'syz.1.2644': attribute type 4 has an invalid length. [ 1519.878093][T16456] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1520.059728][T16456] usb 7-1: Using ep0 maxpacket: 16 [ 1520.086688][T16456] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.114316][T16456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1520.175366][T16456] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1520.221524][T16456] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1520.269541][T16456] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1520.322852][T16456] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1520.349622][T16456] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1520.379525][T16456] usb 7-1: Manufacturer: syz [ 1520.437735][T16456] usb 7-1: config 0 descriptor?? [ 1520.715392][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.751811][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.322399][T17159] fuse: Unknown parameter '0x0000000000000003' [ 1522.769832][T17177] netlink: 'syz.5.2658': attribute type 4 has an invalid length. [ 1523.268866][T16456] rc_core: IR keymap rc-hauppauge not found [ 1523.319501][T16456] Registered IR keymap rc-empty [ 1523.325941][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.400283][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.461929][T16456] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1523.546221][T16456] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input27 [ 1523.643880][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.689867][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.739955][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.781354][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.803834][T17196] fuse: Unknown parameter '0x0000000000000003' [ 1523.849857][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.923091][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1523.963611][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1524.020407][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1524.073725][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1524.079866][T17199] vxcan1 speed is unknown, defaulting to 1000 [ 1524.162556][T16456] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1524.243351][T16456] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1524.270077][T16456] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1524.306375][T16456] usb 7-1: USB disconnect, device number 48 [ 1526.199874][T16456] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1526.409849][T16456] usb 10-1: Using ep0 maxpacket: 16 [ 1526.435040][T16456] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.496479][T16456] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1526.534107][T17227] netlink: 'syz.5.2674': attribute type 4 has an invalid length. [ 1526.551847][T16456] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1526.574948][T16456] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1526.608359][T16456] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1526.645835][T16456] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1526.663870][T16456] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1526.686919][T16456] usb 10-1: Manufacturer: syz [ 1526.740689][T16456] usb 10-1: config 0 descriptor?? [ 1527.391184][T17223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.568586][T17223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.830158][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1527.989257][T17241] fuse: Unknown parameter 'fd0x0000000000000003' [ 1528.060518][ T24] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1528.068976][ T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1528.109929][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1528.141640][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1528.162274][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1528.181348][ T24] usb 6-1: Product: syz [ 1528.185806][ T24] usb 6-1: Manufacturer: syz [ 1528.209928][ T24] usb 6-1: SerialNumber: syz [ 1528.234307][ T24] usb 6-1: config 0 descriptor?? [ 1528.297055][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 1528.339561][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1528.414048][ T24] usb 6-1: selecting invalid altsetting 0 [ 1529.022302][ T24] usb 6-1: USB disconnect, device number 56 [ 1529.094458][T17253] overlayfs: failed to clone upperpath [ 1529.287084][T15218] udevd[15218]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1529.779535][T16456] rc_core: IR keymap rc-hauppauge not found [ 1529.785675][T16456] Registered IR keymap rc-empty [ 1529.819202][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1529.841872][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1529.904472][T16456] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1529.976766][T16456] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input28 [ 1530.115303][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.167127][T17268] netlink: 'syz.8.2688': attribute type 4 has an invalid length. [ 1530.169915][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.230058][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.284940][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.350007][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.380193][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.449906][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.501417][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.531009][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.551716][T16456] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1530.602756][T16456] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1530.639950][T16456] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1530.715813][T16456] usb 10-1: USB disconnect, device number 56 [ 1530.980455][T17284] loop5: detected capacity change from 0 to 512 [ 1531.160974][T16456] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 1531.400441][T16456] usb 10-1: config 0 has no interfaces? [ 1531.419863][T16456] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1531.429242][T16456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.529935][T16456] usb 10-1: config 0 descriptor?? [ 1531.792329][T17261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.841008][T17261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.868375][ T10] usb 10-1: USB disconnect, device number 57 [ 1532.250458][T12243] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1532.440453][ T10] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1532.463078][T12243] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1532.499078][T12243] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1532.539484][T12243] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1532.577200][T12243] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1532.597409][T12243] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1532.627843][T12243] usb 6-1: Product: syz [ 1532.639134][T12243] usb 6-1: Manufacturer: syz [ 1532.666887][T12243] usb 6-1: SerialNumber: syz [ 1532.672625][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1532.705132][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.725568][T12243] usb 6-1: config 0 descriptor?? [ 1532.737853][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.779718][T12243] hub 6-1:0.0: bad descriptor, ignoring hub [ 1532.788179][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1532.810466][T12243] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1532.856289][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1532.874108][T12243] usb 6-1: selecting invalid altsetting 0 [ 1532.900095][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.928449][ T10] usb 10-1: config 0 descriptor?? [ 1533.377438][T17312] netlink: 'syz.1.2702': attribute