last executing test programs: 2m28.740215499s ago: executing program 1 (id=2672): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, 0x0, 0x30d}, 0x14}}, 0x0) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x6, r2}, 0x38) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffe0, 0xa}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0xd5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m28.315793447s ago: executing program 1 (id=2674): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "0517a9f6040839040000008d776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001800dd88000000000000000202000000"], 0x4c}}, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x101, 0x48001051, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:,:/', 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) syz_usb_connect$uac2(0x3, 0x87, 0x0, 0x0) 2m25.309469053s ago: executing program 1 (id=2685): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) setpriority(0x0, 0x1, 0xa7a8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r6, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) socket$kcm(0x10, 0x2, 0x4) ioprio_set$uid(0x3, 0x0, 0x4007) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0xa01f, 0x100000000) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 2m24.020184489s ago: executing program 1 (id=2687): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x60242, 0x0) write$vga_arbiter(r3, &(0x7f00000010c0)=ANY=[@ANYBLOB="6c6f636b20696f11f90908ef332bcd00"], 0x8) close(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffff8}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r4) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8437f, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/4109, 0x100d) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000040000", @ANYBLOB="010100"/13, @ANYRES32, @ANYRES32, @ANYBLOB="050000000300000003000000010000000000000000000000008a58da2201000000f2e106be3411e0b756fc67067f"], 0x50) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880), &(0x7f0000000280), &(0x7f0000000000)) 2m19.464822078s ago: executing program 1 (id=2698): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xd, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x49, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x4d, 0xe9}}}}}]}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x80047455, 0x0) syz_io_uring_setup(0xf01, 0x0, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m12.581545776s ago: executing program 1 (id=2715): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(r4, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x40020, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfa9f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@seclabel}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r7 = openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$TIOCGRS485(r7, 0x542e, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 1m57.137603805s ago: executing program 32 (id=2715): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000000c0)={0x0, "faffffffffffffff48b421df09030b734bbd3767161ed499223689aa3964cd59"}) r4 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(r4, &(0x7f00000001c0)) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) fanotify_init(0x200, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x40020, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfa9f}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@seclabel}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) r7 = openat$ttyS3(0xffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$TIOCGRS485(r7, 0x542e, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) 25.816909421s ago: executing program 0 (id=2899): syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x8, 0x3a3, {0x5, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @multicast1}}}}}}, 0x0) 25.675248439s ago: executing program 0 (id=2900): syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a0000000824"], 0x0) 24.195448892s ago: executing program 0 (id=2904): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1418, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x25}}, 0x4008040) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5) r4 = timerfd_create(0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f000011b000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000021c0)=""/4105, 0x100a, 0x1, 0x0}, &(0x7f0000000340)=0x4b) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x2, 0x1, {0xa, 0x4e21, 0x1, @mcast1, 0x4}}}, 0x32) timerfd_settime(r4, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000180)={0x0, 0xff, [0x7, 0x4, 0x6, 0x9, 0x70888c63, 0x9]}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 22.469905263s ago: executing program 0 (id=2909): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x2}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a5092", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090000000000000000000200000014000180"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x48, 0xb}) writev(r8, &(0x7f0000000680)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) 21.437292054s ago: executing program 0 (id=2913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 21.264327682s ago: executing program 0 (id=2914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x15}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 6.212535728s ago: executing program 33 (id=2914): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x15}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 6.210782152s ago: executing program 3 (id=2971): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) 5.242826317s ago: executing program 2 (id=2974): unshare(0x40400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000002c0), 0x4) 4.908876115s ago: executing program 2 (id=2976): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106a051503000000000001090224000100005000090400000903000000092100000001222b000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.393323532s ago: executing program 4 (id=2979): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r0, 0x11c, 0x4, 0x0, 0x0) 4.224790177s ago: executing program 4 (id=2981): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@mcast2, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x3, 0x2, 0x5, 0x100, 0xbc, 0xc20022, r1}) 4.084215558s ago: executing program 3 (id=2982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b", 0x9d}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9", 0xf}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x328}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.072773381s ago: executing program 4 (id=2983): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) 3.772568379s ago: executing program 3 (id=2985): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) 3.719397858s ago: executing program 5 (id=2986): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000001c0)={0x1f, {0xbffffff6, 0x2}}) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0608630002560e2be2c6", 0xc, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x800, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x9, 0xfff3}, {0xffff, 0xb}, {0xfff3, 0xffea}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000029000000040000002f0000000000000087fe5fe120159a5e66cae563f79574ebbfcf6d5c39d186354b85b1a6408419fa19801ad41996a5a7810da942da1c9bd127f42470084bcee1a39e7c5b84b31512938f942c261801abe68c65504686afc3b86b34340911fcf19f85b3108129866842e1ec7571b2dd09ed8df0904edeedd07b5fdf59aceb527aee3d0d75615e2f94730699b156297cb076d164086eaefc1128bf5a8e82607a7a2770297296a441e4d3acc9"], 0x18}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000001400"], 0xa4}}, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 3.58834629s ago: executing program 3 (id=2987): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 3.5687761s ago: executing program 4 (id=2988): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/58, 0x3a}, 0x2}], 0x1, 0x0, 0x0) 3.397274119s ago: executing program 3 (id=2989): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000070) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000200)={@remote, @loopback, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@delchain={0x4c, 0x65, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x10, 0xfff1}, {0xfff1}, {0x3, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xe, 0xf}}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r9, 0x8, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r8, 0x540b, 0x1) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r10, 0x4c80, 0xffffffffffffffb6) 3.247834357s ago: executing program 4 (id=2990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x69ad, &(0x7f00000004c0)={0x0, 0x9d80, 0x1, 0x2, 0x366}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendfile(r3, r3, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010600797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073067a32000000000900010073797a30", @ANYRES64=r9, @ANYRES8=r8], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x88) 3.015359584s ago: executing program 2 (id=2991): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r9, 0xffffffffffffffff, 0x0) 2.227851324s ago: executing program 5 (id=2992): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x101, 0x9, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0xc1c9a326d7c51995}, 0x4009004) 2.084653209s ago: executing program 5 (id=2993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x5c, r1, 0x813, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "7876d6d9483689a0256bcd794a17ff7b0d56b0a9ad2b3654154350f3"}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.96063728s ago: executing program 5 (id=2994): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f00000001c0)={0x0}) 1.795473707s ago: executing program 5 (id=2995): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b", 0x9d}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9", 0xf}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x4, 0x17, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x80}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x11, "e80ee304ecb784ec4655260cecea14e498"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x198, 0x29, 0x36, {0x5e, 0x2f, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @generic={0x8, 0xc6, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x328}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.442017828s ago: executing program 5 (id=2996): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000005bcca2023380100eb030102030109021b000100000000090400000198dc4a00090585", @ANYRESDEC], 0x0) syz_usb_disconnect(r0) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 1.236301914s ago: executing program 2 (id=2997): syz_open_dev$usbmon(&(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1.135436773s ago: executing program 2 (id=2998): r0 = socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x28000600) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000002f40)={0x1, 'dummy0\x00', 0x2}, 0x18) 904.142078ms ago: executing program 2 (id=2999): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x0}, {0xfffb, 0x1811, 0x0, 0x0}], 0x2}) 108.835849ms ago: executing program 3 (id=3000): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYBLOB="030000"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=3001): unshare(0x20000400) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) kernel console output (not intermixed with test programs): : syz [ 994.095109][T15877] usb 2-1: SerialNumber: syz [ 994.115385][T15877] usb 2-1: config 0 descriptor?? [ 994.197048][ T808] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 994.374795][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 994.391198][ T808] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 994.413158][ T808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.443188][ T808] usb 4-1: config 0 has no interface number 0 [ 994.460944][ T808] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 994.486565][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 994.497878][ T808] usb 4-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 994.522635][T17315] syz_tun: entered promiscuous mode [ 994.533592][ T808] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 994.546880][T17315] vlan2: entered promiscuous mode [ 994.553866][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.569079][T17316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 994.592153][ T808] usb 4-1: config 0 descriptor?? [ 994.611609][ T808] ldusb 4-1:0.55: Interrupt in endpoint not found [ 994.706233][T17318] netlink: 'syz.2.2515': attribute type 4 has an invalid length. [ 995.180152][T15877] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71 [ 995.213516][T15877] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 995.255495][T15877] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 995.292214][T15877] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 995.356888][T15877] usb 2-1: USB disconnect, device number 54 [ 995.769769][T15877] usb 4-1: USB disconnect, device number 73 [ 996.105350][T11653] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 996.270935][T11653] usb 2-1: Using ep0 maxpacket: 8 [ 996.316530][T11653] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 996.387276][T11653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.462033][T11653] usb 2-1: Product: syz [ 996.491572][T11653] usb 2-1: Manufacturer: syz [ 996.509710][T11653] usb 2-1: SerialNumber: syz [ 996.576564][T11653] usb 2-1: config 0 descriptor?? [ 996.817328][T11653] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 997.668236][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'. [ 997.711314][T17350] batadv0: entered promiscuous mode [ 997.720033][T17350] batadv_slave_1: entered promiscuous mode [ 997.850052][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 997.898445][T17350] macvtap1: entered promiscuous mode [ 997.916844][T17350] bond0: entered promiscuous mode [ 997.934173][T17350] macvtap1: entered allmulticast mode [ 997.981947][T17350] bond0: entered allmulticast mode [ 998.005267][T17350] batadv0: entered allmulticast mode [ 998.024467][T17350] batadv_slave_1: entered allmulticast mode [ 998.060422][T17350] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 998.229020][T11653] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 998.267352][T11653] usb 2-1: USB disconnect, device number 55 [ 998.313438][T17351] bond0: left allmulticast mode [ 998.338389][T17351] batadv0: left allmulticast mode [ 998.366188][T17351] batadv_slave_1: left allmulticast mode [ 998.390175][T17351] bond0: left promiscuous mode [ 998.409206][T17351] batadv0: left promiscuous mode [ 998.416903][T17351] batadv_slave_1: left promiscuous mode [ 998.818166][T17356] TC_ACT_REPEAT abuse ? [ 999.045267][T15880] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 999.104657][ T808] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 999.256088][T15880] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 999.276428][T15880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.277036][ T808] usb 2-1: not running at top speed; connect to a high speed hub [ 999.296948][T15880] usb 4-1: Product: syz [ 999.302452][T15880] usb 4-1: Manufacturer: syz [ 999.310451][T15880] usb 4-1: SerialNumber: syz [ 999.317844][ T808] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 999.336349][ T808] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 999.350063][T15880] usb 4-1: config 0 descriptor?? [ 999.356953][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.370294][T17370] fuse: Bad value for 'fd' [ 999.375536][ T808] usb 2-1: Product: syz [ 999.415096][ T808] usb 2-1: Manufacturer: syz [ 999.441036][ T808] usb 2-1: SerialNumber: syz [ 