type 4 has an invalid length. [ 1533.515307][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1533.541691][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1533.625779][T12243] usb 6-1: USB disconnect, device number 57 [ 1533.669688][ T10] usb 10-1: USB disconnect, device number 58 [ 1533.922554][T15209] udevd[15209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1534.320858][T16456] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1534.488749][T16456] usb 10-1: Using ep0 maxpacket: 32 [ 1534.525932][T16456] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.553409][T16456] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1534.581427][T16456] usb 10-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1534.620956][T16456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.636768][T16456] usb 10-1: Product: syz [ 1534.642358][T16456] usb 10-1: Manufacturer: syz [ 1534.647459][T16456] usb 10-1: SerialNumber: syz [ 1534.672767][T16456] usb 10-1: config 0 descriptor?? [ 1534.833204][ T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1534.909143][T16456] usb 10-1: USB disconnect, device number 59 [ 1535.019632][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1535.033207][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.080968][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1535.100182][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1535.129858][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1535.196705][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1535.290051][ T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1535.323571][ T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1535.349562][ T24] usb 7-1: Manufacturer: syz [ 1535.415152][ T24] usb 7-1: config 0 descriptor?? [ 1535.672321][T17336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1535.711876][T17336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.900130][T17370] loop5: detected capacity change from 0 to 8192 [ 1540.089781][ T24] rc_core: IR keymap rc-hauppauge not found [ 1540.095941][ T24] Registered IR keymap rc-empty [ 1540.136449][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.210986][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.283755][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1540.354463][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input29 [ 1540.445462][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.480102][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.520360][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.601669][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.659933][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.691402][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.749849][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.835940][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.879752][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.904381][ T24] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1540.985162][ T24] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1541.029536][ T24] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1541.096398][ T24] usb 7-1: USB disconnect, device number 49 [ 1542.383188][T12243] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1542.560376][T12243] usb 10-1: Using ep0 maxpacket: 16 [ 1542.575280][T12243] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.630614][T12243] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1542.679192][T12243] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1542.751879][T12243] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1542.789595][T12243] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1542.847713][T12243] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1542.879528][T12243] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1542.887869][T12243] usb 10-1: Manufacturer: syz [ 1542.935513][T12243] usb 10-1: config 0 descriptor?? [ 1543.247200][T17412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.261502][T17412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.627609][T17428] fuse: Unknown parameter 'default_p' [ 1543.709958][ T10] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1543.899811][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1543.938892][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.953464][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1543.977872][ T10] usb 7-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1544.029723][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.039271][ T10] usb 7-1: Product: syz [ 1544.044839][ T10] usb 7-1: Manufacturer: syz [ 1544.050165][ T10] usb 7-1: SerialNumber: syz [ 1544.077444][ T10] usb 7-1: config 0 descriptor?? [ 1544.324110][ T10] usb 7-1: USB disconnect, device number 50 [ 1545.472476][ T10] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1545.689899][ T10] usb 6-1: config 0 has no interfaces? [ 1545.709861][ T10] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1545.748438][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.810827][ T10] usb 6-1: config 0 descriptor?? [ 1545.895746][T12243] rc_core: IR keymap rc-hauppauge not found [ 1545.916794][T12243] Registered IR keymap rc-empty [ 1545.944735][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.017412][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.064344][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.083063][T12243] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1546.113874][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.176638][ T24] usb 6-1: USB disconnect, device number 58 [ 1546.187501][T12243] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input30 [ 1546.350446][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.352930][T17466] fuse: Unknown parameter 'default_p' [ 1546.405373][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.472795][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.534503][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.583904][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.637111][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.672095][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.729787][ T24] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1546.748213][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.794087][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.841118][T12243] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1546.917871][T12243] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1546.940051][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1546.946197][T12243] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1546.954864][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.955018][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.955140][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1547.097858][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1547.099759][T12243] usb 10-1: USB disconnect, device number 60 [ 1547.149956][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.215508][ T24] usb 6-1: config 0 descriptor?? [ 1547.442564][T17451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1547.550101][T17451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1547.656544][T17483] loop6: detected capacity change from 0 to 128 [ 1547.809173][ T24] hid_parser_main: 28 callbacks suppressed [ 1547.809279][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1547.917834][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.010378][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.018051][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.106980][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.169079][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.209704][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.243844][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.319644][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.327311][ T24] hid-picolcd 0003:04D8:F002.000F: unknown main item tag 0x0 [ 1548.541133][ T24] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 1548.575432][ T24] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 1548.660348][ T24] usb 6-1: USB disconnect, device number 59 [ 1548.679606][ T9] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1548.874238][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1548.886937][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.929881][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1548.969139][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1549.025476][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1549.047497][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1549.117728][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1549.165510][ T9] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1549.199698][ T9] usb 10-1: Manufacturer: syz [ 1549.232278][ T9] usb 10-1: config 0 descriptor?? [ 1549.524397][T17493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.597841][T17493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.658342][T17508] fuse: Unknown parameter 'default_p' [ 1550.677232][T17523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2773'. [ 1550.735962][T17523] netem: unknown loss type 13 [ 1550.773906][T17523] netem: change failed [ 1552.001297][ T9] rc_core: IR keymap rc-hauppauge not found [ 1552.042080][ T9] Registered IR keymap rc-empty [ 1552.047571][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.131533][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.187461][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1552.285922][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input31 [ 1552.370220][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.431293][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.469748][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.493299][T17550] fuse: Unknown parameter 'default_permis' [ 1552.529906][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.599776][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.670039][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.714004][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.799903][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.849287][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.890252][ T9] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1552.926522][ T9] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1552.979467][ T9] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1553.112533][ T9] usb 10-1: USB disconnect, device number 61 [ 1554.450314][ T24] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1554.641587][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1555.632145][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.639574][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.110539][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.129603][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1556.218167][T17591] fuse: Unknown parameter 'default_permis' [ 1556.638368][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1556.662037][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1556.681864][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1556.755252][ T24] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1556.798271][ T24] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1556.838759][ T24] usb 10-1: Manufacturer: syz [ 1556.899805][ T24] usb 10-1: config 0 descriptor?? [ 1557.770749][ T24] rc_core: IR keymap rc-hauppauge not found [ 1557.776828][ T24] Registered IR keymap rc-empty [ 1557.796279][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1557.860371][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1557.893165][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1557.970604][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 1558.031883][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.089829][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.123746][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.182103][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.229972][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.279796][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.911326][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.930068][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.950038][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1558.995278][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1559.044665][ T24] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1559.112849][ T24] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1559.194168][ T24] usb 10-1: USB disconnect, device number 62 [ 1559.328880][T17631] fuse: Unknown parameter 'default_permis' [ 1560.419599][ T24] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1560.639086][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1560.681929][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1560.754806][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.831951][ T24] usb 6-1: config 0 descriptor?? [ 1561.039779][T12225] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1561.127882][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1561.183489][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1561.235389][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1561.243337][T12225] usb 7-1: Using ep0 maxpacket: 16 [ 1561.282656][T12225] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1561.306583][ T24] usb 6-1: media controller created [ 1561.362455][T12225] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1561.399876][T12225] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1561.469802][T12225] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1561.499741][T12225] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1561.553403][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1561.576879][T12225] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1561.619680][T12225] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1561.627911][T12225] usb 7-1: Manufacturer: syz [ 1561.689646][T12225] usb 7-1: config 0 descriptor?? [ 1561.800761][ T24] az6027: usb out operation failed. (-71) [ 1561.838406][ T24] az6027: usb out operation failed. (-71) [ 1561.885515][ T24] stb0899_attach: Driver disabled by Kconfig [ 1561.932012][ T24] az6027: no front-end attached [ 1561.932012][ T24] [ 1562.001003][T17653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.008127][ T24] az6027: usb out operation failed. (-71) [ 1562.015516][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1562.050869][T17653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1562.079186][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33 [ 1562.157218][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 1562.189703][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1562.290798][ T24] usb 6-1: USB disconnect, device number 60 [ 1562.834796][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1563.441477][T17678] fuse: Unknown parameter 'default_permissio' [ 1564.560029][T12225] rc_core: IR keymap rc-hauppauge not found [ 1564.576949][T12225] Registered IR keymap rc-empty [ 1564.590340][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1564.670376][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1564.732194][T12225] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1564.798454][T12225] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input34 [ 