999.506395][T17370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2531'. [ 999.717200][T11653] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 999.736054][T15880] usb 4-1: USB disconnect, device number 74 [ 999.875023][T11653] usb 3-1: Using ep0 maxpacket: 16 [ 999.886426][T11653] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 999.901813][T11653] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 999.917904][T11653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 999.937456][T11653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 999.956640][T11653] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 999.969707][T11653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.980094][T11653] usb 3-1: Product: syz [ 999.988010][T11653] usb 3-1: Manufacturer: syz [ 1000.023638][ T808] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1000.040662][T11653] usb 3-1: SerialNumber: syz [ 1000.061654][T11653] usb 3-1: config 0 descriptor?? [ 1000.068268][ T808] usb 2-1: unit 94 not found! [ 1000.112878][T17376] netlink: 'syz.0.2533': attribute type 1 has an invalid length. [ 1000.230324][T17376] bond1: entered promiscuous mode [ 1000.249295][ T808] usb 2-1: USB disconnect, device number 56 [ 1000.261281][T17376] bond1: entered allmulticast mode [ 1000.300782][T11653] appledisplay: Apple Cinema Display connected [ 1000.310189][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2533'. [ 1000.374405][T17376] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.406354][T16974] udevd[16974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.577560][T17378] erspan1: entered allmulticast mode [ 1000.611599][T17382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.637748][T17378] bond1: (slave erspan1): making interface the new active one [ 1000.663829][T17378] erspan1: entered promiscuous mode [ 1000.673850][T17382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.716280][T17378] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1000.812435][T17379] bond1 (unregistering): (slave erspan1): Releasing active interface [ 1000.825364][T17379] erspan1: left promiscuous mode [ 1000.852455][T17379] bond1 (unregistering): Released all slaves [ 1000.969417][T11653] usb 3-1: USB disconnect, device number 48 [ 1000.976394][ C0] usb 3-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 1001.039714][T11653] appledisplay: Apple Cinema Display disconnected [ 1001.459853][T17400] fuse: Bad value for 'fd' [ 1001.539245][T17400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2537'. [ 1001.822354][T17407] tipc: Enabled bearer , priority 0 [ 1001.831732][T17405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.844533][T17407] syzkaller0: entered promiscuous mode [ 1001.851819][T17407] syzkaller0: entered allmulticast mode [ 1001.957104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.967690][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.978907][T17407] tipc: Resetting bearer [ 1001.993037][T17407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.003430][T17407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.042103][T17406] tipc: Resetting bearer [ 1002.115258][T17406] tipc: Disabling bearer [ 1002.304942][T17413] netlink: 'syz.0.2541': attribute type 5 has an invalid length. [ 1002.615433][ T1230] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1002.774565][ T1230] usb 3-1: Using ep0 maxpacket: 8 [ 1002.801487][ T1230] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1002.839389][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.891578][T17417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'. [ 1002.983493][ T1230] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1003.043771][ T1230] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 1003.252578][ T1230] usb 3-1: USB disconnect, device number 49 [ 1003.618971][T17432] fuse: Bad value for 'fd' [ 1003.678786][T17432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2547'. [ 1003.724276][ T808] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1003.860825][T17436] netlink: 'syz.2.2548': attribute type 13 has an invalid length. [ 1003.884288][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 1003.895304][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1003.914744][ T808] usb 5-1: config 9 has an invalid interface number: 3 but max is 0 [ 1003.927774][ T808] usb 5-1: config 9 has no interface number 0 [ 1003.940327][ T808] usb 5-1: config 9 interface 3 has no altsetting 0 [ 1003.959756][ T808] usb 5-1: New USB device found, idVendor=09fb, idProduct=602e, bcdDevice=53.63 [ 1003.988054][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.008400][ T808] usb 5-1: Product: syz [ 1004.021369][ T808] usb 5-1: Manufacturer: syz [ 1004.037151][ T808] usb 5-1: SerialNumber: syz [ 1004.102545][T17438] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1004.116892][T17438] syzkaller0: entered promiscuous mode [ 1004.132004][T17438] syzkaller0: entered allmulticast mode [ 1004.738198][T17442] syzkaller0: entered promiscuous mode [ 1004.762068][T17442] syzkaller0: entered allmulticast mode [ 1004.840656][ T808] ftdi_sio 5-1:9.3: FTDI USB Serial Device converter detected [ 1004.883126][ T808] ftdi_sio ttyUSB0: unknown device type: 0x5363 [ 1004.955491][ T808] usb 5-1: USB disconnect, device number 69 [ 1004.982616][ T808] ftdi_sio 5-1:9.3: device disconnected [ 1005.402684][T17449] syzkaller0: entered promiscuous mode [ 1005.424629][T17449] syzkaller0: entered allmulticast mode [ 1005.637453][T17457] fuse: Bad value for 'fd' [ 1005.689961][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2554'. [ 1005.763140][T17459] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1007.239429][T17477] syzkaller0: entered promiscuous mode [ 1007.272809][T17477] syzkaller0: entered allmulticast mode [ 1007.691082][T17487] syzkaller0: entered promiscuous mode [ 1007.724279][T17487] syzkaller0: entered allmulticast mode [ 1007.770795][T17490] syzkaller0: entered promiscuous mode [ 1007.782167][T17490] syzkaller0: entered allmulticast mode [ 1007.816759][T17487] TC_ACT_REPEAT abuse ? [ 1008.299745][T17493] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1008.442682][T17498] syzkaller0: entered promiscuous mode [ 1008.466641][T17498] syzkaller0: entered allmulticast mode [ 1009.038438][T17507] syzkaller0: entered promiscuous mode [ 1009.057772][T17507] syzkaller0: entered allmulticast mode [ 1009.956333][T17523] fuse: Bad value for 'fd' [ 1010.015362][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2570'. [ 1010.416614][T17531] syzkaller0: entered promiscuous mode [ 1010.437723][T17531] syzkaller0: entered allmulticast mode [ 1010.714906][T11653] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1010.886871][T11653] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1010.951958][T11653] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.021983][T11653] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1011.137474][T11653] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.213950][T11653] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1011.241387][ T1230] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1011.251347][T11653] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1011.272589][T11653] usb 5-1: Product: syz [ 1011.278731][T11653] usb 5-1: Manufacturer: syz [ 1011.302558][T11653] cdc_wdm 5-1:1.0: skipping garbage [ 1011.312391][T11653] cdc_wdm 5-1:1.0: skipping garbage [ 1011.333167][T11653] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1011.356721][T11653] cdc_wdm 5-1:1.0: Unknown control protocol [ 1011.406298][ T1230] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1011.437147][ T1230] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1011.451282][ T1230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1011.464580][ T1230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1011.487804][ T1230] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1011.531848][ T1230] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1011.559513][T11653] usb 5-1: USB disconnect, device number 70 [ 1011.574085][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1011.612919][ T1230] usb 4-1: Product: syz [ 1011.638206][ T1230] usb 4-1: Manufacturer: syz [ 1011.720748][ T1230] cdc_wdm 4-1:1.0: skipping garbage [ 1011.737137][ T1230] cdc_wdm 4-1:1.0: skipping garbage [ 1011.797538][ T1230] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1011.842503][ T1230] cdc_wdm 4-1:1.0: Unknown control protocol [ 1011.906870][T17549] syzkaller0: entered promiscuous mode [ 1011.915280][T17549] syzkaller0: entered allmulticast mode [ 1012.054501][T11653] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1012.199410][T17552] tipc: Enabled bearer , priority 0 [ 1012.212425][T17552] syzkaller0: entered promiscuous mode [ 1012.224902][T11653] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1012.238287][T17552] syzkaller0: entered allmulticast mode [ 1012.263725][T17554] syzkaller0: entered promiscuous mode [ 1012.271734][T17554] syzkaller0: entered allmulticast mode [ 1012.280180][T11653] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.322899][T11653] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1012.367398][T11653] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.414357][T17552] tipc: Resetting bearer [ 1012.428311][T17551] tipc: Resetting bearer [ 1012.438007][T11653] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1012.467873][T17551] tipc: Disabling bearer [ 1012.474249][T11653] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1012.474276][T11653] usb 5-1: Product: syz [ 1012.474290][T11653] usb 5-1: Manufacturer: syz [ 1012.479766][T11653] cdc_wdm 5-1:1.0: skipping garbage [ 1012.536894][T11653] cdc_wdm 5-1:1.0: skipping garbage [ 1012.566353][T11653] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 1012.583850][T11653] cdc_wdm 5-1:1.0: Unknown control protocol [ 1013.371049][T17561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.866436][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1013.873500][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1013.882606][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1013.890022][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1013.898492][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1013.905538][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1013.912419][T15873] usb 4-1: USB disconnect, device number 75 [ 1013.919212][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1013.919241][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1013.919257][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1014.349590][ T1230] usb 5-1: USB disconnect, device number 71 [ 1014.821147][T17587] fuse: Bad value for 'fd' [ 1014.854296][T15873] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1014.972952][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1015.024891][T15873] usb 5-1: Using ep0 maxpacket: 32 [ 1015.041477][T15873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.068956][T15873] usb 5-1: config 0 has no interfaces? [ 1015.085753][T15873] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1015.103619][T15873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.150748][T15873] usb 5-1: Product: syz [ 1015.179253][T15873] usb 5-1: Manufacturer: syz [ 1015.193964][T15873] usb 5-1: SerialNumber: syz [ 1015.216333][T17592] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2588'. [ 1015.228196][T15873] usb 5-1: config 0 descriptor?? [ 1015.479744][T17582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.515144][T17582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.572621][T17582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.621122][T17582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.148788][ T1230] usb 5-1: USB disconnect, device number 72 [ 1016.457247][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1016.511031][T17599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 1016.660611][T17600] netlink: 'syz.2.2589': attribute type 4 has an invalid length. [ 1016.844522][T15873] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 1017.028730][T15873] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1017.062627][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1017.127547][T15873] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.188140][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1017.232043][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1017.295243][T15873] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1017.337751][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1017.426001][T15873] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.510799][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1017.573556][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1017.618244][T15873] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1017.669201][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1017.740560][T15873] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1017.769405][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1017.842228][T15873] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1017.883885][T15873] usb 1-1: string descriptor 0 read error: -22 [ 1017.893530][T15873] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1017.936027][T15873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.044605][T15873] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1019.911287][T15873] usb 1-1: USB disconnect, device number 55 [ 1020.245683][T17643] syzkaller0: entered promiscuous mode [ 1020.274285][T17643] syzkaller0: entered allmulticast mode [ 1020.384284][T17643] tc action pedit offset 67108864 out of bounds [ 1020.394195][T17643] tc action pedit offset 67108864 out of bounds [ 1020.402329][T17643] tc action pedit offset 67108864 out of bounds [ 1020.409841][T17643] tc action pedit offset 67108864 out of bounds [ 1020.417105][T17643] tc action pedit offset 67108864 out of bounds [ 1020.425147][T17643] tc action pedit offset 67108864 out of bounds [ 1020.433324][T17643] tc action pedit offset 67108864 out of bounds [ 1020.441205][T17643] tc action pedit offset 67108864 out of bounds [ 1020.448838][T17643] tc action pedit offset 67108864 out of bounds [ 1020.456400][T17643] tc action pedit offset 67108864 out of bounds [ 1020.464623][T17643] TC_ACT_REPEAT abuse ? [ 1021.154391][T11653] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1021.249257][T17660] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2603'. [ 1021.324211][T11653] usb 1-1: Using ep0 maxpacket: 16 [ 1021.353087][T11653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.383164][T11653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.414830][T11653] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1021.447779][T11653] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1021.477951][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 1021.489151][T11653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.510768][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 1021.528159][T11653] usb 1-1: config 0 descriptor?? [ 1021.650232][T17667] netlink: 'syz.1.2604': attribute type 4 has an invalid length. [ 1022.826204][T17681] syzkaller0: entered promiscuous mode [ 1022.845744][T17681] syzkaller0: entered allmulticast mode [ 1023.374597][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.410641][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.433157][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.467595][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.489805][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.507732][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.519402][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.535088][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 1023.547805][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.568423][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.596374][T11653] a4tech 0003:09DA:000A.0019: unknown main item tag 0x0 [ 1023.652122][T11653] a4tech 0003:09DA:000A.0019: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0 [ 1023.728745][T11653] usb 1-1: USB disconnect, device number 56 [ 1023.735608][T15877] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1023.899545][T17698] fido_id[17698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1023.914669][T15877] usb 2-1: Using ep0 maxpacket: 32 [ 1023.953611][T15877] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1023.967273][T15877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.049186][T15877] usb 2-1: config 0 descriptor?? [ 1024.101134][T15877] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1024.806014][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 1024.837328][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 1024.862867][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x81 [ 1024.901461][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 1024.912517][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x81 [ 1024.930279][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 1024.948481][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 1024.958403][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x81 [ 1024.994027][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80 [ 1025.016470][T17708] kvm: kvm [17707]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x81 [ 1025.129240][T15877] gspca_sunplus: reg_w_riv err -71 [ 1025.153194][T15877] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1025.209470][T15877] usb 2-1: USB disconnect, device number 57 [ 1025.716350][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1025.727388][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 1025.960797][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 1026.054298][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2617'. [ 1026.241591][T17736] netlink: 'syz.1.2617': attribute type 4 has an invalid length. [ 1026.909009][T17743] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1027.244769][T17747] syzkaller0: entered promiscuous mode [ 1027.275376][T17747] syzkaller0: entered allmulticast mode [ 1028.316708][T15877] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1028.487192][T15877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.525106][T15877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.599913][T15877] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1028.635019][T15877] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1028.649896][T15877] usb 1-1: Manufacturer: syz [ 1028.670375][T15877] usb 1-1: config 0 descriptor?? [ 1028.930740][T15873] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 1029.134277][T15873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.152979][T15873] usb 4-1: not running at top speed; connect to a high speed hub [ 1029.204508][T15873] usb 4-1: config 14 has an invalid interface number: 193 but max is 1 [ 1029.214264][T15873] usb 4-1: config 14 has an invalid interface number: 196 but max is 1 [ 1029.232900][T17760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.234211][T15873] usb 4-1: config 14 has no interface number 0 [ 1029.246910][T17760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.280809][T15873] usb 4-1: config 14 has no interface number 1 [ 1029.304336][T15873] usb 4-1: config 14 interface 193 has no altsetting 0 [ 1029.324386][T15873] usb 4-1: config 14 interface 196 has no altsetting 0 [ 1029.385366][T15873] usb 4-1: New USB device found, idVendor=1a61, idProduct=3420, bcdDevice=b6.b5 [ 1029.400334][T15873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.452227][T15873] usb 4-1: Product: syz [ 1029.510705][T15873] usb 4-1: Manufacturer: syz [ 1029.516273][T15873] usb 4-1: SerialNumber: syz [ 1029.792001][T15873] ti_usb_3410_5052 4-1:14.193: TI USB 3410 1 port adapter converter detected [ 1029.825072][T15873] ti_usb_3410_5052 4-1:14.193: missing endpoints [ 1029.882159][T15873] ti_usb_3410_5052 4-1:14.196: required endpoints missing [ 1029.909274][T15873] usb 4-1: USB disconnect, device number 76 [ 1034.335821][T15877] usbhid 1-1:0.0: can't add hid device: -32 [ 1034.342726][T15877] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1035.286659][T15877] usb 1-1: USB disconnect, device number 57 [ 1035.563618][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 1035.876022][T15890] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1036.052862][T15890] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 1036.083396][T15890] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1036.109856][T15890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.126049][T15890] usb 5-1: Product: syz [ 1036.136265][T15890] usb 5-1: Manufacturer: syz [ 1036.150831][T15890] usb 5-1: SerialNumber: syz [ 1036.196043][T15890] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1036.234609][T15877] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1036.385191][T17802] fuse: Bad value for 'fd' [ 1036.573766][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 1036.662084][T17784] random: crng reseeded on system resumption [ 1036.765079][T15873] usb 5-1: USB disconnect, device number 73 [ 1037.132289][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 1037.337156][T15877] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1037.353250][T15877] ath9k_htc: Failed to initialize the device [ 1037.363058][T15873] usb 5-1: ath9k_htc: USB layer deinitialized [ 1037.518931][T17814] fuse: Bad value for 'fd' [ 1037.692827][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 1037.882286][T17820] syzkaller0: entered promiscuous mode [ 1037.901877][T17820] syzkaller0: entered allmulticast mode [ 1037.976655][T15873] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1038.144375][T15873] usb 3-1: Using ep0 maxpacket: 32 [ 1038.153983][T15873] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1038.166686][T15873] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.207920][T15873] usb 3-1: config 0 has no interface number 0 [ 1038.235214][T15873] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1038.329455][T15873] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1038.371031][T15873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.387129][T15873] usb 3-1: Product: syz [ 1038.393779][T15873] usb 3-1: Manufacturer: syz [ 1038.411261][T15873] usb 3-1: SerialNumber: syz [ 1038.470878][T15873] usb 3-1: config 0 descriptor?? [ 1038.494062][T15873] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 1038.528360][T15873] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 1038.685008][T15877] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1038.693167][T15873] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1038.708507][T17825] syzkaller0: entered promiscuous mode [ 1038.717954][T17825] syzkaller0: entered allmulticast mode [ 1038.755065][T17825] tipc: Enabled bearer , priority 0 [ 1038.800070][T17824] tipc: Resetting bearer [ 1038.876606][T15877] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1038.877488][T17824] tipc: Disabling bearer [ 1038.907962][T15877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.953934][T15877] usb 4-1: config 0 has no interface number 0 [ 1038.969914][T17826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.990041][T15877] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1039.005907][T17826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.026874][T15877] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.064132][T15877] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1039.107343][T15877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.135505][T17818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1039.194267][T15877] usb 4-1: Product: syz [ 1039.216598][T15877] usb 4-1: Manufacturer: syz [ 1039.239638][T15877] usb 4-1: SerialNumber: syz [ 1039.276149][T15877] usb 4-1: config 0 descriptor?? [ 1039.683167][T15873] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 1039.851503][T15873] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 1039.896339][T15873] usb 3-1: USB disconnect, device number 50 [ 1039.916652][T15877] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input38 [ 1039.917810][T15873] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 1040.325875][T15890] usb 4-1: USB disconnect, device number 77 [ 1041.285727][T17857] loop6: detected capacity change from 0 to 2640 [ 1041.325943][T17857] buffer_io_error: 12 callbacks suppressed [ 1041.325956][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.361539][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 1041.388310][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.481398][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.510034][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.566083][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.585612][T17866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.590737][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.626502][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.682042][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.702621][T17857] ldm_validate_partition_table(): Disk read failed. [ 1041.720583][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.767779][T17857] Buffer I/O error on dev loop6, logical block 0, async page read [ 1041.833220][T17857] Dev loop6: unable to read RDB block 0 [ 1041.858621][T17857] loop6: unable to read partition table [ 1041.892478][T17857] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1042.504254][T15873] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1042.863516][T15873] usb 1-1: Using ep0 maxpacket: 16 [ 1042.876027][T17891] fuse: Bad value for 'fd' [ 1042.899857][T15873] usb 1-1: config 0 has no interfaces? [ 1042.934019][T15873] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1042.960974][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2654'. [ 1042.984393][T15873] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1042.994738][T15873] usb 1-1: Manufacturer: syz [ 1043.012564][T15873] usb 1-1: config 0 descriptor?? [ 1043.377717][T17879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1043.953584][T17896] dummy0: entered promiscuous mode [ 1043.982382][T17896] macsec1: entered promiscuous mode [ 1043.995641][T17896] vlan3: entered promiscuous mode [ 1044.028125][T17896] vlan3: left promiscuous mode [ 1044.039934][T17896] dummy0: left promiscuous mode [ 1045.061278][T15873] usb 1-1: USB disconnect, device number 58 [ 1045.104301][T15880] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1045.286095][T15880] usb 2-1: Using ep0 maxpacket: 8 [ 1045.311963][T15880] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1045.351327][T15880] usb 2-1: config 179 has no interface number 0 [ 1045.372677][T15880] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1045.401637][T15880] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1045.447406][T15880] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1045.477439][T15880] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1045.576404][T15880] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1045.623800][T15880] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1045.708582][T15880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.881204][T17915] netlink: 'syz.0.2660': attribute type 1 has an invalid length. [ 1045.949422][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'. [ 1046.195028][T11653] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 1046.366857][T11653] usb 3-1: config 8 has an invalid interface number: 177 but max is 0 [ 1046.395334][T11653] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.445820][T11653] usb 3-1: config 8 has no interface number 0 [ 1046.478722][T11653] usb 3-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1046.537158][T11653] usb 3-1: config 8 interface 177 has no altsetting 0 [ 1046.562068][T11653] usb 3-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1046.595916][T11653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.652805][T11653] ir_toy 3-1:8.177: required endpoints not found [ 1046.855035][T15890] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1046.864058][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1047.065089][T15890] usb 4-1: Using ep0 maxpacket: 16 [ 1047.083002][T15890] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.135224][T15890] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1047.204882][T15890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1047.232474][T17935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.247695][T15890] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1047.287070][T15890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.326456][T15890] usb 4-1: config 0 descriptor?? [ 1047.679053][T17937] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 1047.797962][T15890] usbhid 4-1:0.0: can't add hid device: -71 [ 1047.853159][T15890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1047.906127][T15890] usb 4-1: USB disconnect, device number 78 [ 1048.026261][T15873] usb 2-1: USB disconnect, device number 58 [ 1048.048697][T17942] fuse: Bad value for 'fd' [ 1048.164621][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1048.481958][T17948] xt_policy: output policy not valid in PREROUTING and INPUT [ 1048.920201][T17946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2667'. [ 1049.110744][T15890] usb 3-1: USB disconnect, device number 51 [ 1050.344221][T15873] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1050.516765][T15873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.542346][T15873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.557646][T15873] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1050.587343][T15873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.630242][T15873] usb 3-1: config 0 descriptor?? [ 1051.080203][T15873] hid_parser_main: 28 callbacks suppressed [ 1051.080228][T15873] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1051.133107][T15873] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 1051.161871][T15873] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001A/input/input39 [ 1051.267807][T15873] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1052.229005][T15873] usb 3-1: USB disconnect, device number 52 [ 1052.521175][T17989] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1052.529804][T17989] syzkaller0: group set to 0 [ 1053.477198][T18010] fuse: Bad value for 'fd' [ 1054.054948][T15890] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1054.247728][T15890] usb 3-1: not running at top speed; connect to a high speed hub [ 1054.289846][T15890] usb 3-1: config 6 has an invalid descriptor of length 64, skipping remainder of the config [ 1054.437610][T15890] usb 3-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.24 [ 1054.502634][T15890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.553676][T15890] usb 3-1: Product: syz [ 1054.572285][T15890] usb 3-1: Manufacturer: syz [ 1054.590886][T15890] usb 3-1: SerialNumber: syz [ 1055.018977][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.026551][T18029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2688'. [ 1055.036993][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.122204][T15890] qmi_wwan 3-1:6.0: invalid descriptor buffer length [ 1055.136502][T15890] qmi_wwan 3-1:6.0: probe with driver qmi_wwan failed with error -22 [ 1055.157756][T15890] usb 3-1: USB disconnect, device number 53 [ 1055.714262][T15880] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1055.742933][T18037] tipc: Enabled bearer , priority 0 [ 1055.786301][T18037] syzkaller0: entered promiscuous mode [ 