1564.927676][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1564.980304][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.039845][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.071970][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.149818][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.179881][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.230103][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.280008][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.319780][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.350755][T12225] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1565.396045][T12225] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 1565.440162][T12225] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1565.520029][T12225] usb 7-1: USB disconnect, device number 51 [ 1566.783352][T17714] loop9: detected capacity change from 0 to 16 [ 1566.792852][T17714] erofs: Unknown parameter '' [ 1569.047625][T17725] fuse: Unknown parameter 'default_permissio' [ 1570.258344][ T29] audit: type=1326 audit(1773296431.766:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.410017][ T29] audit: type=1326 audit(1773296431.776:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.488683][ T29] audit: type=1326 audit(1773296431.776:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.593937][ T29] audit: type=1326 audit(1773296431.816:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.649696][ T29] audit: type=1326 audit(1773296431.816:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.672847][ T29] audit: type=1326 audit(1773296431.816:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.696096][ T29] audit: type=1326 audit(1773296431.816:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.765435][ T29] audit: type=1326 audit(1773296431.816:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.809697][ T29] audit: type=1326 audit(1773296431.826:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.849777][ T29] audit: type=1326 audit(1773296431.826:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17742 comm="syz.5.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494df9c799 code=0x7ffc0000 [ 1570.974378][T17754] IPv6: addrconf: prefix option has invalid lifetime [ 1571.244586][T17760] fuse: Unknown parameter 'default_permissio' [ 1573.490233][T17796] IPv6: addrconf: prefix option has invalid lifetime [ 1573.976274][T17802] fuse: Unknown parameter 'default_permission' [ 1574.202980][T17805] overlayfs: failed to clone upperpath [ 1575.800676][T17833] IPv6: addrconf: prefix option has invalid lifetime [ 1575.863930][T17838] fuse: Unknown parameter 'default_permission' [ 1576.504548][T17846] overlayfs: failed to clone upperpath [ 1578.301450][T17871] fuse: Unknown parameter 'default_permission' [ 1578.338378][T17874] IPv6: addrconf: prefix option has invalid lifetime [ 1579.132261][T17884] overlayfs: failed to clone upperpath [ 1579.807181][T17892] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1580.868368][T17910] fuse: Bad value for 'group_id' [ 1580.932249][T17910] fuse: Bad value for 'group_id' [ 1581.131835][T17913] IPv6: addrconf: prefix option has invalid lifetime [ 1581.526265][T17922] overlayfs: failed to clone upperpath [ 1581.960568][T17925] netlink: 'syz.6.2904': attribute type 4 has an invalid length. [ 1582.625101][T17947] fuse: Bad value for 'fd' [ 1583.035815][T17953] fuse: Bad value for 'group_id' [ 1583.093823][T17953] fuse: Bad value for 'group_id' [ 1583.441441][T17958] IPv6: addrconf: prefix option has invalid lifetime [ 1584.429188][T17968] overlayfs: failed to clone upperpath [ 1585.607926][T17976] netlink: 'syz.8.2920': attribute type 4 has an invalid length. [ 1586.573543][ T24] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1586.704205][T17993] fuse: Bad value for 'group_id' [ 1586.730056][T17993] fuse: Bad value for 'group_id' [ 1586.745897][T17996] IPv6: addrconf: prefix option has invalid lifetime [ 1586.777655][ T24] usb 7-1: config 0 has no interfaces? [ 1586.799788][ T24] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1586.839732][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.872131][ T24] usb 7-1: config 0 descriptor?? [ 1587.116622][T18002] overlayfs: failed to clone upperpath [ 1587.173860][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1587.181190][T18003] overlayfs: failed to clone upperpath [ 1587.217869][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1587.276255][ T10] usb 7-1: USB disconnect, device number 52 [ 1587.771394][ T10] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1588.541369][T18016] netlink: 'syz.8.2933': attribute type 4 has an invalid length. [ 1588.949964][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1588.973354][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.989537][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.956442][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1589.989582][ T10] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1589.998874][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.029648][ T10] usb 7-1: config 0 descriptor?? [ 1590.037859][ T10] usb 7-1: can't set config #0, error -71 [ 1590.051336][ T10] usb 7-1: USB disconnect, device number 53 [ 1590.676633][T18037] IPv6: addrconf: prefix option has invalid lifetime [ 1590.980418][T18042] sch_fq: defrate 7 ignored. [ 1591.424819][T18051] netlink: 'syz.1.2947': attribute type 4 has an invalid length. [ 1593.614666][T18073] IPv6: addrconf: prefix option has invalid lifetime [ 1595.063891][T18094] netlink: 'syz.9.2961': attribute type 4 has an invalid length. [ 1595.429587][ T24] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1595.597654][ T24] usb 7-1: config 0 has no interfaces? [ 1595.615072][ T24] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1595.624891][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1595.639571][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.701295][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2966'. [ 1595.703116][ T24] usb 7-1: config 0 descriptor?? [ 1596.030201][T18098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.074746][T18098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.116335][T12243] usb 7-1: USB disconnect, device number 54 [ 1599.119953][T12243] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1599.656679][T18126] overlayfs: failed to clone upperpath [ 1600.835721][T18138] netlink: 'syz.1.2977': attribute type 4 has an invalid length. [ 1601.342466][T18145] loop9: detected capacity change from 0 to 16 [ 1601.465451][T18149] sctp: [Deprecated]: syz.8.2984 (pid 18149) Use of int in max_burst socket option. [ 1601.465451][T18149] Use struct sctp_assoc_value instead [ 1601.557032][T18152] sctp: [Deprecated]: syz.8.2984 (pid 18152) Use of int in maxseg socket option. [ 1601.557032][T18152] Use struct sctp_assoc_value instead [ 1601.612521][T18145] erofs (device loop9): mounted with root inode @ nid 36. [ 1602.059743][T12243] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1602.707649][T18159] overlayfs: failed to clone upperpath [ 1603.487947][T18166] binder_alloc: 18165: binder_alloc_buf, no vma [ 1604.045020][T12243] usb 7-1: config 0 has no interfaces? [ 1604.059914][T12243] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1604.069227][T12243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.085947][T12243] usb 7-1: config 0 descriptor?? [ 1604.332895][T18153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1604.394465][T18153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1604.445424][T12243] usb 7-1: USB disconnect, device number 56 [ 1604.735008][T18178] netlink: 'syz.9.2993': attribute type 4 has an invalid length. [ 1604.909805][T12243] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1605.094980][T12243] usb 7-1: Using ep0 maxpacket: 16 [ 