1055.805303][T18037] syzkaller0: entered allmulticast mode [ 1055.951176][T15880] usb 2-1: Using ep0 maxpacket: 32 [ 1055.952338][T18037] tipc: Resetting bearer [ 1055.958593][T15880] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1056.008174][T15880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.049234][T15880] usb 2-1: config 0 descriptor?? [ 1056.112218][T18036] tipc: Resetting bearer [ 1056.187482][T15880] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1056.273463][T18036] tipc: Disabling bearer [ 1056.561558][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2692'. [ 1056.796508][T15880] gspca_sunplus: reg_w_riv err -110 [ 1056.821841][T15880] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1056.953616][T15873] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1057.146420][T15873] usb 5-1: Using ep0 maxpacket: 8 [ 1057.205491][T15873] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1057.297957][T15873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1057.316663][T15873] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1057.330422][T15873] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1057.350328][T15873] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1057.363845][T15873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.619474][T15873] usb 5-1: GET_CAPABILITIES returned 0 [ 1057.636555][T15873] usbtmc 5-1:16.0: can't read capabilities [ 1057.671031][T18068] xt_ecn: cannot match TCP bits for non-tcp packets [ 1057.996305][T18070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.017930][T18070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.033020][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 1058.985648][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 1058.997679][T18076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2697'. [ 1059.077507][T18079] netlink: 'syz.0.2697': attribute type 4 has an invalid length. [ 1059.204784][T15890] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1059.344570][T15890] usb 4-1: device descriptor read/64, error -71 [ 1059.398109][T15877] usb 2-1: USB disconnect, device number 59 [ 1059.614434][T15890] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1059.755375][T15890] usb 4-1: device descriptor read/64, error -71 [ 1059.886131][T15890] usb usb4-port1: attempt power cycle [ 1060.235278][T15890] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1060.451640][T15890] usb 4-1: device descriptor read/8, error -71 [ 1060.520877][T18087] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2700'. [ 1060.526101][T11653] usb 5-1: USB disconnect, device number 74 [ 1061.216299][T11653] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1061.394633][T11653] usb 2-1: Using ep0 maxpacket: 16 [ 1061.760176][T11653] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.801434][T11653] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1061.870412][T11653] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1061.906847][T11653] usb 2-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 1061.944344][T11653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.998706][T11653] usb 2-1: config 0 descriptor?? [ 1063.728281][T15873] hid-generic 0008:0091:0009.001B: reserved main item tag 0xd [ 1063.789842][T15873] hid-generic 0008:0091:0009.001B: item fetching failed at offset 28/32 [ 1063.855435][T15873] hid-generic 0008:0091:0009.001B: probe with driver hid-generic failed with error -22 [ 1066.108295][T18163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1066.179115][T11653] usb 2-1: string descriptor 0 read error: -71 [ 1066.193297][T18165] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2713'. [ 1066.272571][T11653] usbhid 2-1:0.0: can't add hid device: -71 [ 1066.363806][T11653] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1066.455336][T11653] usb 2-1: USB disconnect, device number 60 [ 1066.964256][T15873] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1067.311235][T15873] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1067.350894][T15873] usb 4-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 1067.388976][T15873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.441062][T15873] usb 4-1: config 0 descriptor?? [ 1067.476351][T15873] pwc: Samsung MPC-C30 USB webcam detected. [ 1068.984237][T11653] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1070.675718][T15873] pwc: send_video_command error -71 [ 1070.705539][T15873] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1070.741823][T15873] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1070.812339][T15873] usb 4-1: USB disconnect, device number 83 [ 1071.294383][T18198] fuse: Bad value for 'fd' [ 1072.302530][T18210] batman_adv: batadv0: Adding interface: dummy0 [ 1072.312325][T18210] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.347336][T18210] batman_adv: batadv0: Interface activated: dummy0 [ 1072.386831][T18212] batadv0: mtu less than device minimum [ 1072.405043][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.420225][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.433037][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.447509][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.461409][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.474556][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.487345][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.500838][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.514173][T18212] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1072.598651][T18210] netlink: 'syz.0.2723': attribute type 10 has an invalid length. [ 1073.265414][T18220] netlink: 'syz.4.2724': attribute type 4 has an invalid length. [ 1073.679148][T18233] fuse: Bad value for 'fd' [ 1073.749611][T18233] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2727'. [ 1075.015433][T11653] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1075.134321][T15880] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1075.254986][T11653] usb 5-1: Using ep0 maxpacket: 8 [ 1075.305795][T11653] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1075.352572][T18248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2731'. [ 1075.354830][T15880] usb 3-1: Using ep0 maxpacket: 8 [ 1075.383541][T11653] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1075.393250][T11653] usb 5-1: config 0 has no interface number 0 [ 1075.449433][T11653] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1075.479924][T11653] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1075.480344][T15880] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1075.598906][T15880] usb 3-1: config 0 has no interface number 0 [ 1075.641642][T15880] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1075.702797][T15880] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1075.717560][T15880] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1075.734902][T15880] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1075.758940][T15880] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1075.769945][T15880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.781532][T15880] usb 3-1: config 0 descriptor?? [ 1075.805859][T15880] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1075.858669][T11653] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1075.926108][T11653] usb 5-1: string descriptor 0 read error: -22 [ 1075.938288][T11653] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1075.958563][T11653] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1075.990997][T11653] usb 5-1: config 0 descriptor?? [ 1076.030218][T11653] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input40 [ 1076.263343][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 1076.463533][T16974] udevd[16974]: Error opening device "/dev/input/event4": Input/output error [ 1076.481279][T16974] udevd[16974]: Unable to EVIOCGABS device "/dev/input/event4" [ 1076.495839][T16974] udevd[16974]: Unable to EVIOCGABS device "/dev/input/event4" [ 1076.782687][T15880] usb 3-1: USB disconnect, device number 55 [ 1076.832009][T15880] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1077.649373][T18257] fuse: Bad value for 'fd' [ 1078.167007][T18263] netlink: 'syz.2.2734': attribute type 4 has an invalid length. [ 1078.285305][T11653] usb 5-1: USB disconnect, device number 75 [ 1078.713100][T18267] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1078.761995][T18267] PKCS7: Only support pkcs7_signedData type [ 1079.334421][T11653] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1079.524265][T11653] usb 4-1: Using ep0 maxpacket: 8 [ 1079.541488][T11653] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1079.601316][T11653] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1079.642363][T11653] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1079.708136][T11653] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1079.769984][T11653] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.841672][T11653] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1079.892537][T11653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.922492][T18286] netlink: 'syz.2.2738': attribute type 4 has an invalid length. [ 1080.189421][T11653] usb 4-1: GET_CAPABILITIES returned 0 [ 1080.239012][T11653] usbtmc 4-1:16.0: can't read capabilities [ 1081.227847][T18300] fuse: Bad value for 'fd' [ 1081.312759][T18302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2741'. [ 1082.185823][T11653] usb 4-1: USB disconnect, device number 84 [ 1082.432895][T18310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1082.470061][T18310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1082.488232][T18310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1082.510771][T18310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1082.601120][T18310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1082.757097][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1082.766996][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1082.775356][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1082.787438][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1082.801682][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1083.431597][T18321] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2744'. [ 1083.493770][ T1230] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1083.575421][ T1230] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1083.783056][T18314] chnl_net:caif_netlink_parms(): no params data found [ 1084.402259][T18314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.445097][T15877] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1084.461487][T18314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.528212][T18314] bridge_slave_0: entered allmulticast mode [ 1084.593847][T18314] bridge_slave_0: entered promiscuous mode [ 1084.637363][T15877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.657706][T18314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.689691][T18314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.705888][T18340] fuse: Bad value for 'fd' [ 1084.718333][T15877] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1084.745935][T18314] bridge_slave_1: entered allmulticast mode [ 1084.762246][T18314] bridge_slave_1: entered promiscuous mode [ 1084.823644][T18314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.869475][T18314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.889131][T15877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.918587][T18314] team0: Port device team_slave_0 added [ 1084.942795][T18314] team0: Port device team_slave_1 added [ 1084.951253][ T5852] Bluetooth: hci5: command tx timeout [ 1085.008607][T18314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.019514][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.051908][T18314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.068690][T18314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.077138][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.112619][T18314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.162298][T15877] usb 4-1: config 0 descriptor?? [ 1085.478125][T15877] usb 4-1: USB disconnect, device number 85 [ 1085.507544][T18314] hsr_slave_0: entered promiscuous mode [ 1085.532299][T18314] hsr_slave_1: entered promiscuous mode [ 1085.557173][T18314] debugfs: 'hsr0' already exists in 'hsr' [ 1085.567921][T18314] Cannot create hsr debugfs directory [ 1086.004275][T15880] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1086.185946][T15880] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1086.202816][T15880] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1086.263029][T18314] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1086.293990][T15880] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1086.335023][T15880] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1086.350089][T15880] usb 5-1: Product: syz [ 1086.358547][T15880] usb 5-1: Manufacturer: syz [ 1086.373221][T15880] usb 5-1: SerialNumber: syz [ 1086.392372][T15880] usb 5-1: config 0 descriptor?? [ 1086.403281][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.414749][T18314] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1086.423550][T15880] usb 5-1: selecting invalid altsetting 0 [ 1086.569530][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.595145][T18314] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1086.631189][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.652741][T18314] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1086.708654][T18314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1086.734007][T18346] netlink: 'syz.0.2749': attribute type 4 has an invalid length. [ 1086.901388][T15880] usb 5-1: USB disconnect, device number 76 [ 1087.027925][ T5852] Bluetooth: hci5: command tx timeout [ 1087.562579][T18314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.688083][T18314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.746540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.755702][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.836384][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.845636][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.029597][T18314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.094348][ T5852] Bluetooth: hci5: command tx timeout [ 1089.394854][T18314] veth0_vlan: entered promiscuous mode [ 1089.441449][T18314] veth1_vlan: entered promiscuous mode [ 1089.658040][T18314] veth0_macvtap: entered promiscuous mode [ 1089.709694][T18314] veth1_macvtap: entered promiscuous mode [ 1089.793090][T18314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.849426][T18314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.870801][T18381] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2753'. [ 1089.897557][T10247] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.911083][T10247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.932542][T10247] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.947814][T10247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.019284][T18385] fuse: Bad value for 'fd' [ 1090.335897][T15880] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1090.348047][T10251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.400728][T10251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.564785][T15880] usb 4-1: config 1 has an invalid interface number: 94 but max is 0 [ 1090.579905][T15880] usb 4-1: config 1 has no interface number 0 [ 1090.629688][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.649127][T15880] usb 4-1: config 1 interface 94 altsetting 233 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1090.718572][T15880] usb 4-1: config 1 interface 94 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1090.772719][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.824235][T15880] usb 4-1: config 1 interface 94 has no altsetting 0 [ 1090.852508][T15880] usb 4-1: New USB device found, idVendor=2100, idProduct=9e66, bcdDevice=c7.28 [ 1090.902378][T15880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.180029][ T5852] Bluetooth: hci5: command tx timeout [ 1093.410149][T15880] usb 4-1: string descriptor 0 read error: -71 [ 1093.436362][T18399] input: syz1 as /devices/virtual/input/input41 [ 1093.446635][T15880] ftdi_sio 4-1:1.94: FTDI USB Serial Device converter detected [ 1093.463203][T15880] ftdi_sio ttyUSB0: unknown device type: 0xc728 [ 1093.522040][T15880] usb 4-1: USB disconnect, device number 86 [ 1093.531735][T15880] ftdi_sio 4-1:1.94: device disconnected [ 1096.163761][T18434] netlink: 'syz.5.2761': attribute type 4 has an invalid length. [ 1097.331930][T18443] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2763'. [ 1097.434261][T15880] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1097.619506][T15880] usb 3-1: config 0 has an invalid interface number: 205 but max is 0 [ 1097.642785][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2764'. [ 1097.659076][T15880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.659113][T15880] usb 3-1: config 0 has no interface number 0 [ 1097.659499][T15880] usb 3-1: config 0 interface 205 has no altsetting 0 [ 1097.851200][T15880] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1097.985072][T15880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.076054][T15880] usb 3-1: Product: syz [ 1098.095926][T15880] usb 3-1: Manufacturer: syz [ 1098.168337][T15880] usb 3-1: SerialNumber: syz [ 1098.224721][ T808] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1098.325390][T15880] usb 3-1: config 0 descriptor?? [ 1098.432134][ T808] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1098.449577][T15880] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1098.471211][ T808] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1098.486564][T15880] dvb-usb: bulk message failed: -22 (3/0) [ 1098.588537][ T808] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1098.622035][ T808] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1098.703428][T18435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.723267][T18435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.855884][T15880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1098.878739][ T808] usb 6-1: Product: syz [ 1098.883686][ T808] usb 6-1: Manufacturer: syz [ 1098.894659][ T808] usb 6-1: SerialNumber: syz [ 1098.902296][T15880] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1098.920995][ T808] usb 6-1: config 0 descriptor?? [ 1098.948447][T15880] usb 3-1: media controller created [ 1099.044697][ T808] usb 6-1: selecting invalid altsetting 0 [ 1099.053107][T15880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.161028][T18456] sg_write: data in/out 393432/56 bytes for SCSI command 0x0-- guessing data in; [ 1099.161028][T18456] program syz.0.2766 not setting count and/or reply_len properly [ 1099.232941][T15880] dvb-usb: bulk message failed: -22 (6/0) [ 1099.265140][T15880] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1099.408016][T15880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 1099.635420][T15880] dvb-usb: schedule remote query interval to 150 msecs. [ 1099.710998][ T808] usb 6-1: USB disconnect, device number 2 [ 1099.728087][T15880] dvb-usb: bulk message failed: -22 (3/0) [ 1099.957007][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2768'. [ 1100.039905][T15874] dvb-usb: bulk message failed: -22 (1/0) [ 1100.065406][T15880] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1100.087473][T15874] dvb-usb: error while querying for an remote control event. [ 1100.331613][T15880] dvb-usb: bulk message failed: -22 (1/0) [ 1100.338879][T15880] dvb-usb: error while querying for an remote control event. [ 1100.436732][T15890] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1100.481525][T18475] fuse: Bad value for 'fd' [ 1100.516126][T18475] ipip0: entered promiscuous mode [ 1100.530441][T18475] ipip0: entered allmulticast mode [ 1100.604215][T15880] dvb-usb: bulk message failed: -22 (1/0) [ 1100.621098][T15880] dvb-usb: error while querying for an remote control event. [ 1100.635436][T15890] usb 4-1: too many configurations: 44, using maximum allowed: 8 [ 1100.683015][T15880] usb 3-1: USB disconnect, device number 56 [ 1100.759020][T15890] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1100.776106][T16937] udevd[16937]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.820103][T15890] usb 4-1: config 1 has no interface number 0 [ 1100.877633][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1100.932411][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 608 [ 1101.012963][T15880] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1101.051693][T15890] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.118067][T15890] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1101.183579][T15890] usb 4-1: config 1 has no interface number 0 [ 1101.213702][T18488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2772'. [ 1101.263301][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1101.365174][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 608 [ 1101.462941][T15890] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.551110][T15890] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1101.584225][T15890] usb 4-1: config 1 has no interface number 0 [ 1101.620538][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1101.688295][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 608 [ 1101.733405][T15890] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.801747][T15890] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1101.836705][T15890] usb 4-1: config 1 has no interface number 0 [ 1101.872360][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1101.926393][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 608 [ 1101.986068][T15890] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.052765][T15890] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1102.095309][T15890] usb 4-1: config 1 has no interface number 0 [ 1102.132380][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1102.182302][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 608 [ 1102.229614][T15890] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.288690][T15890] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1102.320212][T15890] usb 4-1: config 1 has no interface number 0 [ 1102.348713][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 1102.479190][T15890] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 608 [ 1102.546694][T15890] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.851978][T18494] fuse: Bad value for 'fd' [ 1102.898921][T15890] usb 4-1: unable to read config index 6 descriptor/start: -71 [ 1102.937001][T15890] usb 4-1: can't read configurations, error -71 [ 1103.072593][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1103.301108][T18501] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.313429][T18501] binder: 18498:18501 ioctl 4018620d 200000004a80 returned -16 [ 1103.384612][T15890] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 1103.546123][T15890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.558218][T15890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1103.593168][T15890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 1103.637901][T15890] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1103.703775][T15890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.771574][T18497] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1103.783034][T15890] hub 4-1:1.0: bad descriptor, ignoring hub [ 1103.813894][T15890] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1103.841119][T15890] cdc_wdm 4-1:1.0: skipping garbage [ 1103.864895][T15890] cdc_wdm 4-1:1.0: skipping garbage [ 1103.956383][T15890] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1103.979546][T15890] cdc_wdm 4-1:1.0: Unknown control protocol [ 1103.993279][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.001094][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.008706][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.016400][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.024158][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.032355][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.040436][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.047148][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.054436][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.061464][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.068781][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.076107][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.082686][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.090019][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.097249][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.104151][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.111417][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.119375][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.127073][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1104.134080][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1104.306408][ T31] kauditd_printk_skb: 241 callbacks suppressed [ 1104.306425][ T31] audit: type=1800 audit(1776907357.028:802): pid=18505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2776" name="bus" dev="tmpfs" ino=2913 res=0 errno=0 [ 1104.453443][T18505] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 1105.056109][ T808] usb 4-1: USB disconnect, device number 88 [ 1105.387750][ T808] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1105.554328][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 1105.567569][ T808] usb 4-1: config 0 has no interfaces? [ 1105.580224][ T808] usb 4-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 1105.598129][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.647011][ T808] usb 4-1: config 0 descriptor?? [ 1105.954399][ T808] usb 4-1: USB disconnect, device number 89 [ 1106.102376][T18520] fuse: Bad value for 'fd' [ 1106.223155][T18523] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1106.380152][T18528] fuse: Bad value for 'fd' [ 1108.028099][T18537] Invalid argument reading file caps for ./file0 [ 1108.066066][T18537] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1108.461584][ T12] wlan0: Trigger new scan to find an IBSS to join [ 1110.964170][T15890] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1111.116111][T15890] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1111.139112][T15890] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1111.190584][T15890] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1111.219794][T15890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.513015][T18564] netlink: 'syz.0.2789': attribute type 12 has an invalid length. [ 1111.567486][T15890] usb 6-1: usb_control_msg returned -32 [ 1111.585723][T15890] usbtmc 6-1:16.0: can't read capabilities [ 1111.854296][T15874] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1112.034212][T15874] usb 1-1: Using ep0 maxpacket: 16 [ 1112.044806][T15874] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.072703][T15874] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.129323][T15874] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1112.146021][T15874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.265375][T18568] vivid-004: disconnect [ 1112.352962][T18570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1112.531575][T18570] vivid-004: reconnect [ 1112.635998][T15874] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1113.251732][T18531] net_ratelimit: 10 callbacks suppressed [ 1113.251752][T18531] Set syz1 is full, maxelem 65536 reached [ 1113.532685][T18583] fuse: Bad value for 'fd' [ 1113.824273][T15873] usb 1-1: reset high-speed USB device number 59 using dummy_hcd [ 1114.027090][ T5941] usb 6-1: USB disconnect, device number 3 [ 1114.287684][T18591] fuse: Bad value for 'fd' [ 1114.980521][T15874] usb 1-1: USB disconnect, device number 59 [ 1115.220847][T18599] xt_policy: output policy not valid in PREROUTING and INPUT [ 1115.516858][T18605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2795'. [ 1115.780670][T18610] netlink: 'syz.5.2798': attribute type 4 has an invalid length. [ 1115.913404][T18611] netlink: 'syz.5.2798': attribute type 4 has an invalid length. [ 1116.478417][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.556994][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.864801][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'. [ 1117.227059][ T31] audit: type=1326 audit(1776907369.938:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1117.316887][ T31] audit: type=1326 audit(1776907369.938:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1117.385905][ T31] audit: type=1326 audit(1776907369.938:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1117.535488][ T31] audit: type=1326 audit(1776907369.938:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1117.750406][ T31] audit: type=1326 audit(1776907369.938:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6bc15d04e code=0x7ffc0000 [ 1117.840619][ T31] audit: type=1326 audit(1776907370.008:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1117.925094][ T31] audit: type=1326 audit(1776907370.098:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1118.065720][ T31] audit: type=1326 audit(1776907370.158:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1118.257681][ T31] audit: type=1326 audit(1776907370.158:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1118.430523][ T31] audit: type=1326 audit(1776907370.208:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18627 comm="syz.0.