1605.137569][T12243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.250351][T12243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.312733][T12243] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1605.402416][T12243] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1605.461582][T12243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.498504][T12243] usb 7-1: config 0 descriptor?? [ 1606.047089][T12243] usbhid 7-1:0.0: can't add hid device: -71 [ 1606.109265][T12243] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1606.128110][T18186] loop9: detected capacity change from 0 to 512 [ 1606.203716][T12243] usb 7-1: USB disconnect, device number 57 [ 1609.359734][ T24] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1609.430763][T18211] netlink: 'syz.6.3005': attribute type 4 has an invalid length. [ 1609.580277][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1609.605140][ T24] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1609.647084][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.691166][ T24] usb 10-1: config 0 descriptor?? [ 1609.774375][ T24] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1609.971904][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1610.046378][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1610.111557][ T24] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1610.149656][ T24] usb 10-1: media controller created [ 1610.176332][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.211207][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.312023][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.346951][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1610.360459][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.455014][T18212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1610.515401][T18212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1610.946478][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 1610.968314][ T24] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1611.030805][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1611.046912][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1611.130312][ T24] usb 10-1: USB disconnect, device number 63 [ 1611.491663][T18238] fuse: Unknown parameter 'grou00000000000000000000' [ 1611.560274][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1612.632185][T18251] netlink: 'syz.1.3020': attribute type 4 has an invalid length. [ 1613.658903][T18256] syzkaller0: entered promiscuous mode [ 1613.734495][T18258] overlayfs: failed to clone upperpath [ 1613.767707][T18256] syzkaller0: entered allmulticast mode [ 1615.726924][T18277] fuse: Unknown parameter 'grou00000000000000000000' [ 1616.440931][T18286] netlink: 'syz.6.3032': attribute type 4 has an invalid length. [ 1616.628031][T18293] netlink: 'syz.5.3033': attribute type 15 has an invalid length. [ 1617.061573][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.068684][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.437050][T18321] fuse: Unknown parameter 'grou00000000000000000000' [ 1618.800641][T12243] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1619.019625][T12243] usb 10-1: Using ep0 maxpacket: 8 [ 1619.057734][T12243] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1619.070261][T18330] netlink: 'syz.5.3047': attribute type 4 has an invalid length. [ 1619.077438][T12243] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.102212][T12243] usb 10-1: config 0 descriptor?? [ 1619.193547][T12243] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1619.413403][T12243] dvb-usb: bulk message failed: -22 (1/0) [ 1619.445962][T12243] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1619.504645][T12243] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1619.539081][T12243] usb 10-1: media controller created [ 1619.650492][T18324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.689852][T18324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.764885][T18324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.801507][T12243] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1619.802505][T18324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1620.348854][T18357] loop6: detected capacity change from 0 to 256 [ 1620.400275][T12243] DVB: Unable to find symbol lgdt330x_attach() [ 1620.408843][T18358] overlayfs: failed to clone upperpath [ 1620.422605][T12243] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1620.424073][T18357] vfat: Bad value for 'fmask' [ 1620.448039][T12243] dvb-usb: bulk message failed: -22 (1/0) [ 1620.497139][T12243] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1620.599283][T12243] usb 10-1: USB disconnect, device number 64 [ 1620.784768][T18363] fuse: Unknown parameter 'group_i00000000000000000000' [ 1621.093634][T12243] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1621.612113][T18373] netlink: 'syz.5.3063': attribute type 4 has an invalid length. [ 1622.500003][ T24] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1622.680629][T16456] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 1622.698965][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1622.729686][ T24] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1622.746752][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.771451][ T24] usb 10-1: config 0 descriptor?? [ 1622.803663][ T24] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1622.929300][T16456] usb 7-1: config 0 has no interfaces? [ 1622.935336][T16456] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1622.951769][T18401] fuse: Unknown parameter 'group_i00000000000000000000' [ 1623.002733][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1623.012868][T16456] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.046824][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1623.069920][T16456] usb 7-1: config 0 descriptor?? [ 1623.110959][ T24] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1623.138613][ T24] usb 10-1: media controller created [ 1623.213853][T18390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.271043][T18390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.284109][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1623.314382][T18390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.392091][T18390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.400518][T18393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.484587][T18393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.539814][T16456] usb 7-1: USB disconnect, device number 58 [ 1623.880973][ T24] DVB: Unable to find symbol lgdt330x_attach() [ 1623.905362][ T24] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1623.941208][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1623.967891][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1624.029657][T12243] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1624.030396][ T24] usb 10-1: USB disconnect, device number 65 [ 1624.156574][T18413] netlink: 'syz.1.3079': attribute type 4 has an invalid length. [ 1624.219850][T12243] usb 7-1: Using ep0 maxpacket: 16 [ 1624.285908][T12243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.335088][T12243] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.384139][T12243] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1624.469638][T12243] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1624.478920][T12243] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.540495][ T24] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1624.575905][T12243] usb 7-1: config 0 descriptor?? [ 1624.846429][T18393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.881613][T18393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.145937][T12243] hid_parser_main: 28 callbacks suppressed [ 1625.146034][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.203960][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.255615][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.287178][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.297986][T18434] fuse: Unknown parameter 'group_i00000000000000000000' [ 1625.328829][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.353871][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.382762][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.442607][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.471453][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.494863][T12243] hid-picolcd 0003:04D8:F002.0010: unknown main item tag 0x0 [ 1625.583359][T12243] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf3 found [ 1625.607404][T12243] hid-picolcd 0003:04D8:F002.0010: No report with id 0xf4 found [ 1625.657154][T12243] usb 7-1: USB disconnect, device number 59 [ 1627.484783][T18452] netlink: 'syz.6.3093': attribute type 4 has an invalid length. [ 1628.834115][T18471] fuse: Unknown parameter 'group_id00000000000000000000' [ 1629.630072][T12225] usb 10-1: new full-speed USB device number 66 using dummy_hcd [ 1629.809997][T12225] usb 10-1: config 0 has no interfaces? [ 1629.838208][T12225] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1629.875893][T12225] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.911813][T12225] usb 10-1: config 0 descriptor?? [ 1630.206926][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1630.272882][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1630.315334][T12243] usb 10-1: USB disconnect, device number 66 [ 1630.740513][T18499] netlink: 'syz.6.3108': attribute type 4 has an invalid length. [ 1630.902203][T12243] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1631.095595][T12243] usb 10-1: Using ep0 maxpacket: 16 [ 1631.145010][T12243] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.209891][T12243] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.260749][T12243] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1631.271762][T18511] fuse: Unknown parameter 'group_id00000000000000000000' [ 1631.299760][T12243] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1631.329823][T12243] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.389744][T12243] usb 10-1: config 0 descriptor?? [ 1631.675476][T18483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1631.691503][T18483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1631.928215][T12243] hid_parser_main: 23 callbacks suppressed [ 1631.928315][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1631.999754][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.026235][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.051771][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.075824][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.099851][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.126898][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.151851][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.187738][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.211598][T12243] hid-picolcd 0003:04D8:F002.0011: unknown main item tag 0x0 [ 1632.311141][T12243] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf3 found [ 1632.335255][T12243] hid-picolcd 0003:04D8:F002.0011: No report with id 0xf4 found [ 1632.358578][T18529] IPv6: addrconf: prefix option has invalid lifetime [ 1632.391489][T12243] usb 10-1: USB disconnect, device number 67 [ 1632.577057][T18535] fuse: Bad value for 'fd' [ 1634.443412][T18542] netlink: 'syz.9.3123': attribute type 4 has an invalid length. [ 1635.155842][T18551] fuse: Unknown parameter 'group_id00000000000000000000' [ 1635.793600][T18563] IPv6: addrconf: prefix option has invalid lifetime [ 1636.738679][T18578] netlink: 'syz.8.3136': attribute type 4 has an invalid length. [ 1638.793877][T18614] IPv6: addrconf: prefix option has invalid lifetime [ 1639.587053][T18626] netlink: 'syz.5.3149': attribute type 4 has an invalid length. [ 1641.691525][T18664] IPv6: addrconf: prefix option has invalid lifetime [ 1642.542821][T18672] netlink: 'syz.5.3161': attribute type 4 has an invalid length. [ 1643.389608][T12243] usb 10-1: new full-speed USB device number 68 using dummy_hcd [ 1643.606821][T12243] usb 10-1: config 0 has no interfaces? [ 1643.619657][T12243] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1643.652459][T12243] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.706929][T12243] usb 10-1: config 0 descriptor?? [ 1644.005214][T18682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.067041][T18682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1644.126679][T12243] usb 10-1: USB disconnect, device number 68 [ 1644.609598][T12243] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1644.810199][T12243] usb 10-1: Using ep0 maxpacket: 16 [ 1644.831380][T12243] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.898731][T12243] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.939834][T12243] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1645.005692][T12243] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1645.044630][T12243] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.094968][T12243] usb 10-1: config 0 descriptor?? [ 1645.339251][T18682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1645.378292][T18682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.669090][T12243] hid_parser_main: 23 callbacks suppressed [ 1645.669189][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.741229][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.748912][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.813767][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.844701][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.877522][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.916425][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.969853][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.977947][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1645.994337][T12243] hid-picolcd 0003:04D8:F002.0012: unknown main item tag 0x0 [ 1646.099667][T12243] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf3 found [ 1646.134234][T12243] hid-picolcd 0003:04D8:F002.0012: No report with id 0xf4 found [ 1646.207797][T12243] usb 10-1: USB disconnect, device number 69 [ 1646.626603][T18710] IPv6: addrconf: prefix option has invalid lifetime [ 1647.445033][T18718] netlink: 'syz.6.3174': attribute type 4 has an invalid length. [ 1648.884508][T18745] IPv6: addrconf: prefix option has invalid lifetime [ 1649.001462][T16456] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 1649.210984][T16456] usb 10-1: config 0 has no interfaces? [ 1649.238053][T16456] usb 10-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1649.283976][T16456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.324371][T16456] usb 10-1: config 0 descriptor?? [ 1649.628063][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1649.689014][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.711240][T18754] netlink: 'syz.5.3188': attribute type 4 has an invalid length. [ 1649.759941][T16456] usb 10-1: USB disconnect, device number 70 [ 1650.259888][ T5832] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1651.202510][ T5832] usb 10-1: Using ep0 maxpacket: 16 [ 1651.218218][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.218397][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.218529][ T5832] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1651.218730][ T5832] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1651.218875][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.226927][ T5832] usb 10-1: config 0 descriptor?? [ 1651.473410][T18743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.489322][T18743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.751701][ T5832] hid_parser_main: 21 callbacks suppressed [ 