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa6bc19c819 code=0x7ffc0000 [ 1119.171247][T18645] tun0: tun_chr_ioctl cmd 1074025675 [ 1119.250462][T18645] tun0: persist enabled [ 1119.386488][T18653] tun0: tun_chr_ioctl cmd 1074025675 [ 1119.423871][T18653] tun0: persist disabled [ 1119.440251][T18659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1120.098702][T18669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2807'. [ 1122.946257][T18695] xt_policy: output policy not valid in PREROUTING and INPUT [ 1123.220693][T18694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2811'. [ 1123.395455][T18700] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1124.254598][T15874] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1124.518146][T15874] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1124.628161][T15874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.670265][T18715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.782134][T18716] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1124.827611][T15874] usb 1-1: config 0 has no interface number 0 [ 1125.006763][T10255] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1125.097606][T15874] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1125.127916][T15874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.361220][T15874] usb 1-1: Product: syz [ 1125.405176][T15874] usb 1-1: Manufacturer: syz [ 1125.431332][T15874] usb 1-1: SerialNumber: syz [ 1125.465936][T15874] usb 1-1: config 0 descriptor?? [ 1125.632039][T15874] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 1126.364263][ T808] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1126.608783][ T808] usb 4-1: Using ep0 maxpacket: 16 [ 1126.653885][ T808] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1126.759690][ T808] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 1126.885935][ T808] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1126.933865][ T808] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1127.044496][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.122937][ T808] usb 4-1: config 0 descriptor?? [ 1127.228744][T18726] vivid-004: disconnect [ 1127.395412][T18727] vivid-004: reconnect [ 1128.038543][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 1128.068353][T15874] usb 1-1: USB disconnect, device number 60 [ 1128.444833][ T5941] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1128.839919][ T5941] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1128.910470][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.021454][ T808] usbhid 4-1:0.0: can't add hid device: -71 [ 1129.076656][ T5941] usb 5-1: Product: syz [ 1129.103914][ T5941] usb 5-1: Manufacturer: syz [ 1129.137018][ T808] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1129.206118][ T5941] usb 5-1: SerialNumber: syz [ 1129.458705][ T808] usb 4-1: USB disconnect, device number 90 [ 1130.181806][ T5941] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1130.385114][ T5941] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1131.542910][ T5941] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1131.663674][ T5941] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1131.737768][ T5941] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1131.909133][ T5941] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1132.005876][ T5941] usb 5-1: USB disconnect, device number 77 [ 1132.939108][T18771] xt_policy: output policy not valid in PREROUTING and INPUT [ 1133.065358][T18773] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2826'. [ 1133.450417][T10255] bond0 (unregistering): Released all slaves [ 1133.759937][T10255] !: left promiscuous mode [ 1134.491210][T18790] random: crng reseeded on system resumption [ 1135.986929][T18809] netlink: zone id is out of range [ 1136.700925][T18811] vivid-000: disconnect [ 1136.896879][T18811] vivid-000: reconnect [ 1137.001802][ T5506] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1137.212419][T18817] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1137.390250][ T31] audit: type=1400 audit(1776907390.108:813): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=18813 comm="syz.4.2832" [ 1137.426822][T18827] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 1137.426822][T18827] program syz.3.2833 not setting count and/or reply_len properly [ 1139.000935][ T5506] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1139.643367][ T5506] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1140.035003][ T31] audit: type=1326 audit(1776907392.738:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d4f9c819 code=0x7ffc0000 [ 1140.166769][T18880] netlink: 'syz.4.2837': attribute type 4 has an invalid length. [ 1140.182922][ T31] audit: type=1326 audit(1776907392.818:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d4f9c819 code=0x7ffc0000 [ 1140.286946][ T31] audit: type=1326 audit(1776907392.978:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f67d4f9c819 code=0x7ffc0000 [ 1140.338798][T10255] hsr_slave_0: left promiscuous mode [ 1140.344504][T18878] tipc: Failed to remove unknown binding: 66,1,1/0:752698075/752698077 [ 1140.365644][ T31] audit: type=1326 audit(1776907393.088:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d4f9c819 code=0x7ffc0000 [ 1140.469270][ T31] audit: type=1326 audit(1776907393.128:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18871 comm="syz.2.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67d4f9c819 code=0x7ffc0000 [ 1140.552068][T10255] hsr_slave_1: left promiscuous mode [ 1140.634312][ T1230] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1140.817716][ T1230] usb 5-1: Using ep0 maxpacket: 16 [ 1140.865987][ T1230] usb 5-1: config 0 has no interfaces? [ 1140.888982][ T1230] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1140.927837][ T1230] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1140.966354][ T1230] usb 5-1: Manufacturer: syz [ 1141.016445][ T1230] usb 5-1: config 0 descriptor?? [ 1141.765035][T15880] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1142.093325][T15880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.100307][T15880] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1144.224235][ T1230] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1144.239377][T15880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.316419][T15880] usb 4-1: Product: syz [ 1144.406334][ T1230] usb 1-1: Using ep0 maxpacket: 8 [ 1144.433393][ T1230] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1144.468092][ T1230] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1144.536200][T15880] usb 4-1: config 0 descriptor?? [ 1144.551046][ T1230] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1144.585996][T15880] usb 4-1: can't set config #0, error -71 [ 1144.599730][ T1230] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.642374][ T1230] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.708053][T18921] netlink: 'syz.3.2842': attribute type 4 has an invalid length. [ 1144.719096][ T1230] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1144.771376][ T1230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.934025][T15880] usb 4-1: USB disconnect, device number 91 [ 1145.160842][ T1230] usb 1-1: usb_control_msg returned -32 [ 1145.186766][ T1230] usbtmc 1-1:16.0: can't read capabilities [ 1145.432891][ T1230] usb 1-1: USB disconnect, device number 61 [ 1145.697834][T18914] misc userio: Invalid payload size [ 1145.767368][ T5506] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1146.708738][T15874] usb 5-1: USB disconnect, device number 78 [ 1147.400662][T18947] vivid-006: disconnect [ 1147.532207][T18939] vivid-006: reconnect [ 1147.558967][T10255] IPVS: stop unused estimator thread 0... [ 1147.591510][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1149.141343][T18966] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2848'. [ 1149.478637][T18974] vivid-000: disconnect [ 1149.506080][T18974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1149.529042][T18974] vivid-000: reconnect [ 1149.545475][T18982] kAFS: unable to lookup cell 'ÿ' [ 1149.568029][T18982] kAFS: unable to lookup cell '(,c¾Ì' [ 1151.802208][T19005] netlink: 'syz.0.2854': attribute type 4 has an invalid length. [ 1153.154258][T15874] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1153.176020][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2857'. [ 1153.314145][T15874] usb 1-1: Using ep0 maxpacket: 16 [ 1153.325872][T15874] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1153.347279][T15874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.413569][T15874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1153.444947][ T5941] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1153.474754][T15874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1153.491857][T15874] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1153.521314][T15874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.567736][T15874] usb 1-1: config 0 descriptor?? [ 1153.675786][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 1153.685260][ T5941] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1153.704272][ T5941] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1153.732214][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1153.745758][ T5941] usb 4-1: config 1 has no interface number 0 [ 1153.753373][ T5941] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1153.768617][ T5941] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1153.790677][ T5941] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1153.822828][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.872496][ T5941] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1154.046614][T15874] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001E/input/input43 [ 1154.068030][ T5941] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1154.211944][T15874] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.001E/input/input44 [ 1154.337065][T15874] kye 0003:0458:5013.001E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 1154.767895][ T5941] usb 4-1: USB disconnect, device number 92 [ 1154.898466][ T5941] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1155.141304][T19026] vivid-000: disconnect [ 1155.171146][T19026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1155.201840][T19026] vivid-000: reconnect [ 1155.220901][T19033] usb usb8: usbfs: process 19033 (syz.4.2859) did not claim interface 0 before use [ 1155.324266][ T5941] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 1155.464227][ T5941] usb 1-1: device descriptor read/64, error -32 [ 1155.478461][T19036] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 1155.527642][T19036] CPU: 0 UID: 0 PID: 19036 Comm: syz.0.2856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.527667][T19036] Tainted: [L]=SOFTLOCKUP [ 1155.527672][T19036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1155.527688][T19036] Call Trace: [ 1155.527695][T19036] [ 1155.527700][T19036] dump_stack_lvl+0xe8/0x150 [ 1155.527724][T19036] sysfs_warn_dup+0x8e/0xa0 [ 1155.527737][T19036] sysfs_do_create_link_sd+0xc0/0x110 [ 1155.527751][T19036] device_add_class_symlinks+0x1cf/0x240 [ 1155.527771][T19036] device_add+0x475/0xbb0 [ 1155.527788][T19036] wiphy_register+0x1dc5/0x2dc0 [ 1155.527811][T19036] ? __pfx_wiphy_register+0x10/0x10 [ 1155.527825][T19036] ? __pfx_netdev_run_todo+0x10/0x10 [ 1155.527840][T19036] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1155.527860][T19036] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1155.527877][T19036] ieee80211_register_hw+0x3d82/0x4a70 [ 1155.527900][T19036] ? ieee80211_register_hw+0x1971/0x4a70 [ 1155.527931][T19036] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1155.527947][T19036] ? __asan_memset+0x22/0x50 [ 1155.527959][T19036] ? __hrtimer_setup+0x1b7/0x260 [ 1155.527970][T19036] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1155.527986][T19036] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 1155.528013][T19036] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1155.528024][T19036] ? kstrndup+0xbf/0x160 [ 1155.528044][T19036] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1155.528075][T19036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1155.528091][T19036] ? rcu_is_watching+0x15/0xb0 [ 1155.528103][T19036] ? trace_kmalloc+0x2a/0xf0 [ 1155.528120][T19036] ? __nla_parse+0x40/0x60 [ 1155.528135][T19036] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1155.528151][T19036] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1155.528169][T19036] genl_family_rcv_msg_doit+0x22a/0x330 [ 1155.528186][T19036] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1155.528207][T19036] ? bpf_lsm_capable+0x9/0x20 [ 1155.528222][T19036] ? security_capable+0x7e/0x2c0 [ 1155.528242][T19036] genl_rcv_msg+0x61c/0x7a0 [ 1155.528259][T19036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1155.528271][T19036] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1155.528283][T19036] ? __pfx_ref_tracker_free+0x10/0x10 [ 1155.528300][T19036] netlink_rcv_skb+0x232/0x4b0 [ 1155.528319][T19036] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1155.528334][T19036] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1155.528358][T19036] ? down_read+0x270/0x2e0 [ 1155.528373][T19036] ? genl_rcv+0xd/0x40 [ 1155.528386][T19036] genl_rcv+0x28/0x40 [ 1155.528398][T19036] netlink_unicast+0x75c/0x8e0 [ 1155.528419][T19036] netlink_sendmsg+0x813/0xb40 [ 1155.528435][T19036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1155.528447][T19036] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1155.528459][T19036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1155.528473][T19036] ____sys_sendmsg+0x972/0x9f0 [ 1155.528486][T19036] ? __might_fault+0xaf/0x130 [ 1155.528501][T19036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1155.528517][T19036] ? import_iovec+0x73/0xa0 [ 1155.528531][T19036] ___sys_sendmsg+0x2a5/0x360 [ 1155.528542][T19036] ? __lock_acquire+0x6b5/0x2cf0 [ 1155.528560][T19036] ? __pfx____sys_sendmsg+0x10/0x10 [ 1155.528576][T19036] ? futex_wait+0x2a2/0x390 [ 1155.528603][T19036] ? __fget_files+0x2a/0x420 [ 1155.528614][T19036] ? __fget_files+0x3a0/0x420 [ 1155.528639][T19036] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1155.528660][T19036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1155.528687][T19036] ? rcu_is_watching+0x15/0xb0 [ 1155.528714][T19036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.528736][T19036] do_syscall_64+0x15f/0xf80 [ 1155.528750][T19036] ? trace_irq_disable+0x3b/0x140 [ 1155.528766][T19036] ? clear_bhb_loop+0x40/0x90 [ 1155.528780][T19036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.528790][T19036] RIP: 0033:0x7fa6bc19c819 [ 1155.528811][T19036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.528822][T19036] RSP: 002b:00007fa6bd0de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1155.528837][T19036] RAX: ffffffffffffffda RBX: 00007fa6bc416180 RCX: 00007fa6bc19c819 [ 1155.528845][T19036] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 1155.528853][T19036] RBP: 00007fa6bc232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1155.528860][T19036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.528867][T19036] R13: 00007fa6bc416218 R14: 00007fa6bc416180 R15: 00007fa6bc53fa48 [ 1155.528884][T19036] [ 1156.214165][ T5941] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 1156.344583][ T5941] usb 1-1: device descriptor read/64, error -32 [ 1156.453228][T19047] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2861'. [ 1156.584960][ T5941] usb 1-1: reset high-speed USB device number 62 using dummy_hcd [ 1156.617515][ T5941] usb 1-1: device descriptor read/8, error -32 [ 1157.511758][ T1230] usb 1-1: USB disconnect, device number 62 [ 1157.829644][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2864'. [ 1159.318743][T19106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1161.253251][T19140] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2871'. [ 1161.580606][T19135] vivid-006: disconnect [ 1161.620739][T19135] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.890131][T19131] vivid-006: reconnect [ 1162.088133][T19151] vivid-000: disconnect [ 1162.136588][T19151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.174431][T19151] vivid-000: reconnect [ 1162.925425][T19173] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2875'. [ 1164.044132][ T1230] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1164.183650][T19189] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2878'. [ 1164.220697][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1164.251098][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1164.273396][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1164.295692][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1164.311000][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1164.337138][ T1230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1164.369174][ T1230] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1164.381150][ T1230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.392099][ T1230] usb 6-1: Product: syz [ 1164.398117][ T1230] usb 6-1: Manufacturer: syz [ 1164.410074][ T1230] usb 6-1: SerialNumber: syz [ 1164.430539][ T1230] usb 6-1: config 0 descriptor?? [ 1164.501475][ T1230] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 1164.528204][ T1230] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 1164.567439][T19201] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1165.444472][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2881'. [ 1166.510069][T19223] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 1166.579532][T19226] netlink: 'syz.0.2884': attribute type 4 has an invalid length. [ 1167.206347][T15880] usb 6-1: USB disconnect, device number 4 [ 1167.214369][ T1230] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1167.502056][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1167.537782][ T1230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1167.604601][ T1230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1167.654782][ T1230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1167.718655][ T1230] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1167.752469][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.789331][ T1230] usb 3-1: Product: syz [ 1167.804478][T15880] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1167.827314][ T1230] usb 3-1: Manufacturer: syz [ 1167.847356][ T1230] usb 3-1: SerialNumber: syz [ 1167.897514][ T1230] usb 3-1: config 0 descriptor?? [ 1167.928981][ T1230] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 1168.006679][T15880] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.083475][T15880] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1168.121484][T15880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.161240][T15880] usb 4-1: Product: syz [ 1168.175983][T15880] usb 4-1: Manufacturer: syz [ 1168.203015][T15880] usb 4-1: SerialNumber: syz [ 1168.249329][T15880] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1168.463741][T15880] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1168.583947][T15880] usb 4-1: USB disconnect, device number 93 [ 1169.000738][T19253] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1169.401470][T19260] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2890'. [ 1170.308536][ T1230] scsi host1: usb-storage 3-1:0.0 [ 1170.412764][ T1230] usb 3-1: USB disconnect, device number 57 [ 1170.994685][T15880] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1171.184236][T15880] usb 1-1: Using ep0 maxpacket: 16 [ 1171.216606][T15880] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1171.265436][T15880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.303909][T15880] usb 1-1: Product: syz [ 1171.320685][T15880] usb 1-1: Manufacturer: syz [ 1171.340360][T15880] usb 1-1: SerialNumber: syz [ 1171.367722][T15880] usb 1-1: config 0 descriptor?? [ 1171.403223][T15880] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 1171.621567][T15880] usb 1-1: USB disconnect, device number 63 [ 1172.282674][T19300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1172.294773][ T1230] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1172.303713][T19300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2898'. [ 1172.418341][T19300] netlink: 'syz.0.2898': attribute type 4 has an invalid length. [ 1172.464386][ T1230] usb 5-1: Using ep0 maxpacket: 8 [ 1172.480747][ T1230] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1172.498663][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.518627][ T1230] usb 5-1: Product: syz [ 1172.528626][ T1230] usb 5-1: Manufacturer: syz [ 1172.542263][ T1230] usb 5-1: SerialNumber: syz [ 1172.558705][ T1230] usb 5-1: config 0 descriptor?? [ 1172.576872][ T1230] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1172.791508][ T1230] gspca_sonixj: reg_w1 err -71 [ 1172.818398][ T1230] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1172.868891][ T1230] usb 5-1: USB disconnect, device number 79 [ 1173.595401][ T5941] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1173.754191][ T1230] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1173.767039][ T5941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.804931][ T5941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1173.814927][ T5941] usb 1-1: config 1 has no interface number 0 [ 1173.827974][ T5941] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1173.847067][ T5941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1173.858106][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.873502][ T5941] usb 1-1: Product: syz [ 1173.892377][ T5941] usb 1-1: Manufacturer: syz [ 1173.901524][ T5941] usb 1-1: SerialNumber: syz [ 1173.915900][ T5941] usb 1-1: selecting invalid altsetting 1 [ 1173.935929][ T1230] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1173.947127][ T1230] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1173.964398][ T1230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1173.989599][ T1230] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1174.008790][ T1230] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 1174.034811][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 1174.056012][ T1230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1174.074891][ T1230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1174.112543][ T1230] usb 5-1: string descriptor 0 read error: -22 [ 1174.119343][ T1230] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1174.130374][ T5941] cdc_ncm 1-1:1.1: bind() failure [ 1174.149517][ T5941] usb 1-1: USB disconnect, device number 64 [ 1174.178428][ T1230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.218609][ T1230] usb 5-1: config 0 descriptor?? [ 1174.241339][ T1230] hub 5-1:0.0: bad descriptor, ignoring hub [ 1174.251528][ T1230] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1174.310952][T19312] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2902'. [ 1174.322957][T19312] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1174.564973][ T5941] usb 5-1: USB disconnect, device number 80 [ 1174.573562][T19316] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2903'. [ 1175.554158][ T5941] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1175.789950][ T5941] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1175.813752][ T5941] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1175.827375][ T5941] usb 4-1: Product: syz [ 1175.854220][ T5941] usb 4-1: Manufacturer: syz [ 1175.881065][ T5941] usb 4-1: SerialNumber: syz [ 1175.916108][ T5941] usb 4-1: config 0 descriptor?? [ 1176.159846][ T5941] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v29 fw v73.0.0 (1 channels) [ 1176.174171][T15880] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1176.345515][T15880] usb 6-1: Using ep0 maxpacket: 32 [ 1176.362393][ T5941] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1176.368101][T15880] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1176.405872][ T5941] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1176.418940][T15880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.460082][T15880] usb 6-1: Product: syz [ 1176.486513][T15880] usb 6-1: Manufacturer: syz [ 1176.526258][T15880] usb 6-1: SerialNumber: syz [ 1176.550528][T15880] usb 6-1: config 0 descriptor?? [ 1176.574864][T15880] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1176.605497][ T5941] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 1176.625141][ T5941] usb 4-1: USB disconnect, device number 94 [ 1176.707039][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1176.738938][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1176.779443][T19337] netlink: 'syz.0.2909': attribute type 4 has an invalid length. [ 1177.124229][T15874] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1177.312966][T15874] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1177.341378][T15874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.359141][T15874] usb 5-1: config 0 descriptor?? [ 1177.437540][T15880] gspca_ov534_9: reg_w failed -71 [ 1177.870550][T19357] fuse: Bad value for 'fd' [ 1177.884251][T15880] gspca_ov534_9: Unknown sensor 0000 [ 1177.884346][T15880] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1177.923364][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.936222][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.002313][T15880] usb 6-1: USB disconnect, device number 5 [ 1178.188982][T19358] netlink: 'syz.4.2911': attribute type 10 has an invalid length. [ 1178.251121][T19358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.311421][T19358] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1178.385183][T19364] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2915'. [ 1178.433550][ T5941] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1178.588238][ T5941] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1178.637139][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.718483][ T5941] usb 1-1: Product: syz [ 1178.748684][ T5941] usb 1-1: Manufacturer: syz [ 1178.791331][ T5941] usb 1-1: SerialNumber: syz [ 1178.834863][ T5941] usb 1-1: config 0 descriptor?? [ 1178.868864][ T5941] hub 1-1:0.0: bad descriptor, ignoring hub [ 1178.913564][ T5941] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1179.102793][ T5941] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1179.238506][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1179.305563][ T5941] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1179.399704][ T5941] usb 1-1: media controller created [ 1179.437171][T19375] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2917'. [ 1179.488697][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1179.727016][ T5941] DVB: Unable to find symbol dib7000p_attach() [ 1179.759274][ T5941] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1179.950919][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found [ 1179.966218][ T5941] Registered IR keymap rc-empty [ 1179.995702][ T5941] dvb-usb: could not initialize remote control. [ 1180.021572][ T5941] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1180.428077][T15880] usb 5-1: USB disconnect, device number 81 [ 1180.618873][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2920'. [ 1180.952938][T19397] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1181.902133][T19409] vivid-008: disconnect [ 1181.969429][T19409] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.158633][T19404] vivid-008: reconnect [ 1183.108727][T19426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2928'. [ 1183.164273][T15880] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1183.334523][T15880] usb 3-1: Using ep0 maxpacket: 8 [ 1183.348072][T15880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1183.367055][T15880] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1183.387570][T15880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.425625][T15880] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1183.457277][T15880] usb 3-1: config 1 has no interface number 1 [ 1183.474871][T15880] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1183.521634][T15880] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.550374][T19436] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1183.569669][T15880] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1183.599778][T15880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1183.630107][T15880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.660377][T19436] netlink: 'syz.5.2933': attribute type 4 has an invalid length. [ 1183.671121][T15880] usb 3-1: Product: syz [ 1183.681901][T15880] usb 3-1: Manufacturer: syz [ 1183.693459][T15880] usb 3-1: SerialNumber: syz [ 1183.725509][T15880] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1183.752595][T15880] usb 3-1: MIDIStreaming interface descriptor not found [ 1184.149817][T15880] usb 3-1: USB disconnect, device number 58 [ 1184.414904][ T5941] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1184.594856][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 1184.619648][ T5941] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1184.658761][ T5941] usb 4-1: config 0 has no interface number 0 [ 1184.680943][ T5941] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1184.720698][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1184.755981][ T5941] usb 4-1: Product: syz [ 1184.781360][ T5941] usb 4-1: SerialNumber: syz [ 1184.813640][ T5941] usb 4-1: config 0 descriptor?? [ 1184.846865][ T5941] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input48 [ 1185.108253][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.119922][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.127546][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.135333][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.143200][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.151776][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.159427][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.167957][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.176375][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.184997][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1185.196804][ T5941] usb 4-1: USB disconnect, device number 95 [ 1185.203917][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1185.246641][ T5941] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1185.657858][T19467] netlink: 'syz.4.2941': attribute type 4 has an invalid length. [ 1185.711816][T19457] vivid-004: disconnect [ 1185.770007][T19457] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1185.987800][T19451] vivid-004: reconnect [ 1187.898764][T19509] fuse: Bad value for 'fd' [ 1187.954464][T19509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1189.359902][T19530] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 1189.668179][ T1230] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1189.717259][T19522] vivid-000: disconnect [ 1189.769986][T19522] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.856258][ T1230] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1189.906797][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.958240][ T1230] usb 4-1: Product: syz [ 1189.965105][T19516] vivid-000: reconnect [ 1189.979371][ T1230] usb 4-1: Manufacturer: syz [ 1190.012497][ T1230] usb 4-1: SerialNumber: syz [ 1190.080373][ T1230] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1190.161599][ T5941] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1191.334363][ T5941] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1191.379365][ T5941] ath9k_htc: Failed to initialize the device [ 1191.697621][ T5941] usb 4-1: ath9k_htc: USB layer deinitialized [ 1192.054778][ T1230] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1192.244995][ T1230] usb 3-1: Using ep0 maxpacket: 8 [ 1192.270353][ T1230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.298814][ T1230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1192.309284][ T1230] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1192.323614][ T1230] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 1192.338665][ T1230] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 1192.352587][ T1230] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1192.367024][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.446361][ T1230] hub 3-1:1.0: bad descriptor, ignoring hub [ 1192.473732][ T1230] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1192.499325][ T1230] cdc_wdm 3-1:1.0: skipping garbage [ 1192.521098][ T1230] cdc_wdm 3-1:1.0: skipping garbage [ 1192.555038][ T1230] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1192.582442][T15880] usb 4-1: USB disconnect, device number 96 [ 1192.625415][T15877] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1192.766998][ T5941] usb 3-1: USB disconnect, device number 59 [ 1192.804325][T15877] usb 6-1: Using ep0 maxpacket: 16 [ 1192.821755][T15877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.863329][T15877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.965856][T15877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1192.995750][T18310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1193.017256][T18310] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1193.027350][T18310] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1193.041746][T18310] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1193.051482][T18310] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1193.076668][T15877] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1193.090843][T15877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.180868][T15877] usb 