1651.751815][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.751992][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.752150][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.752315][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.752474][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.752633][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.752792][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.752950][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.753127][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.753305][ T5832] hid-picolcd 0003:04D8:F002.0013: unknown main item tag 0x0 [ 1651.841554][ T5832] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf3 found [ 1652.107738][ T5832] hid-picolcd 0003:04D8:F002.0013: No report with id 0xf4 found [ 1652.230184][ T5832] usb 10-1: USB disconnect, device number 71 [ 1653.190848][T18788] IPv6: addrconf: prefix option has invalid lifetime [ 1653.993306][T18799] netlink: 'syz.9.3202': attribute type 4 has an invalid length. [ 1654.212176][T18803] sctp: [Deprecated]: syz.6.3203 (pid 18803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1654.212176][T18803] Use struct sctp_sack_info instead [ 1655.761275][T18827] IPv6: addrconf: prefix option has invalid lifetime [ 1656.512859][T18837] netlink: 'syz.8.3215': attribute type 4 has an invalid length. [ 1656.521073][T18842] sctp: [Deprecated]: syz.1.3217 (pid 18842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1656.521073][T18842] Use struct sctp_sack_info instead [ 1657.839036][T18860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 1658.176906][T18860] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 1658.381625][T18872] IPv6: addrconf: prefix option has invalid lifetime [ 1658.737468][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3226'. [ 1659.362576][T18885] netlink: 'syz.1.3229': attribute type 4 has an invalid length. [ 1660.853319][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3235'. [ 1660.868781][T18905] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3235'. [ 1661.032371][T18910] IPv6: addrconf: prefix option has invalid lifetime [ 1661.516919][T18923] sctp: [Deprecated]: syz.9.3240 (pid 18923) Use of int in maxseg socket option. [ 1661.516919][T18923] Use struct sctp_assoc_value instead [ 1661.703201][T18922] netlink: 'syz.8.3242': attribute type 4 has an invalid length. [ 1663.559793][T18958] IPv6: addrconf: prefix option has invalid lifetime [ 1663.813421][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1663.813503][ T29] audit: type=1326 audit(1773296525.326:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.9.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827219c799 code=0x7fc00000 [ 1663.877922][T18962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.885762][T18962] bridge0: port 2(bridge_slave_1) entered listening state [ 1663.894265][T18962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1663.901943][T18962] bridge0: port 1(bridge_slave_0) entered listening state [ 1663.946746][ T29] audit: type=1326 audit(1773296525.366:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.9.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f827219c799 code=0x7fc00000 [ 1664.024491][T18962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1664.073200][ T29] audit: type=1326 audit(1773296525.376:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18963 comm="syz.9.3253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827219c799 code=0x7fc00000 [ 1664.422284][T18972] netlink: 'syz.9.3256': attribute type 4 has an invalid length. [ 1665.845690][T18994] IPv6: addrconf: prefix option has invalid lifetime [ 1666.581594][T19006] netlink: 'syz.8.3270': attribute type 4 has an invalid length. [ 1666.812456][T19011] loop9: detected capacity change from 0 to 256 [ 1667.127768][T19017] gre1: entered promiscuous mode [ 1667.642868][T19024] fuse: Bad value for 'fd' [ 1668.907536][T19050] loop6: detected capacity change from 0 to 128 [ 1669.174020][T19053] netlink: 'syz.8.3285': attribute type 4 has an invalid length. [ 1670.231412][T19074] IPv6: addrconf: prefix option has invalid lifetime [ 1671.055675][T19088] loop6: detected capacity change from 0 to 128 [ 1671.985238][T12226] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1672.021207][T19101] netlink: 'syz.6.3298': attribute type 4 has an invalid length. [ 1672.176135][T12226] usb 10-1: Using ep0 maxpacket: 16 [ 1672.195159][T12226] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1672.234136][T12226] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1672.275463][T12226] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1672.286937][T12226] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1672.319199][T12226] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.361533][T12226] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1672.380631][T12226] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1672.414340][T12226] usb 10-1: Manufacturer: syz [ 1672.437950][T12226] usb 10-1: config 0 descriptor?? [ 1672.750799][T19095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1672.771441][T19095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1673.129550][T12226] rc_core: IR keymap rc-hauppauge not found [ 1673.158312][T12226] Registered IR keymap rc-empty [ 1673.175630][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.223774][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.272454][T12226] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1673.340983][T12226] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input35 [ 1673.433494][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.539902][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.610318][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.650185][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.686034][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.734738][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.789900][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.840468][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.872414][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.909866][T12226] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1673.982196][T12226] mceusb 10-1:0.0: Registered with mce emulator interface version 1 [ 1674.010797][T12226] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1674.097844][T12226] usb 10-1: USB disconnect, device number 72 [ 1675.547275][T19145] netlink: 'syz.1.3313': attribute type 4 has an invalid length. [ 1676.080217][T12226] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 1676.276116][T12226] usb 7-1: config 0 has no interfaces? [ 1676.299965][T12226] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1676.349697][T12226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.374123][T12226] usb 7-1: config 0 descriptor?? [ 1676.631918][T19151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1676.681380][T19151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1676.712864][ T5832] usb 7-1: USB disconnect, device number 60 [ 1677.219995][T12226] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1677.400076][T12226] usb 7-1: Using ep0 maxpacket: 16 [ 1677.437531][T12226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1677.490371][T12226] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.543823][T12226] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1677.588668][T12226] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1677.636177][T12226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.692398][T12226] usb 7-1: config 0 descriptor?? [ 1677.935232][T19151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.953519][T19151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1678.181148][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1678.192193][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1678.203631][T12226] usbhid 7-1:0.0: can't add hid device: -71 [ 1678.212226][T12226] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1678.270871][T12226] usb 7-1: USB disconnect, device number 61 [ 1678.499449][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.506231][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.215148][T19190] netlink: 'syz.1.3327': attribute type 4 has an invalid length. [ 1679.290436][T19194] hsr0: entered promiscuous mode [ 1679.332289][T19194] hsr0: entered allmulticast mode [ 1679.337574][T19194] hsr_slave_0: entered allmulticast mode [ 1679.386197][T19194] hsr_slave_1: entered allmulticast mode [ 1679.796820][T19204] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3333'. [ 1681.055803][T19229] netlink: 'syz.1.3343': attribute type 4 has an invalid length. [ 1681.282806][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3345'. [ 1681.337348][T19234] bridge_slave_1: left allmulticast mode [ 1681.362973][T19234] bridge_slave_1: left promiscuous mode [ 1681.390924][T19234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.428106][T19234] bridge_slave_0: left allmulticast mode [ 1681.464883][T19234] bridge_slave_0: left promiscuous mode [ 1681.492906][T19234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.744090][T19238] fuse: root generation should be zero [ 1683.753984][T19261] ===================================================== [ 1683.761993][T19261] BUG: KMSAN: uninit-value in netif_skb_features+0x6fb/0x1870 [ 1683.769878][T19261] netif_skb_features+0x6fb/0x1870 [ 1683.775196][T19261] validate_xmit_skb+0xb6/0x2400 [ 1683.780450][T19261] validate_xmit_skb_list+0xd4/0x320 [ 1683.785931][T19261] sch_direct_xmit+0xd4/0xcf0 [ 1683.791170][T19261] __dev_queue_xmit+0x301d/0x5980 [ 1683.796390][T19261] packet_xmit+0x8f/0x710 [ 1683.801331][T19261] packet_sendmsg+0x91d9/0xa320 [ 1683.806562][T19261] ____sys_sendmsg+0xf37/0xfd0 [ 1683.811747][T19261] ___sys_sendmsg+0x271/0x3b0 [ 1683.816581][T19261] __x64_sys_sendmsg+0x211/0x3e0 [ 1683.821870][T19261] x64_sys_call+0x1e20/0x3ea0 [ 1683.826890][T19261] do_syscall_64+0x134/0xf80 [ 1683.831886][T19261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.837998][T19261] [ 1683.840591][T19261] Uninit was created at: [ 1683.845191][T19261] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1683.851921][T19261] __alloc_skb+0x855/0x1190 [ 1683.856749][T19261] alloc_skb_with_frags+0xc5/0xa60 [ 1683.862286][T19261] sock_alloc_send_pskb+0xacb/0xc60 [ 1683.867725][T19261] packet_sendmsg+0x7477/0xa320 [ 1683.872881][T19261] ____sys_sendmsg+0xf37/0xfd0 [ 1683.877827][T19261] ___sys_sendmsg+0x271/0x3b0 [ 1683.882869][T19261] __x64_sys_sendmsg+0x211/0x3e0 [ 1683.887988][T19261] x64_sys_call+0x1e20/0x3ea0 [ 1683.892978][T19261] do_syscall_64+0x134/0xf80 [ 1683.897704][T19261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.903904][T19261] [ 1683.906350][T19261] CPU: 0 UID: 0 PID: 19261 Comm: syz.1.3354 Not tainted syzkaller #0 PREEMPT(full) [ 1683.916093][T19261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1683.926419][T19261] ===================================================== [ 1683.933629][T19261] Disabling lock debugging due to kernel taint [ 1683.940046][T19261] Kernel panic - not syncing: kmsan.panic set ... [ 1683.946595][T19261] CPU: 0 UID: 0 PID: 19261 Comm: syz.1.3354 Tainted: G B syzkaller #0 PREEMPT(full) [ 1683.957702][T19261] Tainted: [B]=BAD_PAGE [ 1683.961932][T19261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 1683.972098][T19261] Call Trace: [ 1683.975458][T19261] [ 1683.978460][T19261] __dump_stack+0x26/0x30 [ 1683.983031][T19261] dump_stack_lvl+0x50/0x1c0 [ 1683.987760][T19261] ? dump_stack+0x12/0x25 [ 1683.992236][T19261] dump_stack+0x1e/0x25 [ 1683.996529][T19261] vpanic+0x7b4/0x1430 [ 1684.000772][T19261] panic+0x15d/0x160 [ 1684.004878][T19261] kmsan_report+0x31a/0x320 [ 1684.009567][T19261] ? __msan_warning+0x1b/0x30 [ 1684.014401][T19261] ? netif_skb_features+0x6fb/0x1870 [ 1684.019858][T19261] ? validate_xmit_skb+0xb6/0x2400 [ 1684.025139][T19261] ? validate_xmit_skb_list+0xd4/0x320 [ 1684.030771][T19261] ? sch_direct_xmit+0xd4/0xcf0 [ 1684.035816][T19261] ? __dev_queue_xmit+0x301d/0x5980 [ 1684.041236][T19261] ? packet_xmit+0x8f/0x710 [ 1684.045901][T19261] ? packet_sendmsg+0x91d9/0xa320 [ 1684.051087][T19261] ? ____sys_sendmsg+0xf37/0xfd0 [ 1684.056146][T19261] ? ___sys_sendmsg+0x271/0x3b0 [ 1684.061125][T19261] ? __x64_sys_sendmsg+0x211/0x3e0 [ 1684.066363][T19261] ? x64_sys_call+0x1e20/0x3ea0 [ 1684.071373][T19261] ? do_syscall_64+0x134/0xf80 [ 1684.076273][T19261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.082496][T19261] ? __skb_flow_dissect+0x941a/0xa1f0 [ 1684.088089][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.093377][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.098677][T19261] __msan_warning+0x1b/0x30 [ 1684.103337][T19261] netif_skb_features+0x6fb/0x1870 [ 1684.108658][T19261] validate_xmit_skb+0xb6/0x2400 [ 1684.113758][T19261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1684.119754][T19261] ? mrp_pdu_append_vecattr_event+0x2a31/0x2aa0 [ 1684.126169][T19261] ? filter_irq_stacks+0x49/0x190 [ 1684.131518][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.136832][T19261] validate_xmit_skb_list+0xd4/0x320 [ 1684.142326][T19261] sch_direct_xmit+0xd4/0xcf0 [ 1684.147157][T19261] ? kmsan_get_metadata+0x146/0x160 [ 1684.152533][T19261] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1684.159053][T19261] __dev_queue_xmit+0x301d/0x5980 [ 1684.164263][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.169551][T19261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1684.175630][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.180915][T19261] ? __dev_queue_xmit+0x27a/0x5980 [ 1684.186243][T19261] packet_xmit+0x8f/0x710 [ 1684.190733][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.196022][T19261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1684.202021][T19261] packet_sendmsg+0x91d9/0xa320 [ 1684.207028][T19261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1684.213022][T19261] ? aa_label_sk_perm+0x759/0x810 [ 1684.218427][T19261] ? tomoyo_socket_bind_permission+0x301/0x370 [ 1684.224769][T19261] ? filter_irq_stacks+0x10/0x190 [ 1684.229972][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.235361][T19261] ? __pfx_packet_sendmsg+0x10/0x10 [ 1684.240711][T19261] ____sys_sendmsg+0xf37/0xfd0 [ 1684.245645][T19261] ___sys_sendmsg+0x271/0x3b0 [ 1684.250444][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.255761][T19261] ? __rcu_read_unlock+0x6c/0xd0 [ 1684.261021][T19261] ? __fget_files+0x3b4/0x4a0 [ 1684.265951][T19261] ? __fget_files+0x3b9/0x4a0 [ 1684.270762][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.276064][T19261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1684.282062][T19261] __x64_sys_sendmsg+0x211/0x3e0 [ 1684.287142][T19261] ? kmsan_get_metadata+0xf1/0x160 [ 1684.292446][T19261] x64_sys_call+0x1e20/0x3ea0 [ 1684.297292][T19261] do_syscall_64+0x134/0xf80 [ 1684.302013][T19261] ? clear_bhb_loop+0x50/0xa0 [ 1684.306834][T19261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.312876][T19261] RIP: 0033:0x7f6dc339c799 [ 1684.317402][T19261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1684.337148][T19261] RSP: 002b:00007f6dc41fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1684.345697][T19261] RAX: ffffffffffffffda RBX: 00007f6dc3615fa0 RCX: 00007f6dc339c799 [ 1684.353784][T19261] RDX: 00000000200400d1 RSI: 0000200000002ac0 RDI: 0000000000000004 [ 1684.361857][T19261] RBP: 00007f6dc3432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1684.369934][T19261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1684.378000][T19261] R13: 00007f6dc3616038 R14: 00007f6dc3615fa0 R15: 00007ffcfcd99be8 [ 1684.386112][T19261] [ 1684.389479][T19261] Kernel Offset: disabled [ 1684.393850][T19261] Rebooting in 86400 seconds..