6-1: config 0 descriptor?? [ 1193.632622][T15877] input: HID 0955:7214 Haptics as /devices/virtual/input/input49 [ 1193.675300][T19560] vivid-006: disconnect [ 1193.806277][T19569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.922232][T15877] shield 0003:0955:7214.001F: Registered Thunderstrike controller [ 1193.932691][T15877] shield 0003:0955:7214.001F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1194.026986][T15877] usb 6-1: USB disconnect, device number 6 [ 1194.037794][T19557] vivid-006: reconnect [ 1194.049064][ T1230] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1194.094875][ T1230] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1194.129797][ T1230] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1194.146800][ T1230] shield 0003:0955:7214.001F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1194.327222][T19562] chnl_net:caif_netlink_parms(): no params data found [ 1194.404361][T11653] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1194.574760][T19562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.585001][T11653] usb 3-1: Using ep0 maxpacket: 16 [ 1194.600813][T11653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.624491][T11653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.632064][T19562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.637282][T11653] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1194.659079][T11653] usb 3-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 1194.668721][T11653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.680397][T11653] usb 3-1: config 0 descriptor?? [ 1194.715284][T19562] bridge_slave_0: entered allmulticast mode [ 1194.744738][T19562] bridge_slave_0: entered promiscuous mode [ 1194.767478][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2980'. [ 1194.782758][T19562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.793438][T19562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.805663][T19562] bridge_slave_1: entered allmulticast mode [ 1194.817114][T19562] bridge_slave_1: entered promiscuous mode [ 1194.967785][T19562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.978087][T19597] xt_hashlimit: size too large, truncated to 1048576 [ 1194.989160][T19562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.126582][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.137601][T19562] team0: Port device team_slave_0 added [ 1195.154007][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.174467][T18310] Bluetooth: hci4: command tx timeout [ 1195.189635][T19562] team0: Port device team_slave_1 added [ 1195.211704][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.253253][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.302832][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.338758][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.367473][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.387394][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.397846][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.408249][T11653] wacom 0003:056A:0315.0020: unknown main item tag 0x0 [ 1195.433002][T11653] usb 3-1: USB disconnect, device number 60 [ 1195.444967][T19562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.468528][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.544911][T19562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.562741][T19562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1195.579189][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1195.629206][T19562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1195.776499][T19562] hsr_slave_0: entered promiscuous mode [ 1195.791819][T19562] hsr_slave_1: entered promiscuous mode [ 1195.808059][T19562] debugfs: 'hsr0' already exists in 'hsr' [ 1195.821249][T19562] Cannot create hsr debugfs directory [ 1196.005544][T19622] xt_policy: output policy not valid in PREROUTING and INPUT [ 1196.877368][T19627] vivid-004: disconnect [ 1196.938756][T19627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1197.140582][T19623] vivid-004: reconnect [ 1197.153816][T19562] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1197.255035][ T5852] Bluetooth: hci4: command tx timeout [ 1197.290476][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1197.326621][T19562] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1197.371538][T19639] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2990'. [ 1197.375622][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1197.449710][T19562] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1197.525555][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1197.570767][T19562] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1197.669495][T19562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1197.701860][T19643] usb usb8: usbfs: process 19643 (syz.2.2997) did not claim interface 0 before use [ 1197.814221][T15880] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1197.893586][T19562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.925855][T19562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.952446][T19652] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 2, id = 0 [ 1197.962295][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.972615][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.986417][T15880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 4 [ 1198.028143][T15880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 13368, setting to 1023 [ 1198.069965][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.078263][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.107271][T15880] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1198.144226][T15880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.176276][T15880] usb 6-1: Product: syz [ 1198.186344][T15880] usb 6-1: Manufacturer: syz [ 1198.199200][T15880] usb 6-1: SerialNumber: syz [ 1198.226638][T15880] usb 6-1: config 0 descriptor?? [ 1198.230085][T19562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.352299][T19562] veth0_vlan: entered promiscuous mode [ 1198.365129][ T1230] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1198.399978][T19562] veth1_vlan: entered promiscuous mode [ 1198.477521][T15880] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1198.489757][T19562] veth0_macvtap: entered promiscuous mode [ 1198.526995][ T1230] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1198.539599][T19562] veth1_macvtap: entered promiscuous mode [ 1198.551788][T15880] usb 6-1: USB disconnect, device number 7 [ 1198.553441][ T1230] usb 3-1: config 0 has no interface number 0 [ 1198.589007][ T1230] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1198.605216][T19562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.612993][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.636930][T19562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.644833][ T1230] usb 3-1: Product: syz [ 1198.649131][ T1230] usb 3-1: Manufacturer: syz [ 1198.658482][ T1230] usb 3-1: SerialNumber: syz [ 1198.667792][T10255] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.696317][ T1230] usb 3-1: config 0 descriptor?? [ 1198.721547][ T1230] usb 3-1: selecting invalid altsetting 1 [ 1198.742509][ T1230] dvb_ttusb_budget: ttusb_init_controller: error [ 1198.749856][ T1230] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1198.770884][T10255] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.789078][T10255] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.836859][T10255] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.917657][T19654] ------------[ cut here ]------------ [ 1198.924286][T19654] usb 1-1: BOGUS control dir, pipe 80004180 doesn't match bRequestType c0 [ 1198.936244][T19654] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.2.2999/19654 [ 1198.947694][T19654] Modules linked in: [ 1198.953604][T19654] CPU: 0 UID: 0 PID: 19654 Comm: syz.2.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.966067][T19654] Tainted: [L]=SOFTLOCKUP [ 1198.971053][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1198.983181][T19654] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1198.990106][T19654] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1199.004751][T15880] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1199.011010][T19654] RSP: 0018:ffffc9000d33f948 EFLAGS: 00010246 [ 1199.027296][T19654] RAX: 0000000000000000 RBX: ffff888063bcbb00 RCX: 0000000080004180 [ 1199.035956][T19654] RDX: ffff88803148e200 RSI: ffffffff8c80a360 RDI: ffffffff9040e2e0 [ 1199.044633][T19654] RBP: 1ffff1100adac2e4 R08: 00000000000000c0 R09: 0000000000000000 [ 1199.052905][T19654] R10: ffffc9000d33fa40 R11: fffff52001a67f54 R12: ffff888026a1c100 [ 1199.062159][T19654] R13: ffff888056d61720 R14: 0000000080004180 R15: ffff88803148e200 [ 1199.070604][T19654] FS: 00007f67d5d826c0(0000) GS:ffff888125214000(0000) knlGS:0000000000000000 [ 1199.080524][T19654] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1199.088425][T19654] CR2: 00007f79ab7fc2b0 CR3: 0000000051a04000 CR4: 00000000003526f0 [ 1199.096977][T19654] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1199.105742][T19654] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1199.114003][T19654] Call Trace: [ 1199.118429][T19654] [ 1199.121650][T19654] ? __init_swait_queue_head+0xa9/0x150 [ 1199.127534][T19654] usb_start_wait_urb+0x13f/0x5b0 [ 1199.132864][T19654] ? rcu_is_watching+0x15/0xb0 [ 1199.138440][T19654] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1199.145203][T19654] ? trace_kmalloc+0x2a/0xf0 [ 1199.150036][T19654] usb_control_msg+0x234/0x3e0 [ 1199.155386][T19654] dib0700_i2c_xfer+0xbb2/0xf80 [ 1199.161128][T19654] __i2c_transfer+0x79a/0x1f70 [ 1199.166350][T19654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1199.172457][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1199.179774][T19654] ? i2c_transfer+0xc8/0x2d0 [ 1199.184841][T19654] i2c_transfer+0x1cc/0x2d0 [ 1199.189492][T19654] i2cdev_ioctl_rdwr+0x460/0x740 [ 1199.194688][T19654] i2cdev_ioctl+0x6a5/0x880 [ 1199.199497][T19654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1199.205418][T19654] ? __fget_files+0x3a0/0x420 [ 1199.210400][T19654] ? __fget_files+0x2a/0x420 [ 1199.215715][T19654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1199.220781][T19654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1199.225991][T19654] __se_sys_ioctl+0xfc/0x170 [ 1199.230971][T19654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.238845][T19654] do_syscall_64+0x15f/0xf80 [ 1199.244180][T19654] ? trace_irq_disable+0x3b/0x140 [ 1199.249611][T19654] ? clear_bhb_loop+0x40/0x90 [ 1199.255048][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.261355][T19654] RIP: 0033:0x7f67d4f9c819 [ 1199.266708][T19654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.287974][T19654] RSP: 002b:00007f67d5d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.288265][T15880] usb 6-1: Using ep0 maxpacket: 32 [ 1199.296862][T19654] RAX: ffffffffffffffda RBX: 00007f67d5215fa0 RCX: 00007f67d4f9c819 [ 1199.296888][T19654] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 1199.296903][T19654] RBP: 00007f67d5032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1199.296917][T19654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.296930][T19654] R13: 00007f67d5216038 R14: 00007f67d5215fa0 R15: 00007f67d533fa48 [ 1199.347714][T19654] [ 1199.351123][T19654] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1199.358875][T19654] CPU: 0 UID: 0 PID: 19654 Comm: syz.2.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1199.371029][T19654] Tainted: [L]=SOFTLOCKUP [ 1199.376257][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1199.387111][T19654] Call Trace: [ 1199.390483][T19654] [ 1199.393495][T19654] vpanic+0x56c/0xa60 [ 1199.397650][T19654] ? __pfx__printk+0x10/0x10 [ 1199.402518][T19654] ? __pfx_vpanic+0x10/0x10 [ 1199.407216][T19654] ? is_bpf_text_address+0x292/0x2b0 [ 1199.412701][T19654] ? is_bpf_text_address+0x26/0x2b0 [ 1199.418133][T19654] panic+0xc5/0xd0 [ 1199.421941][T19654] ? __pfx_panic+0x10/0x10 [ 1199.426535][T19654] __warn+0x315/0x4c0 [ 1199.430602][T19654] ? usb_submit_urb+0x1053/0x18b0 [ 1199.435972][T19654] ? usb_submit_urb+0x1053/0x18b0 [ 1199.441082][T19654] __report_bug+0x29a/0x540 [ 1199.445862][T19654] ? usb_submit_urb+0x1053/0x18b0 [ 1199.451597][T19654] ? __pfx___report_bug+0x10/0x10 [ 1199.457091][T19654] ? lockdep_hardirqs_on+0x7a/0x110 [ 1199.462663][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1199.469929][T19654] report_bug_entry+0x19a/0x290 [ 1199.475535][T19654] ? usb_submit_urb+0x1115/0x18b0 [ 1199.480908][T19654] ? usb_submit_urb+0x111a/0x18b0 [ 1199.486540][T19654] handle_bug+0xce/0x200 [ 1199.490897][T19654] exc_invalid_op+0x1a/0x50 [ 1199.495699][T19654] asm_exc_invalid_op+0x1a/0x20 [ 1199.501010][T19654] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 1199.507195][T19654] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 1199.529761][T19654] RSP: 0018:ffffc9000d33f948 EFLAGS: 00010246 [ 1199.536468][T19654] RAX: 0000000000000000 RBX: ffff888063bcbb00 RCX: 0000000080004180 [ 1199.545883][T19654] RDX: ffff88803148e200 RSI: ffffffff8c80a360 RDI: ffffffff9040e2e0 [ 1199.554916][T19654] RBP: 1ffff1100adac2e4 R08: 00000000000000c0 R09: 0000000000000000 [ 1199.563899][T19654] R10: ffffc9000d33fa40 R11: fffff52001a67f54 R12: ffff888026a1c100 [ 1199.572302][T19654] R13: ffff888056d61720 R14: 0000000080004180 R15: ffff88803148e200 [ 1199.581039][T19654] ? usb_submit_urb+0x10a4/0x18b0 [ 1199.586560][T19654] ? __init_swait_queue_head+0xa9/0x150 [ 1199.592292][T19654] usb_start_wait_urb+0x13f/0x5b0 [ 1199.597752][T19654] ? rcu_is_watching+0x15/0xb0 [ 1199.602962][T19654] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1199.609228][T19654] ? trace_kmalloc+0x2a/0xf0 [ 1199.614838][T19654] usb_control_msg+0x234/0x3e0 [ 1199.620968][T19654] dib0700_i2c_xfer+0xbb2/0xf80 [ 1199.626141][T19654] __i2c_transfer+0x79a/0x1f70 [ 1199.631345][T19654] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1199.637612][T19654] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1199.644077][T19654] ? i2c_transfer+0xc8/0x2d0 [ 1199.649398][T19654] i2c_transfer+0x1cc/0x2d0 [ 1199.654279][T19654] i2cdev_ioctl_rdwr+0x460/0x740 [ 1199.659576][T19654] i2cdev_ioctl+0x6a5/0x880 [ 1199.664191][T19654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1199.669771][T19654] ? __fget_files+0x3a0/0x420 [ 1199.675419][T19654] ? __fget_files+0x2a/0x420 [ 1199.680893][T19654] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1199.686293][T19654] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1199.691347][T19654] __se_sys_ioctl+0xfc/0x170 [ 1199.696161][T19654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.702505][T19654] do_syscall_64+0x15f/0xf80 [ 1199.707567][T19654] ? trace_irq_disable+0x3b/0x140 [ 1199.713042][T19654] ? clear_bhb_loop+0x40/0x90 [ 1199.718369][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.725846][T19654] RIP: 0033:0x7f67d4f9c819 [ 1199.730499][T19654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.753949][T19654] RSP: 002b:00007f67d5d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.764602][T19654] RAX: ffffffffffffffda RBX: 00007f67d5215fa0 RCX: 00007f67d4f9c819 [ 1199.773974][T19654] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 1199.783173][T19654] RBP: 00007f67d5032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1199.792031][T19654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.800534][T19654] R13: 00007f67d5216038 R14: 00007f67d5215fa0 R15: 00007f67d533fa48 [ 1199.809312][T19654] [ 1199.814566][T19654] Kernel Offset: disabled [ 1199.819608][T19654] Rebooting in 86400 seconds..